Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
File:                     qgF46nhRGhWxRw6_wMVyGnDidp8.mft (raw, json)
Hash identifier:          hjrRKZi41QXnXczXpMb3YSZrXni01LqHSYsXjl0o37k=
Subject key identifier:   53:DF:B7:04:08:DA:FA:45:98:5A:38:71:09:DD:1C:E7:58:81:D1:AC
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
Manifest number:          01BF
Signing time:             Sun 05 Apr 2026 03:32:55 +0000
Manifest this update:     Sun 05 Apr 2026 03:32:54 +0000
Manifest next update:     Sun 12 Apr 2026 03:32:54 +0000
Files and hashes:         1: qgF46nhRGhWxRw6_wMVyGnDidp8.crl (hash: fgXjKybWZ12qRdiMoN4EVE4DmeQXzol2GxMPYGGJVBY=)
                          2: 1F8578820CD611EFAFFA4E63C4F9AE02.roa (hash: X9PlsIxIK/tymRHPH3Dn2w7Nzml17MG5US4WdS+LzEc=)
                          3: 7FC17C58A93711EEAD42EF0AC4F9AE02.roa (hash: NAqCvT4llBl3uhGXgqlzi3IaSpRA/zrRaT2L0Ldxrkk=)
                          4: E13D8940342E11EF84328672C4F9AE02.roa (hash: i946rkKnIPD36Fiz0DiuBSlPgc8OVRMaBixyXUc/SDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Apr  5 03:32:54 2026 GMT
            Not After : Apr 12 03:32:54 2026 GMT
        Subject: CN=69d1d7e7-35d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4d:ce:c5:d4:a6:00:83:61:2f:79:c2:3b:59:
                    f2:a9:30:9d:07:18:89:35:07:26:06:ea:a8:e5:ec:
                    9f:e9:e1:fa:1d:e3:86:5e:0e:d8:08:7a:a1:20:ce:
                    96:05:51:65:90:20:91:bc:82:aa:45:86:a0:2f:ba:
                    56:31:a7:01:fd:75:b1:45:39:b4:55:74:02:0d:fb:
                    98:67:55:94:bd:85:ab:50:04:7f:41:0c:4e:49:c1:
                    f7:e6:51:b7:9e:4d:79:a8:7e:c3:47:25:7c:ff:7b:
                    92:b8:34:e5:a8:27:42:37:1c:8e:95:e0:56:01:e8:
                    e2:da:49:6e:ec:92:78:c5:98:a3:23:43:aa:08:0c:
                    88:4b:7f:50:55:d7:49:70:eb:fa:93:0f:c7:e1:e0:
                    60:17:39:df:2e:6f:b5:fa:f6:9a:96:97:fe:90:7b:
                    89:cb:48:bb:fd:08:6b:b8:c3:27:f3:42:44:9a:9e:
                    9d:d1:59:a1:d1:7e:fa:9b:d6:f4:8b:60:78:a5:fc:
                    35:8e:98:8b:d1:d8:2d:7f:4d:f0:e9:bc:d8:af:5b:
                    a2:e7:a6:d6:61:80:c3:5d:44:f3:f5:5c:ee:30:78:
                    ec:1a:5e:6a:aa:c7:bf:e8:a0:c1:45:35:df:c0:5e:
                    bf:83:c1:84:71:47:d8:f9:03:d1:d4:ea:d6:f1:0e:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DF:B7:04:08:DA:FA:45:98:5A:38:71:09:DD:1C:E7:58:81:D1:AC
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:09:3c:4c:52:b1:70:0e:e7:04:16:81:bb:fd:5f:82:05:f3:
         4b:17:02:86:84:8c:50:cf:0d:b2:9c:16:e8:54:5e:d0:30:50:
         82:67:8c:a4:74:5a:e5:11:c5:bd:06:48:6c:e0:f7:18:00:2c:
         21:7f:04:27:91:f3:89:ff:17:03:b6:54:6c:4f:e5:65:99:de:
         12:f8:d8:81:6d:cb:74:c1:78:db:82:8d:b6:f2:d1:90:ec:1a:
         30:6d:c4:17:bd:f4:37:46:78:7c:19:b0:d7:2c:a8:d9:17:8f:
         28:4c:37:1c:0b:a0:37:af:1e:ab:bf:fd:03:ca:99:c5:4d:4d:
         ce:44:f3:fd:be:a7:60:f9:df:fd:86:9f:d3:6b:6f:c2:4c:89:
         24:ab:be:ae:41:27:78:c5:47:c1:cd:ce:86:18:3e:e0:84:b4:
         29:9f:5a:69:dd:87:09:30:14:ab:b7:bf:45:7c:c5:19:95:d1:
         75:bc:ad:3b:a4:c1:3d:65:4f:a3:7c:9a:28:6b:12:0e:c6:bc:
         2e:35:b4:1f:70:9e:e8:bf:74:1f:76:c8:45:6c:ff:f9:85:42:
         54:97:c8:65:f1:81:3a:8a:e6:1e:64:6c:5f:a8:1a:79:9b:7c:
         65:c4:64:93:e5:87:77:c7:d1:3b:62:bf:5f:a5:2e:e0:1f:9c:
         31:a8:91:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:58:30 2026 by rpki-client