Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
File:                     qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json)
Hash identifier:          Pyf3Ka0+B4uoMZqEr8fa6vb32ZVeILvUmmmHOExZ2E4=
Subject key identifier:   5B:73:05:E7:C9:B3:B5:F3:21:EB:6B:C3:5A:3A:FF:9A:30:21:CE:42
Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
Certificate issuer:       /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Certificate serial:       08D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
Manifest number:          08C2
Signing time:             Sat 04 Apr 2026 20:13:10 +0000
Manifest this update:     Sat 04 Apr 2026 20:13:09 +0000
Manifest next update:     Sat 11 Apr 2026 20:13:09 +0000
Files and hashes:         1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: T5SIlM9e3hI0o32R8qmRSVSDtvPDKYm0aTsB9TX9Js8=)
                          2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: P9sNvR/Bcqt0bM7h111r4ZkTzU2KfMVGnEEXn/iTvs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
                          rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:13:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
        Validity
            Not Before: Apr  4 20:13:09 2026 GMT
            Not After : Apr 11 20:13:09 2026 GMT
        Subject: CN=69d170d6-8297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e5:b8:53:60:58:c5:ac:42:76:ee:26:7e:48:
                    c8:91:9c:df:62:92:2f:63:20:73:79:fb:b2:a1:95:
                    a1:6e:46:24:4a:09:b2:74:a1:17:2c:3f:f1:78:63:
                    76:00:6a:56:23:46:a5:f3:24:c5:06:b2:f9:28:84:
                    88:b4:e7:ec:76:d3:a0:5e:be:3d:d8:79:c7:35:93:
                    96:0e:57:44:27:43:6a:2a:70:69:62:ff:74:4a:ef:
                    ec:c1:45:fc:73:6a:f1:7a:55:7f:fc:43:89:fa:6d:
                    fd:9a:a8:26:d5:02:37:f1:96:ec:8d:5e:96:87:db:
                    20:ff:2d:d8:f7:53:ea:03:9f:b5:9f:f8:4b:cd:3d:
                    ca:66:55:7f:59:05:7c:9f:96:ca:66:5b:26:72:7e:
                    19:aa:95:21:6e:d5:34:73:9f:02:62:37:d6:50:39:
                    76:10:03:3f:20:02:fd:30:95:f0:c0:43:55:11:e2:
                    a8:ec:6a:27:ed:c2:97:ff:18:dd:4a:df:a8:26:a8:
                    cc:22:4f:4a:c2:3a:e9:40:d4:6b:8e:d6:8d:a5:c9:
                    63:52:45:d5:ba:90:0d:c0:6b:e2:75:07:cd:c6:7f:
                    02:ad:36:0f:41:21:e7:9c:b0:e9:b3:e5:0d:c4:c0:
                    1f:ad:dd:a3:89:46:72:8d:15:34:8b:2a:7e:b9:d0:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:73:05:E7:C9:B3:B5:F3:21:EB:6B:C3:5A:3A:FF:9A:30:21:CE:42
            X509v3 Authority Key Identifier:
                keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7c:7b:00:c4:96:66:f9:12:b5:8f:c5:13:6c:2f:f1:3e:e1:
         e7:02:ec:52:74:5b:7e:bf:ec:b9:5c:30:f5:b0:88:66:9b:ab:
         23:db:2b:b8:0b:09:b6:59:71:dd:9b:60:d3:f1:69:02:70:d7:
         2e:61:06:45:3d:1d:ff:44:11:1a:32:d9:66:56:9b:88:7e:e7:
         48:b0:64:42:9b:b0:70:c0:c5:0c:57:43:e2:3b:01:31:e8:04:
         5b:3f:fd:67:8f:79:ef:9a:1a:c8:4e:60:26:50:e8:1c:6f:34:
         c0:1b:60:4b:3f:71:67:cc:d3:de:b3:c6:1e:b8:4a:7e:dc:78:
         ee:e2:bb:73:07:3e:b9:ac:02:36:78:25:27:69:f6:b5:e6:bb:
         31:2f:b4:45:ca:0b:c8:78:0a:a0:22:f9:00:34:14:0b:16:2a:
         db:c2:63:d0:0a:d1:e4:82:29:f6:b2:4e:02:6e:2e:68:0f:77:
         9a:a3:f0:8a:0f:fe:73:aa:bf:23:29:3a:c9:5f:b2:45:34:71:
         f0:96:a7:21:1c:5b:5d:ea:7c:a4:08:31:9f:91:37:b9:0f:b5:
         6d:48:be:0b:c3:54:83:af:5c:bb:94:dc:46:bf:2d:b9:e1:45:
         43:31:0f:8e:33:10:5a:97:f0:e5:31:fa:b2:a3:da:b5:1e:ca:
         60:27:82:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OThENkIxMTAvBgNVBAUTKEE5MDIwQjYyNkY1MDQ2NDhFNERCRjZBNDIwNzZFODk5
NzNDNEFCQzAwHhcNMjYwNDA0MjAxMzA5WhcNMjYwNDExMjAxMzA5WjAYMRYwFAYD
VQQDEw02OWQxNzBkNi04Mjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uW4U2BYxaxCdu4mfkjIkZzfYpIvYyBzefuyoZWhbkYkSgmydKEXLD/xeGN2
AGpWI0al8yTFBrL5KISItOfsdtOgXr492HnHNZOWDldEJ0NqKnBpYv90Su/swUX8
c2rxelV//EOJ+m39mqgm1QI38ZbsjV6Wh9sg/y3Y91PqA5+1n/hLzT3KZlV/WQV8
n5bKZlsmcn4ZqpUhbtU0c58CYjfWUDl2EAM/IAL9MJXwwENVEeKo7Gon7cKX/xjd
St+oJqjMIk9KwjrpQNRrjtaNpcljUkXVupANwGvidQfNxn8CrTYPQSHnnLDps+UN
xMAfrd2jiUZyjRU0iyp+udD/hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtzBefJ
s7XzIetrw1o6/5owIc5CMB8GA1UdIwQYMBaAFKkCC2JvUEZI5Nv2pCB26JlzxKvA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQ2Qi84MUU4M0Y2MkQ2
NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJramsyX2FrSUhib21YUEVx
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FRSUxZbTlRUmtqazJfYWtJSGJvbVhQRXE4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEQ2Qi84MUU4M0Y2MkQ2NEExMUVBQjZBNjY0MTBDNEY5QUUwMi9xUUlMWW05UVJr
amsyX2FrSUhib21YUEVxOEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb3x7AMSWZvkStY/FE2wv8T7h5wLsUnRbfr/suVww9bCIZpurI9sruAsJtllx
3Ztg0/FpAnDXLmEGRT0d/0QRGjLZZlabiH7nSLBkQpuwcMDFDFdD4jsBMegEWz/9
Z49575oayE5gJlDoHG80wBtgSz9xZ8zT3rPGHrhKftx47uK7cwc+uawCNnglJ2n2
tea7MS+0RcoLyHgKoCL5ADQUCxYq28Jj0ArR5IIp9rJOAm4uaA93mqPwig/+c6q/
Iyk6yV+yRTRx8JanIRxbXep8pAgxn5E3uQ+1bUi+C8NUg69cu5TcRr8tueFFQzEP
jjMQWpfw5TH6sqPatR7KYCeCxA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 14:15:10 2026 by rpki-client