Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File:                     qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier:          PYO7E6kILAwBItPJxTXqs1T/TIcBXf3riFnJZe6kY84=
Subject key identifier:   02:82:B2:D0:4C:DA:81:40:18:03:A1:51:C4:EA:EF:88:2C:A7:3B:47
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer:       /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial:       0244
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number:          023F
Signing time:             Sun 05 Apr 2026 02:03:54 +0000
Manifest this update:     Sun 05 Apr 2026 02:03:53 +0000
Manifest next update:     Sun 12 Apr 2026 02:03:53 +0000
Files and hashes:         1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: IeL+xu/knCwIV6xZewkmNAUsnKT10ntHmhnpUXzY4kw=)
                          2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 580 (0x244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
        Validity
            Not Before: Apr  5 02:03:53 2026 GMT
            Not After : Apr 12 02:03:53 2026 GMT
        Subject: CN=69d1c309-e288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:dc:6a:8b:4a:3d:8a:e7:1f:8b:b9:d5:de:
                    89:59:2f:6f:b3:17:6b:55:af:91:59:c4:af:bb:8c:
                    b7:d4:f8:a6:e9:26:d1:08:ab:8e:53:0f:83:db:2e:
                    b5:ce:a5:00:28:7f:c1:81:b9:52:58:bf:de:92:98:
                    db:39:d2:95:c2:ce:cc:fa:c0:09:69:6f:1a:e0:1b:
                    30:74:1d:fa:5f:2e:ed:63:73:58:a8:95:92:b2:8c:
                    a0:a6:3f:90:f5:34:b0:82:88:7d:04:de:2e:17:74:
                    2f:a4:d6:6b:67:57:fa:69:bd:4e:7e:e0:aa:e9:14:
                    ef:ee:b0:2f:d8:38:9a:af:8d:59:2d:73:62:c4:65:
                    13:76:20:a1:0e:51:b9:1b:35:a5:b5:45:2a:9e:21:
                    ee:1f:dc:56:d7:4a:a0:05:42:56:ac:dd:08:a8:57:
                    ee:d1:a0:16:2f:a2:ce:aa:d4:39:10:5e:81:e2:35:
                    0f:3f:e3:09:0f:f3:fa:5d:bf:76:48:38:c5:95:fb:
                    ed:49:04:ba:19:ce:f3:4d:79:4d:06:72:a9:bc:ee:
                    4f:d0:96:a6:a8:8c:48:12:5f:da:98:5a:7e:85:9d:
                    f9:44:50:e0:d8:ec:93:bd:e6:37:56:d5:d5:27:45:
                    86:12:3e:a7:47:ba:8f:98:35:e9:b3:9b:ff:94:22:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:82:B2:D0:4C:DA:81:40:18:03:A1:51:C4:EA:EF:88:2C:A7:3B:47
            X509v3 Authority Key Identifier:
                keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:08:08:5c:0e:53:0a:0a:0b:3c:80:96:57:52:23:03:69:
         5e:a0:4f:51:e8:3a:6c:6c:4e:ba:28:e2:4e:95:02:32:f9:7e:
         77:74:a6:79:d2:bc:c2:85:f9:f3:28:df:95:ef:dc:e4:e4:de:
         dc:a2:a9:a8:e0:55:57:57:0b:6a:c2:66:8c:c2:65:fd:ca:39:
         17:d6:fa:c9:51:3c:a9:cb:66:a6:c5:5f:3e:e4:8e:eb:06:7b:
         c2:1d:ac:90:92:44:10:2b:2d:ae:19:d2:98:ed:e2:ff:d9:de:
         b7:2a:68:0a:0b:c4:00:eb:b3:cb:7e:af:14:dc:d3:0c:8a:9c:
         1b:dc:d9:43:90:e8:85:5f:7e:59:c1:a5:c2:d8:41:d9:0c:0a:
         e1:af:71:02:4b:ab:dd:56:44:75:1e:72:5f:19:19:80:d8:ed:
         8e:da:68:f3:a2:2c:a6:27:2f:9d:3b:66:7a:64:30:30:bc:92:
         77:c7:49:45:40:75:17:f7:80:1e:de:fd:4e:09:b2:21:13:37:
         99:3c:21:eb:21:10:bb:09:de:91:3a:4d:6b:ec:c6:a8:6f:7f:
         49:e6:28:e5:72:b1:f8:91:29:0d:33:7c:c0:85:7d:fd:22:c2:
         9a:b0:f8:3f:f5:9b:2c:db:5e:9c:fe:8d:e2:e2:cf:c5:3b:8c:
         d6:d4:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:15 2026 by rpki-client