Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File:                     Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier:          K7/7TUFkWEXHTqNsdynAyGUeWeJSGcdZ4k6WZTPEBUg=
Subject key identifier:   4E:7F:40:EA:B5:07:10:D2:05:28:C4:AC:50:94:D6:92:27:2F:63:18
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer:       /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial:       17E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number:          17D8
Signing time:             Sun 26 Apr 2026 16:28:00 +0000
Manifest this update:     Sun 26 Apr 2026 16:28:00 +0000
Manifest next update:     Sun 03 May 2026 16:28:00 +0000
Files and hashes:         1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: s2ftP+6zLLAAc+FJqqXjiweB7bzGjtijbO3lv1B5eNI=)
                          2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: R19qxLrIh1c+/g96rJpVUSyzG1wIPKCyqhlsnSxYpaw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 16:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6116 (0x17e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
        Validity
            Not Before: Apr 26 16:28:00 2026 GMT
            Not After : May  3 16:28:00 2026 GMT
        Subject: CN=69ee3d10-8f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:ea:93:af:07:00:f0:03:17:94:cc:48:ce:
                    94:6b:7d:e1:f0:6c:00:b8:8d:d5:10:9e:63:4c:5d:
                    86:ff:ab:5a:fc:8b:c5:d3:dc:69:56:26:bc:de:5d:
                    7b:b3:a5:fc:c3:e0:ec:92:97:7c:91:7e:bf:f6:33:
                    d5:52:b9:99:ff:cc:f9:6d:2f:23:7f:64:85:be:8c:
                    40:55:64:f9:6e:20:62:7c:03:cf:1b:e1:31:3f:aa:
                    3f:b3:90:a8:75:30:e2:68:f8:6d:cd:70:d3:27:c7:
                    42:81:3a:21:4f:74:11:f9:67:97:cf:7d:90:20:27:
                    19:a5:a9:14:df:5e:91:7d:07:23:7a:f1:00:be:4a:
                    9c:56:74:0f:e5:30:2f:09:f2:de:ad:c9:33:e8:6e:
                    72:62:d2:87:41:28:fe:da:36:63:78:4f:3c:c6:e0:
                    48:61:d6:5d:a4:08:65:8d:25:23:fe:5f:aa:fe:df:
                    4e:08:5d:b2:2e:7d:c1:00:7e:8f:96:ed:8d:dc:b9:
                    4b:f2:aa:f0:b4:14:1c:07:64:20:04:e8:8a:5f:c5:
                    c6:1b:83:f9:16:ae:05:51:01:dd:38:a0:1d:8c:8c:
                    20:16:1f:70:ea:5a:c0:b3:60:66:d3:89:5b:9d:71:
                    92:40:a2:55:ce:2a:d8:10:65:2b:0d:84:ce:da:a1:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7F:40:EA:B5:07:10:D2:05:28:C4:AC:50:94:D6:92:27:2F:63:18
            X509v3 Authority Key Identifier:
                keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b0:a8:4f:9b:7a:2a:5b:14:a3:d5:c9:cb:8c:ab:1f:77:71:
         c1:25:e0:6b:b2:36:98:ae:94:63:57:2a:9d:f0:42:98:2f:74:
         5c:41:15:3c:81:8e:6c:41:d3:c4:58:d5:53:a3:db:de:b0:71:
         0b:0b:66:ac:ea:f0:82:78:4c:b1:4f:98:89:68:f2:14:be:0e:
         4a:59:16:ba:8f:cb:0b:52:b2:f4:29:d3:d5:42:8d:ea:8c:d3:
         a0:af:91:87:9d:4f:c6:a9:66:65:6f:b4:ef:97:df:fe:5b:eb:
         c5:eb:2e:5d:69:75:3f:5f:a1:29:ea:e0:23:13:83:d4:06:0c:
         b8:3a:36:de:56:e3:a2:92:0c:03:6a:8f:51:84:cd:e3:66:26:
         13:aa:8c:1f:ac:ab:b9:23:e6:fc:98:2f:69:dd:bb:56:cf:85:
         c0:a7:13:e8:aa:b8:6c:a4:a2:bf:a8:b1:70:d2:7c:d8:ef:10:
         8a:49:71:bc:d5:39:8c:be:72:84:44:2b:8c:ce:51:64:95:7e:
         3b:fd:e1:62:79:3d:7d:c8:c4:ce:17:50:6a:02:98:21:38:75:
         43:97:4c:85:f8:30:27:0b:03:bf:33:34:11:90:79:8a:09:fd:
         b4:e5:70:f3:43:be:8c:b1:bb:96:0e:6e:4c:6d:61:c5:61:5c:
         e5:96:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:08:30 2026 by rpki-client