Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File:                     qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier:          h/BaoYoWoHF2XQ7KGHkQdZYO2Lksndizj9w+gsYdM2k=
Subject key identifier:   1F:7B:40:99:3A:84:E8:4B:BF:43:20:4C:A0:10:0B:91:F4:90:38:48
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer:       /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number:          01D5
Signing time:             Sun 05 Apr 2026 03:11:14 +0000
Manifest this update:     Sun 05 Apr 2026 03:11:13 +0000
Manifest next update:     Sun 12 Apr 2026 03:11:13 +0000
Files and hashes:         1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: 3aavFtSQREHvajjGcbAjH38sxqKEBe20u8NoCeN4+/Y=)
                          2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: zB9kpmMH8WDobdsyA5ni46avnvSa15JcHqsSjawBqxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
                          rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
        Validity
            Not Before: Apr  5 03:11:13 2026 GMT
            Not After : Apr 12 03:11:13 2026 GMT
        Subject: CN=69d1d2d2-e4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:68:03:34:2d:95:48:41:47:d7:2c:84:66:
                    d9:45:57:d7:3d:3b:ec:df:24:d8:18:52:aa:52:b1:
                    23:f5:cf:e1:92:45:32:af:5b:7a:e5:1f:ba:bb:37:
                    5d:ec:46:dd:b7:55:3d:d2:3f:95:94:6d:71:ac:bd:
                    86:17:27:7d:f4:69:67:72:c4:b5:37:03:02:80:54:
                    eb:61:6c:d0:9e:ea:70:7e:be:4f:bd:77:22:a6:5d:
                    a0:88:a3:7b:0f:60:1f:64:dd:1d:10:f8:d4:61:b9:
                    18:62:12:09:9b:be:23:55:5b:f9:16:81:fd:79:af:
                    44:c4:13:11:12:f9:67:f6:13:d5:26:38:6f:da:0a:
                    cf:f9:22:d2:b6:ab:ad:ef:e0:54:35:9e:66:89:12:
                    cf:7c:cc:69:71:56:26:d6:35:fd:a5:bc:3b:c3:ad:
                    95:a3:26:2e:4b:3c:33:f4:86:cb:6c:1f:ed:ab:f5:
                    60:c6:11:89:1b:b5:ce:db:10:28:07:d1:bb:4b:a7:
                    4e:7f:f1:92:31:18:22:1f:d9:f8:8f:b1:be:f2:70:
                    24:8e:ab:ef:20:e1:db:09:15:95:3b:61:6b:98:78:
                    77:59:66:14:92:5c:1b:e6:ef:ab:bc:11:96:5a:f7:
                    e7:20:7f:9a:45:eb:04:ff:cb:8f:7b:3d:d6:1d:17:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7B:40:99:3A:84:E8:4B:BF:43:20:4C:A0:10:0B:91:F4:90:38:48
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:a3:66:76:83:a0:b5:ad:66:7a:00:cd:6c:ad:4e:bf:d6:
         ea:c7:73:ac:91:46:19:ef:3b:7a:19:1e:d8:48:0f:3f:99:18:
         ef:a5:c2:2f:88:57:1c:28:7d:ee:cc:30:06:a3:4a:fb:97:21:
         0a:9d:9b:b4:5b:0c:12:13:4f:8a:d2:a2:86:94:68:1f:e3:71:
         78:c1:ec:75:90:0c:42:62:14:f6:d7:9c:5c:2d:c4:bb:cf:29:
         cc:58:83:40:1f:cc:99:d5:48:82:14:a1:ce:50:7f:ac:4e:ec:
         32:85:b1:c0:75:ed:90:d0:e6:98:25:b6:f2:ec:13:73:5d:84:
         19:7d:c7:07:b0:5d:ee:31:95:67:71:df:6e:2c:2f:52:ac:31:
         24:db:22:92:e9:0d:7d:b4:51:2e:02:99:39:03:52:76:56:34:
         9f:db:d1:8a:ea:6b:61:47:bb:a9:a8:eb:e0:0f:d9:12:c6:f2:
         6c:16:68:a5:5c:4c:da:42:6e:83:e6:a9:3f:26:a3:d4:37:91:
         c5:ae:ca:ab:6d:4c:7b:15:9f:63:d0:e0:ce:11:ca:8f:f4:6f:
         5e:cd:15:c5:73:98:9a:f1:71:ba:c8:83:48:ea:94:ea:4c:69:
         34:69:d0:8c:3c:0b:f1:44:f0:1a:3c:9e:56:6d:67:52:00:55:
         c6:c6:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:03:06 2026 by rpki-client