Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File:                     QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier:          /5leLalJA6OV86m3Q6cGyNgWw+e2VtyZpvAQ6kTt0VI=
Subject key identifier:   62:EE:CA:54:4B:10:9E:44:C7:97:32:A0:C4:5F:A8:76:27:04:46:EF
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer:       /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial:       0495
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number:          048C
Signing time:             Sat 04 Apr 2026 23:48:00 +0000
Manifest this update:     Sat 04 Apr 2026 23:47:59 +0000
Manifest next update:     Sat 11 Apr 2026 23:47:59 +0000
Files and hashes:         1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: mBosOULu3nXRT8/NYLuHNmCslxJDhE3ZmeMT59eg67Y=)
                          2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
        Validity
            Not Before: Apr  4 23:47:59 2026 GMT
            Not After : Apr 11 23:47:59 2026 GMT
        Subject: CN=69d1a330-e22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:1c:5e:20:e7:34:12:f9:50:af:2e:d1:10:
                    1a:8b:af:78:43:6e:e4:08:56:a4:5f:fc:1c:f6:9f:
                    e1:99:06:9b:e7:78:06:fb:25:fd:0f:aa:a7:97:c8:
                    fc:a4:3a:98:24:6b:4a:82:cc:3a:81:27:45:ff:3a:
                    f6:17:ce:5c:a7:23:e0:e6:39:db:58:c9:ee:89:d9:
                    fb:a5:94:60:dd:0b:49:3f:26:84:db:21:b2:31:3c:
                    58:07:89:6e:44:c9:b2:a0:36:a7:94:3c:c2:95:4c:
                    56:40:e2:7f:9e:68:ae:3b:ef:84:16:54:93:10:3a:
                    fb:dc:f4:4f:ae:01:8e:06:8c:30:b3:e4:9e:20:a2:
                    fc:8c:ca:c4:04:cc:db:4e:ab:11:c5:67:03:54:4e:
                    80:56:9c:61:04:df:e3:49:d6:83:96:a1:38:9d:b9:
                    c2:f4:6f:b6:52:8f:47:d4:f9:bc:fa:7b:8f:ce:93:
                    2a:09:ec:e2:e4:1c:f1:b5:3a:0a:d6:36:8c:82:5b:
                    b6:d0:19:5f:6d:cb:f5:c1:2b:1f:99:83:24:a7:55:
                    74:7c:26:05:bb:66:5f:f2:76:8c:5e:8f:e2:e2:59:
                    1a:65:aa:5b:9e:5f:b8:74:67:88:cc:23:d2:6b:46:
                    1c:b7:6f:bd:b2:70:6b:5f:bd:0e:de:61:44:32:cf:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:CA:54:4B:10:9E:44:C7:97:32:A0:C4:5F:A8:76:27:04:46:EF
            X509v3 Authority Key Identifier:
                keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9c:ed:01:4b:16:ea:f4:c9:42:84:6c:8d:a2:6a:6f:bc:c9:
         92:c4:e9:1d:5f:cf:94:8f:9a:71:87:fc:47:51:89:0e:0e:e1:
         3b:d8:6c:b4:5b:b8:2e:e2:b4:fa:f9:d3:ec:d3:d6:84:d8:63:
         1c:0f:ad:b9:57:3b:01:53:b2:4d:53:fb:b1:36:a9:65:35:9c:
         ed:c8:5a:09:06:de:4f:d6:0c:1a:54:35:d9:af:54:5d:65:53:
         74:3f:0a:a0:36:aa:65:d6:da:2a:22:4a:aa:52:2b:6c:95:2f:
         db:52:62:b5:51:93:b2:93:f1:a9:f1:f0:65:74:15:d4:a2:5f:
         c9:71:7c:51:86:5d:7a:a9:0a:57:d4:41:e3:c6:76:eb:95:51:
         cd:5e:a3:03:a2:6d:3b:1a:21:6e:68:9a:2d:bf:16:e2:e3:03:
         fe:a7:3a:4e:6e:41:df:ec:47:8b:41:6e:be:be:29:46:d6:92:
         87:3e:d8:c9:cb:a6:d3:db:58:13:48:a7:31:ec:ed:86:bc:47:
         ba:4a:62:0f:1f:4d:72:de:8e:05:c7:0b:ee:fe:9e:4e:55:d3:
         53:1a:61:65:f5:30:cc:23:6c:27:bc:39:eb:0d:58:66:a0:04:
         f9:d2:dd:79:ec:2b:35:d3:14:1c:74:61:f3:5b:cd:a6:e4:97:
         a5:cd:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:44 2026 by rpki-client