Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File:                     q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier:          8XKCbc6NYocrlugJQ8/WbXfDlU4fAql9p/4Q/v54PSQ=
Subject key identifier:   08:9D:D4:7D:C6:19:2D:2E:05:76:8D:64:EB:18:A6:87:BF:10:4F:BF
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       098A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number:          0975
Signing time:             Sat 04 Apr 2026 19:52:50 +0000
Manifest this update:     Sat 04 Apr 2026 19:52:50 +0000
Manifest next update:     Sat 11 Apr 2026 19:52:50 +0000
Files and hashes:         1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: XaeovzVwMVgZ/GT3enukh3oC4fYXaSS2SNML+cllZtk=)
                          2: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
                          3: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: elXGzOAXv/vOs6kbXOd59T9g8u/dR7mHNS46gVlolLM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2442 (0x98a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Apr  4 19:52:50 2026 GMT
            Not After : Apr 11 19:52:50 2026 GMT
        Subject: CN=69d16c12-26bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:a1:c4:0b:17:ca:ec:75:8f:fb:be:60:27:
                    65:21:06:ef:e8:7c:d3:7e:60:18:1b:a5:84:86:c5:
                    e6:67:32:02:04:e5:97:58:9f:f9:d0:5f:20:21:60:
                    ff:c7:77:be:c9:4c:4f:6a:0d:1c:3b:81:37:a8:2a:
                    78:8d:4e:16:e7:fc:87:60:4c:b6:21:6b:8d:9b:1c:
                    22:fe:22:34:f4:2e:ef:97:b0:56:a5:73:9b:6d:33:
                    b0:af:65:f5:63:cc:e3:6d:ce:9a:f8:09:04:31:d3:
                    eb:90:3c:2c:e6:a7:88:2a:41:87:54:28:f8:42:d9:
                    45:4e:85:53:36:3d:f3:8d:0f:89:3d:19:43:7c:b0:
                    0e:5f:bb:3c:be:09:1b:87:40:cb:89:8b:86:24:01:
                    13:5d:2b:21:9c:5f:ed:ff:87:ae:08:ef:28:ca:23:
                    40:92:e4:6f:f9:d2:10:40:a2:6b:5a:83:c1:21:50:
                    e6:e4:6c:3f:ce:84:1c:32:15:1d:69:ca:dd:8f:d5:
                    7c:34:c2:03:46:94:2e:1c:65:25:17:45:db:44:df:
                    6b:8e:63:e6:6f:50:4a:38:00:6d:17:57:40:32:fe:
                    54:38:dd:e8:0e:9d:08:15:d0:3a:83:b8:9f:22:2c:
                    cb:53:a9:62:85:c1:c6:60:c2:74:15:61:52:7b:d0:
                    d6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:D4:7D:C6:19:2D:2E:05:76:8D:64:EB:18:A6:87:BF:10:4F:BF
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:ba:5b:b6:9b:c6:13:da:28:43:b0:da:4a:d4:80:29:35:
         bd:e5:90:84:a2:bc:2f:52:b8:22:80:fb:b4:e0:ba:6d:01:9b:
         84:29:b1:fa:36:e4:6a:3b:e3:c4:62:76:4e:48:a9:08:13:fa:
         be:b7:dc:77:9b:ec:09:ff:12:18:7d:74:d1:4d:b7:dc:d1:64:
         aa:63:c8:a6:2e:58:f6:18:ac:0a:aa:c0:d7:c9:9a:91:b7:36:
         6b:b2:c8:3f:8e:2f:16:79:b2:2d:dc:29:81:03:22:e3:f3:3d:
         69:ed:97:b9:56:a6:86:bf:09:f0:69:53:73:24:a7:ff:c4:52:
         f3:4f:c2:95:07:41:69:09:a4:eb:36:93:78:34:37:09:84:e6:
         36:c4:af:fa:45:05:c6:f5:6e:26:d4:4a:5f:25:8e:33:55:6b:
         b9:91:3c:5d:a3:15:de:94:af:eb:7b:81:b3:64:ed:29:80:ef:
         0e:b4:7f:02:94:25:ee:e9:d4:14:bc:35:a3:3b:30:ee:04:20:
         14:9e:be:75:47:62:73:fd:e2:5e:04:ce:36:4b:df:8b:30:c1:
         7b:67:ae:7c:8b:0d:d9:93:56:3a:17:0c:04:41:a5:c9:be:ff:
         f3:77:0e:47:ff:59:64:5c:5a:1d:45:30:99:3f:29:60:8f:dd:
         57:30:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:06 2026 by rpki-client