Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft
File:                     QBwaNjT5h86fnlzvVAncG9D_K6o.mft (raw, json)
Hash identifier:          uimbl2amTwp8wOUDfLPEMZb8KHnTD+S7hAFRPmmG7kg=
Subject key identifier:   2A:30:2B:7D:58:4F:74:00:80:AD:DB:42:B7:CB:F0:77:C0:C1:6C:A3
Authority key identifier: 40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA
Certificate issuer:       /CN=A91A5A57/serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft
Manifest number:          0138
Signing time:             Sun 05 Apr 2026 04:48:15 +0000
Manifest this update:     Sun 05 Apr 2026 04:48:15 +0000
Manifest next update:     Sun 12 Apr 2026 04:48:15 +0000
Files and hashes:         1: QBwaNjT5h86fnlzvVAncG9D_K6o.crl (hash: o6sHKO+1Vr01W97d4ioM5AU33d1D8GUgRZZZdjyCgm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A57, serialNumber=401C1A3634F987CE9F9E5CEF5409DC1BD0FF2BAA
        Validity
            Not Before: Apr  5 04:48:15 2026 GMT
            Not After : Apr 12 04:48:15 2026 GMT
        Subject: CN=69d1e98f-51a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:aa:ce:cc:25:46:ad:2a:2a:6c:49:ce:0d:
                    45:30:c7:6f:96:13:6d:3f:cf:03:cd:16:5d:db:1a:
                    ab:c6:b3:21:e0:49:07:3e:c8:09:cf:92:4b:b0:68:
                    63:15:9c:ce:a4:fb:f9:61:2a:ab:9a:7f:b3:aa:85:
                    78:fc:e8:12:e0:ee:f1:f0:a2:45:c2:ca:13:17:4a:
                    9b:c1:36:11:22:58:f6:d6:98:2b:27:9e:8c:53:bc:
                    e9:b8:fc:20:11:2c:27:9b:96:52:8b:09:82:1c:e2:
                    ac:f3:a8:f5:77:fb:3b:9b:ac:63:c0:c5:e4:5f:0a:
                    47:6a:15:0f:88:4e:b1:a3:d0:cb:9f:42:ba:3f:40:
                    cd:fd:17:f8:70:9c:d8:74:c3:4d:ae:2a:10:39:ad:
                    c1:f2:f5:2e:25:f6:04:09:26:d5:06:65:46:ce:85:
                    6d:03:33:6c:bf:41:9b:ea:00:39:32:c7:e9:e9:41:
                    79:b7:e8:f5:e8:26:35:e2:a2:97:94:25:6e:d0:96:
                    0b:41:be:e8:b1:77:b1:2d:7c:c0:33:53:45:ec:a2:
                    9f:f6:ed:93:9a:54:f6:9b:28:db:52:7e:c6:45:a2:
                    16:7e:2b:17:a4:77:05:3f:13:d9:17:de:a1:d8:98:
                    01:7b:65:f4:92:03:6b:6d:bc:04:4a:e1:a5:ba:85:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:30:2B:7D:58:4F:74:00:80:AD:DB:42:B7:CB:F0:77:C0:C1:6C:A3
            X509v3 Authority Key Identifier:
                keyid:40:1C:1A:36:34:F9:87:CE:9F:9E:5C:EF:54:09:DC:1B:D0:FF:2B:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBwaNjT5h86fnlzvVAncG9D_K6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/76F267FA56EC11EF8A0CB24FC4F9AE02/QBwaNjT5h86fnlzvVAncG9D_K6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:68:fc:fb:eb:2f:fa:d4:b3:7c:6b:19:64:91:43:31:6a:f6:
         57:4e:ef:1e:d3:18:48:f9:d7:07:64:a3:8b:d5:74:0b:c5:77:
         94:49:25:17:f6:30:5c:9f:bb:c0:8c:ba:d5:f4:0f:35:83:9c:
         87:95:9c:9f:e9:ab:b2:7d:be:f3:8e:f2:5a:0d:e7:8f:b1:0f:
         fd:3d:8d:22:6f:02:d2:42:b9:5d:ac:ba:f2:83:20:4a:05:81:
         7e:e2:3d:cf:03:01:82:8a:7d:a7:ea:3e:f0:5e:85:e1:03:18:
         8a:44:96:1b:1a:13:dd:2b:a1:ca:af:89:b7:f7:d1:29:19:eb:
         b7:14:de:7e:98:3d:79:61:29:0c:bb:b5:b4:7e:4e:75:36:b1:
         a6:47:8e:aa:c4:bb:89:43:71:cc:cb:2f:76:c5:c4:a8:45:fa:
         e1:d6:26:f6:80:68:d6:47:b2:49:2c:e1:65:e2:bf:a9:ff:85:
         d4:95:8e:00:01:23:71:c0:23:9a:15:13:23:aa:19:9b:66:54:
         58:ac:1b:28:1e:2a:e3:ce:fe:21:cd:80:01:ed:aa:51:61:c4:
         92:0a:63:21:3a:2b:74:ad:f3:ff:bf:f1:af:d9:1b:fa:04:84:
         9a:9b:30:57:b1:c0:e3:27:d0:83:be:e8:b8:4b:c4:b6:b0:26:
         72:7b:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:48 2026 by rpki-client