Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
File:                     qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft (raw, json)
Hash identifier:          s3qrc3BRe7Mw77NnsKxHq4r3vT1IEPTNCwvLLvZ8yQI=
Subject key identifier:   C0:C6:3C:14:50:51:5F:7A:E1:36:10:40:96:70:E0:22:DE:FD:A1:98
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
Manifest number:          0170
Signing time:             Sun 05 Apr 2026 04:20:23 +0000
Manifest this update:     Sun 05 Apr 2026 04:20:22 +0000
Manifest next update:     Sun 12 Apr 2026 04:20:22 +0000
Files and hashes:         1: qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl (hash: lAwSodJWd1AzKJYxUEvRVAF0e8w0k/RNKr92KrKIYfE=)
                          2: 77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (hash: S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=)
                          3: 362B52EA31C511F0B796F75DC4F9AE02.roa (hash: 4saGenWnq38wSt4Z38V8afVK5ChkZJPpUWTM99qUpeo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Apr  5 04:20:22 2026 GMT
            Not After : Apr 12 04:20:22 2026 GMT
        Subject: CN=69d1e306-2a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:81:66:df:4d:71:ba:5c:c3:22:46:7c:59:
                    e7:f1:0f:2d:47:6f:5f:95:52:37:e4:e4:46:11:86:
                    b0:61:57:ed:f5:e6:c7:7a:09:69:8d:ba:8d:07:4a:
                    a4:89:b2:ae:4d:5e:8a:a1:8b:5e:ee:58:59:d2:f6:
                    c6:04:5e:2b:a5:fe:c6:88:a5:78:3a:54:82:17:75:
                    c0:92:23:fd:98:3b:22:24:64:8d:40:49:61:2f:3b:
                    36:7d:b9:35:10:c1:d6:4b:e8:82:9a:72:6e:92:a3:
                    d6:32:6f:82:a5:55:9c:e2:96:4d:b5:15:6c:c5:27:
                    c2:f9:b6:af:ef:75:2c:8a:23:3c:dd:71:c5:95:53:
                    f6:bc:b7:fd:ba:c3:e5:ba:62:02:69:da:81:13:8c:
                    86:d7:ce:c0:f1:c9:f3:55:b7:90:b8:88:4c:f1:df:
                    ac:45:e2:6e:19:64:fc:26:36:65:43:cb:02:8e:8d:
                    ba:fb:00:8d:bb:7f:aa:ab:e2:8a:ba:31:d9:e5:9f:
                    fb:c8:b3:f8:a7:2f:15:b3:b5:2a:c0:56:f0:fe:9a:
                    fa:73:61:e9:74:32:fc:96:2a:a0:f4:00:6c:d1:fe:
                    f2:8f:49:9d:63:a6:9f:84:c7:c1:e2:f9:4f:0f:86:
                    06:2e:10:9e:07:8e:9d:9c:a8:1c:f3:13:49:07:fa:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C6:3C:14:50:51:5F:7A:E1:36:10:40:96:70:E0:22:DE:FD:A1:98
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:b5:12:d0:b8:4a:47:75:e2:36:8d:75:81:36:24:bf:f9:
         ad:3b:37:a8:6b:c1:bd:96:d4:32:8b:f0:02:bf:86:e9:0e:bf:
         b7:af:11:2b:73:51:78:5e:ab:f5:54:8c:85:5e:12:c0:02:b9:
         8e:f7:7c:b2:9e:f5:58:a8:26:e6:ee:72:83:97:7f:53:57:04:
         8e:cb:12:33:e0:84:8f:37:e8:a3:17:6b:9a:0c:38:de:99:fd:
         a6:a8:79:82:c1:35:e5:bb:2b:9f:49:55:49:53:df:ca:91:65:
         f6:b3:d9:95:d3:6d:e2:1c:f4:4d:cc:16:97:ef:05:23:7b:12:
         7e:82:b1:49:73:c9:4f:90:69:2c:1b:67:b2:ee:ab:66:1f:44:
         7f:01:f2:c3:44:98:a4:03:11:11:d4:58:3c:45:bc:d7:95:e0:
         0f:b1:3e:ef:89:26:3c:1c:7f:fa:f9:2e:2c:c9:ad:e9:70:0b:
         95:78:90:1d:6d:bf:ca:b9:f6:79:95:2c:2b:c8:fc:92:d6:ec:
         c0:51:50:05:76:6e:eb:95:45:1d:53:b4:f3:dc:60:28:bc:e7:
         91:b0:b7:ae:90:3d:ad:0f:c2:4a:8b:88:34:e8:8e:83:83:69:
         b0:c7:6e:69:9d:ce:66:fb:fa:ec:68:b4:67:a9:b4:9b:47:7e:
         10:d8:ad:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA1RDcxMTAvBgNVBAUTKEFBNDQwNUIxQkZBOTZDOUM2OUIwMjkwMzNFRjQ4MUQ4
RjU4QTc3RTUwHhcNMjYwNDA1MDQyMDIyWhcNMjYwNDEyMDQyMDIyWjAYMRYwFAYD
VQQDEw02OWQxZTMwNi0yYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA372BZt9NcbpcwyJGfFnn8Q8tR29flVI35ORGEYawYVft9ebHeglpjbqNB0qk
ibKuTV6KoYte7lhZ0vbGBF4rpf7GiKV4OlSCF3XAkiP9mDsiJGSNQElhLzs2fbk1
EMHWS+iCmnJukqPWMm+CpVWc4pZNtRVsxSfC+bav73UsiiM83XHFlVP2vLf9usPl
umICadqBE4yG187A8cnzVbeQuIhM8d+sReJuGWT8JjZlQ8sCjo26+wCNu3+qq+KK
ujHZ5Z/7yLP4py8Vs7UqwFbw/pr6c2HpdDL8liqg9ABs0f7yj0mdY6afhMfB4vlP
D4YGLhCeB46dnKgc8xNJB/ok2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMDGPBRQ
UV964TYQQJZw4CLe/aGYMB8GA1UdIwQYMBaAFKpEBbG/qWycabApAz70gdj1infl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy85NkEzNkFBODE2
RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJKeHBzQ2tEUHZTQjJQV0tk
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2QtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9xa1FGc2ItcGJK
eHBzQ2tEUHZTQjJQV0tkLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKrG1EtC4Skd14jaNdYE2JL/5rTs3qGvBvZbUMovwAr+G6Q6/t68RK3NReF6r
9VSMhV4SwAK5jvd8sp71WKgm5u5yg5d/U1cEjssSM+CEjzfooxdrmgw43pn9pqh5
gsE15bsrn0lVSVPfypFl9rPZldNt4hz0TcwWl+8FI3sSfoKxSXPJT5BpLBtnsu6r
Zh9EfwHyw0SYpAMREdRYPEW815XgD7E+74kmPBx/+vkuLMmt6XALlXiQHW2/yrn2
eZUsK8j8ktbswFFQBXZu65VFHVO089xgKLznkbC3rpA9rQ/CSouINOiOg4NpsMdu
aZ3OZvv67Gi0Z6m0m0d+ENitfQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:18 2026 by rpki-client