Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
File:                     0q268NfVLLlNShOXizIFO833eg8.mft (raw, json)
Hash identifier:          XtFKb2hZarmp0CrdnBw2SCGo+QLAXRMP+6815/a5fRo=
Subject key identifier:   87:82:D5:3B:80:54:90:71:BF:04:79:02:58:B9:7D:98:E0:53:7B:49
Authority key identifier: D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F
Certificate issuer:       /CN=A91BE514/serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
Manifest number:          01CE
Signing time:             Sun 05 Apr 2026 03:10:32 +0000
Manifest this update:     Sun 05 Apr 2026 03:10:32 +0000
Manifest next update:     Sun 12 Apr 2026 03:10:32 +0000
Files and hashes:         1: 0q268NfVLLlNShOXizIFO833eg8.crl (hash: PF9sgE4uz09Dic6rrrCqPCuDpVuZWxCS1kb57cBufNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl
                          rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE514, serialNumber=D2ADBAF0D7D52CB94D4A13978B32053BCDF77A0F
        Validity
            Not Before: Apr  5 03:10:32 2026 GMT
            Not After : Apr 12 03:10:32 2026 GMT
        Subject: CN=69d1d2a8-6996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:cf:39:8b:cb:55:48:a6:c1:f4:cb:3f:16:
                    c5:b5:bb:3d:23:58:17:8b:09:8c:1a:85:ba:29:ab:
                    07:23:cf:10:c9:b0:a3:b9:a2:2a:c4:52:9b:d6:d3:
                    12:fc:60:36:11:dc:97:52:36:2f:69:4e:41:0e:53:
                    68:02:3d:2c:b4:ac:70:ef:39:1d:df:53:20:78:e9:
                    ad:d4:49:45:be:7f:99:08:cf:cc:4b:57:6a:5b:bc:
                    5e:03:8e:6f:0c:ac:70:e2:47:1f:9e:e8:6c:de:d5:
                    32:ba:03:fa:23:f0:75:9a:e1:df:e3:f3:65:a4:7c:
                    d5:80:5d:41:c8:54:8b:1d:02:34:51:ec:de:44:99:
                    59:a5:70:21:68:c3:77:14:3e:8a:68:aa:b2:51:62:
                    8b:ea:33:ab:cb:c4:97:41:b0:ea:ae:8f:1e:0f:f3:
                    86:29:3e:35:92:39:1f:16:7d:6f:1d:c8:4c:76:3e:
                    dd:c8:1c:3f:97:a3:2d:cb:a4:cc:d1:f7:2d:c3:fc:
                    69:02:6a:dc:e1:7b:ca:b1:d8:80:69:60:5f:0b:a3:
                    3a:c8:4d:1f:95:25:19:ad:43:68:13:3e:17:df:b1:
                    07:ae:26:c0:f2:62:ac:f2:f5:fa:03:71:e0:08:a2:
                    df:5b:06:62:91:f6:ac:06:ab:55:d1:42:12:3d:9a:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:D5:3B:80:54:90:71:BF:04:79:02:58:B9:7D:98:E0:53:7B:49
            X509v3 Authority Key Identifier:
                keyid:D2:AD:BA:F0:D7:D5:2C:B9:4D:4A:13:97:8B:32:05:3B:CD:F7:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0q268NfVLLlNShOXizIFO833eg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE514/D8EDF68E6EF511EEBD180A32C4F9AE02/0q268NfVLLlNShOXizIFO833eg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:ac:24:01:6f:53:53:2d:e2:7c:18:e7:3c:4a:4c:89:f9:
         f2:b3:54:2b:e3:c2:c4:da:bc:92:0f:37:ed:d9:f5:fc:f0:f2:
         4a:58:7e:f0:b2:4f:7c:81:a2:d9:74:87:3e:00:f0:ba:a3:71:
         16:29:1e:cf:bf:05:78:a2:15:a8:85:e1:e2:86:ec:00:5b:9c:
         e3:d6:10:77:af:bf:73:85:95:21:d0:d7:97:00:ea:88:0c:dc:
         4a:af:94:46:95:6b:73:4c:ec:41:58:cb:98:3d:2d:1e:77:ef:
         a6:80:6d:a7:09:ae:fc:a7:c9:c8:03:2f:03:e8:4c:94:fb:f7:
         86:19:de:76:97:f1:d3:8f:27:f9:50:53:1d:38:d2:ec:89:99:
         1a:91:39:11:59:7d:fc:57:99:81:e7:60:42:26:f2:d1:67:1a:
         36:cc:08:ba:6c:dc:dd:c4:9a:33:2f:47:b5:58:3c:04:77:53:
         d0:30:5b:50:d5:cd:1e:3c:24:04:f3:ab:7b:ab:73:15:3e:5b:
         80:24:8b:bf:19:63:7e:01:61:42:d2:ad:eb:df:c2:bd:e9:f3:
         cd:c1:d2:2a:9e:85:a5:a4:b2:bb:97:6b:4a:93:18:d6:71:e0:
         51:09:fa:48:ab:67:d3:de:4a:62:54:81:64:e4:5f:7c:49:26:
         fe:05:a7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client