Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
File:                     qVBr_Nym0SxcNyUDFHD30eBncFI.mft (raw, json)
Hash identifier:          A6/V+1/yN5twBnYDZtv+2QuKwr/9OytUgjoq7oxVSKg=
Subject key identifier:   5E:9B:45:E9:39:E1:47:8C:8B:4A:18:A6:BF:ED:EE:4C:8C:2A:5B:95
Authority key identifier: A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52
Certificate issuer:       /CN=A91C5ED0/serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
Certificate serial:       1420
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
Manifest number:          2B96
Signing time:             Sat 04 Apr 2026 16:48:00 +0000
Manifest this update:     Sat 04 Apr 2026 16:48:00 +0000
Manifest next update:     Sat 11 Apr 2026 16:48:00 +0000
Files and hashes:         1: qVBr_Nym0SxcNyUDFHD30eBncFI.crl (hash: EVwvkmFFcg+DxAdzh3l8pYrILAsEqOU+DBr2JODKS5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl
                          rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5152 (0x1420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5ED0, serialNumber=A9506BFCDCA6D12C5C3725031470F7D1E0677052
        Validity
            Not Before: Apr  4 16:48:00 2026 GMT
            Not After : Apr 11 16:48:00 2026 GMT
        Subject: CN=69d140c0-565a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:df:6f:3a:b1:14:5d:f4:10:bf:1d:23:f3:
                    72:50:76:f9:7a:1e:39:0b:cc:8b:d3:02:31:b3:7c:
                    ae:9f:26:83:b7:fa:ab:8d:b8:6a:81:f1:ed:51:00:
                    0c:c5:ab:33:4b:43:27:d5:67:b3:47:c1:37:92:09:
                    6a:e5:c4:82:ff:a3:fc:be:fc:78:3d:61:a6:7a:60:
                    05:2b:f6:3d:22:68:f1:ff:fa:f4:20:de:e1:ff:97:
                    95:a0:be:8d:d2:62:9f:10:55:a1:bc:06:79:35:cd:
                    ae:7f:24:94:32:94:98:f1:7d:81:e7:0b:7d:8d:6c:
                    7f:bd:d9:88:26:7d:e0:1a:d8:4e:5b:ce:54:76:a5:
                    af:97:6f:27:ee:f1:05:5e:24:6e:33:9a:6e:b6:b9:
                    8e:31:43:5c:1e:31:26:2b:cd:78:92:cf:5a:4b:77:
                    69:ee:5b:a0:37:88:d4:7d:3d:28:55:ea:4a:45:a3:
                    b3:ea:6f:12:58:f7:36:43:f0:52:e3:07:07:ec:95:
                    32:81:ce:66:d3:fd:1a:92:cf:f7:cb:88:5a:4d:d8:
                    06:a3:17:8d:08:39:a1:a4:7a:28:ff:f7:b4:d4:8d:
                    17:34:34:0b:b9:60:f9:a4:c3:0a:15:b7:e8:27:ea:
                    b7:a7:30:cc:ba:ba:6b:3c:ff:14:44:e1:7e:0d:92:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:45:E9:39:E1:47:8C:8B:4A:18:A6:BF:ED:EE:4C:8C:2A:5B:95
            X509v3 Authority Key Identifier:
                keyid:A9:50:6B:FC:DC:A6:D1:2C:5C:37:25:03:14:70:F7:D1:E0:67:70:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qVBr_Nym0SxcNyUDFHD30eBncFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/qVBr_Nym0SxcNyUDFHD30eBncFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:91:69:02:da:83:f1:eb:6d:2d:bc:cc:e5:19:8a:0f:df:
         b9:0e:4a:b4:39:50:d4:63:b1:a9:14:47:7f:ad:e2:97:e8:1c:
         20:15:3a:72:58:0f:1b:b1:42:a7:79:ee:d1:62:84:10:47:bd:
         88:4c:2f:0e:7d:e7:ab:f2:ad:9e:40:e9:0b:c1:b5:6e:6d:15:
         c4:e1:89:35:f8:5e:04:bd:f9:d3:45:fe:4d:ab:6a:db:0a:a1:
         62:44:d9:84:a2:d2:9e:b6:07:cb:ef:3a:2d:fc:bf:8d:dc:1b:
         6f:13:2a:0e:23:b9:f0:dc:c3:56:b4:28:1d:fe:4f:51:2d:21:
         d7:b1:60:c7:cf:a9:de:f0:df:12:5d:04:38:43:69:0d:f1:11:
         46:79:43:fe:bb:d8:df:2b:08:75:7c:40:b8:9c:65:de:5e:d0:
         42:85:f4:45:79:49:b4:da:42:1e:cf:ee:40:e1:27:c5:65:6e:
         90:b9:e4:1c:e6:f6:40:03:c4:7e:94:77:f5:07:40:2d:ea:45:
         9f:c5:15:b8:1b:21:04:53:37:3e:a1:0b:02:2c:3b:d3:ab:c9:
         d9:a7:5e:60:7b:06:42:6e:ec:df:17:ee:4b:28:bc:ce:4d:40:
         6d:1c:48:1b:74:5d:04:8d:00:de:da:df:91:27:aa:78:a6:c0:
         9d:c5:a9:ff
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVFRDAxMTAvBgNVBAUTKEE5NTA2QkZDRENBNkQxMkM1QzM3MjUwMzE0NzBGN0Qx
RTA2NzcwNTIwHhcNMjYwNDA0MTY0ODAwWhcNMjYwNDExMTY0ODAwWjAYMRYwFAYD
VQQDEw02OWQxNDBjMC01NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1A3fbzqxFF30EL8dI/NyUHb5eh45C8yL0wIxs3yunyaDt/qrjbhqgfHtUQAM
xaszS0Mn1WezR8E3kglq5cSC/6P8vvx4PWGmemAFK/Y9Imjx//r0IN7h/5eVoL6N
0mKfEFWhvAZ5Nc2ufySUMpSY8X2B5wt9jWx/vdmIJn3gGthOW85UdqWvl28n7vEF
XiRuM5putrmOMUNcHjEmK814ks9aS3dp7lugN4jUfT0oVepKRaOz6m8SWPc2Q/BS
4wcH7JUygc5m0/0aks/3y4haTdgGoxeNCDmhpHoo//e01I0XNDQLuWD5pMMKFbfo
J+q3pzDMurprPP8UROF+DZKQbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6bRek5
4UeMi0oYpr/t7kyMKluVMB8GA1UdIwQYMBaAFKlQa/zcptEsXDclAxRw99HgZ3BS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5
NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBTeGNOeVVERkhEMzBlQm5j
RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FWQnJfTnltMFN4Y055VURGSEQzMGVCbmNGSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9xVkJyX055bTBT
eGNOeVVERkhEMzBlQm5jRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC4CRaQLag/HrbS28zOUZig/fuQ5KtDlQ1GOxqRRHf63il+gcIBU6clgPG7FC
p3nu0WKEEEe9iEwvDn3nq/KtnkDpC8G1bm0VxOGJNfheBL3500X+Tatq2wqhYkTZ
hKLSnrYHy+86Lfy/jdwbbxMqDiO58NzDVrQoHf5PUS0h17Fgx8+p3vDfEl0EOENp
DfERRnlD/rvY3ysIdXxAuJxl3l7QQoX0RXlJtNpCHs/uQOEnxWVukLnkHOb2QAPE
fpR39QdALepFn8UVuBshBFM3PqELAiw706vJ2adeYHsGQm7s3xfuSyi8zk1AbRxI
G3RdBI0A3trfkSeqeKbAncWp/w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client