Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
File:                     qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json)
Hash identifier:          Vv7PEbLmQvTZ/LRImsOnCEV9y8FpAU9YszNVx+6CYdE=
Subject key identifier:   6E:0C:54:96:44:A7:7C:20:21:7C:5A:A0:9F:CA:52:20:D3:A6:A1:0B
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Certificate issuer:       /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial:       05CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
Manifest number:          05C4
Signing time:             Sat 04 Apr 2026 22:53:25 +0000
Manifest this update:     Sat 04 Apr 2026 22:53:25 +0000
Manifest next update:     Sat 11 Apr 2026 22:53:25 +0000
Files and hashes:         1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: VC6SFovQJTS7qMTy4rlXrHuZfxNclDhcfucQ/vRQ0RE=)
                          2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: Ti8kwxZ7eguCsStyTJIvI9OGCjPofkPtfnrsHUQH8wI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
                          rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
        Validity
            Not Before: Apr  4 22:53:25 2026 GMT
            Not After : Apr 11 22:53:25 2026 GMT
        Subject: CN=69d19665-7641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:25:af:61:e3:39:cd:15:37:50:59:e5:3c:
                    b2:33:3b:06:2f:07:ef:fc:21:ab:02:cb:ec:9b:93:
                    e3:c2:26:e0:46:10:c4:0e:b4:43:78:67:b8:67:5b:
                    09:42:33:0a:ce:bf:3f:06:54:67:d6:2a:5f:10:30:
                    56:4e:79:2f:b9:e8:b4:36:ea:d8:48:1a:1c:93:c5:
                    99:c1:42:c9:78:f9:86:16:99:95:78:6a:10:bd:27:
                    5b:79:49:2f:c1:97:92:11:8b:5e:09:b5:2d:90:51:
                    73:c2:c2:f5:2e:35:cf:82:0f:f7:7f:ed:b2:a7:f8:
                    18:a2:03:76:06:ce:b8:70:a9:af:04:be:98:e7:15:
                    e9:5e:1a:f5:f9:83:88:be:6c:95:40:dc:8b:90:ad:
                    e5:e5:04:2c:7e:5b:d2:99:92:91:04:66:c0:a9:20:
                    68:15:36:37:20:dc:b9:1a:bc:a9:cd:f8:db:05:0b:
                    e0:ba:14:ba:ae:c3:25:fa:8c:3c:3c:b6:b5:16:17:
                    43:b1:9e:3a:fa:f9:ed:fe:cb:39:1e:34:46:b7:d7:
                    5f:92:5a:0d:0b:1f:14:a2:3d:16:76:5f:a6:ca:d8:
                    a9:1c:d7:30:f4:3f:42:69:84:bf:46:b8:c7:99:7d:
                    78:e5:f4:43:ec:0d:30:38:59:5f:00:cb:e3:86:a0:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0C:54:96:44:A7:7C:20:21:7C:5A:A0:9F:CA:52:20:D3:A6:A1:0B
            X509v3 Authority Key Identifier:
                keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:21:e7:46:31:b8:16:7f:13:98:d0:f2:7d:a7:82:33:08:03:
         a8:d6:8d:bd:69:ae:2a:f2:6b:bf:d4:a4:a5:56:f2:f9:dc:e0:
         e6:1f:2b:14:26:6d:48:47:a0:16:bc:29:a1:59:e1:98:eb:8a:
         f9:98:ef:33:51:e6:f7:3c:14:64:62:ad:e8:77:63:d7:85:68:
         4f:c5:36:87:17:48:41:34:9c:5d:60:5b:1a:75:a4:43:15:a3:
         a5:5c:39:95:c0:05:c8:52:bc:6c:a9:96:a3:86:0c:0c:c1:6c:
         85:c3:70:a5:ba:44:1e:71:1c:f5:11:e5:33:d4:c6:cd:51:7f:
         21:60:e8:7a:ee:ec:17:55:bb:f0:e2:60:27:fb:bf:39:c8:c2:
         9d:6c:24:c3:38:7c:d8:c7:48:5d:b5:5c:96:10:72:60:8e:e6:
         e3:df:4a:a7:5c:4e:75:a8:f5:d6:44:59:a3:2d:0c:00:10:ac:
         46:71:19:9f:d5:72:8c:bc:67:ae:2c:ae:cc:45:b9:aa:f0:1f:
         99:3a:77:31:72:d3:40:be:77:89:df:e9:5c:1b:22:42:af:32:
         02:6d:ed:8d:50:66:eb:55:59:bb:e4:fd:f3:4d:1c:77:e8:aa:
         be:92:77:00:cc:3c:b9:f2:14:4f:21:49:25:f4:75:33:0a:06:
         d7:18:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:58 2026 by rpki-client