Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
File:                     QGGGPd9D57OxiePJwyF7wSuzXyE.mft (raw, json)
Hash identifier:          j0EAEzti65L7TBHPKdRUlzhIdA9boxtZ968l+oTzuT4=
Subject key identifier:   4C:5B:8B:51:A9:2C:99:CA:B7:6F:FA:66:44:89:E4:32:0E:30:0D:5F
Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21
Certificate issuer:       /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
Manifest number:          0106
Signing time:             Sun 05 Apr 2026 05:40:17 +0000
Manifest this update:     Sun 05 Apr 2026 05:40:17 +0000
Manifest next update:     Sun 12 Apr 2026 05:40:17 +0000
Files and hashes:         1: QGGGPd9D57OxiePJwyF7wSuzXyE.crl (hash: +kgJ7h/CZmhOrcZYaAw3zrdIlVnnnK5kp2AJl6qGjFM=)
                          2: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (hash: AnjAiTf0IpBEVdDJWZEsvOkkZMp+zUd6UgWlYagXJ9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl
                          rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E8DB, serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21
        Validity
            Not Before: Apr  5 05:40:17 2026 GMT
            Not After : Apr 12 05:40:17 2026 GMT
        Subject: CN=69d1f5c1-023a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:71:55:36:5c:0f:b1:9b:31:e1:d6:32:bd:
                    42:e7:f5:43:5d:79:91:ec:dc:31:f1:95:bf:d7:c1:
                    6f:fd:48:13:d5:11:e5:15:77:5f:c4:a2:a0:b0:a3:
                    13:92:8f:2f:ca:5d:b1:ab:a9:4d:e9:f6:9a:c4:0c:
                    f4:30:ee:75:20:bd:d2:62:be:55:42:89:0c:10:e4:
                    e6:be:ff:52:68:f4:6a:03:9d:c9:5a:ca:26:03:1d:
                    9b:f4:d5:84:36:f9:1f:a6:c0:5d:33:6f:c5:5a:c7:
                    56:90:30:db:0e:6d:42:44:56:08:c3:03:81:40:76:
                    13:1a:a8:47:92:4b:e3:70:c8:1e:0c:84:bc:91:c9:
                    cc:5a:41:8b:dc:60:42:4b:d5:7a:71:cd:76:f3:6e:
                    bf:c4:8d:36:bb:ca:2e:8c:a7:80:f0:2c:b7:65:e6:
                    67:b5:64:64:e9:15:20:66:01:1b:8f:95:cf:00:22:
                    3b:65:34:82:d7:30:7e:1b:7a:aa:63:11:61:3d:22:
                    3d:05:e8:53:9e:e2:3a:d9:91:b1:e2:f7:74:2b:53:
                    38:3b:be:97:48:5e:ce:22:23:ab:ee:21:86:c4:92:
                    10:73:ae:10:a7:a2:65:cd:8f:62:97:e5:c3:f2:bb:
                    5f:e5:9c:f0:e3:2f:58:65:7d:69:cb:71:10:a3:25:
                    58:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:8B:51:A9:2C:99:CA:B7:6F:FA:66:44:89:E4:32:0E:30:0D:5F
            X509v3 Authority Key Identifier:
                keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:48:96:28:dc:02:3b:c8:af:2d:1d:90:29:9c:52:6d:15:53:
         8a:1c:bb:5a:1e:c8:d0:c6:5c:68:b0:c4:63:d5:3a:78:d5:30:
         c0:8d:a7:df:2c:3b:2c:37:f8:6b:3d:d5:a1:8c:16:57:d8:10:
         ff:52:01:64:2e:ee:72:4f:00:3a:5e:79:76:df:8f:3a:34:eb:
         d6:7c:57:be:4a:c7:9d:6b:85:01:8a:a0:b7:a5:06:d3:e3:67:
         5b:48:51:86:c2:9c:56:f9:e2:2c:5f:ce:29:ec:5e:09:32:05:
         2d:83:5d:54:80:52:53:ba:72:4e:6c:c4:d9:be:b1:59:bd:87:
         82:2a:ad:08:aa:4e:5c:b5:ce:f3:b6:87:c5:02:61:ce:b2:cc:
         28:9d:a6:23:39:4b:a4:25:ff:13:9d:07:f3:3c:a6:8e:18:cc:
         4c:57:a1:df:a8:5e:55:92:bc:ad:96:d4:a7:f0:55:74:4d:34:
         7c:10:e6:6d:fc:ef:db:87:b6:b8:13:0e:f7:07:c4:f9:20:74:
         03:0a:be:70:eb:76:12:07:cb:ce:03:e8:1a:bb:b0:8c:da:97:
         d1:28:6a:e5:77:45:9c:e6:f9:9a:77:e7:f8:9d:34:41:95:08:
         13:cc:72:d3:5c:2a:fe:4c:36:3a:4f:44:ff:8e:2b:8f:e6:93:
         2d:f7:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:06 2026 by rpki-client