Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
File:                     QAHwzRnduZQstaOVZ-w2k74lxqA.mft (raw, json)
Hash identifier:          7QKgg0bNv5Y2j41rmvhSxLdskFoml8UYWtWaGlWlMzY=
Subject key identifier:   9B:B5:D2:C9:44:36:BE:D4:1D:72:5C:7B:E1:40:6A:6B:99:8A:65:36
Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0
Certificate issuer:       /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
Certificate serial:       046B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
Manifest number:          045F
Signing time:             Sat 04 Apr 2026 23:56:08 +0000
Manifest this update:     Sat 04 Apr 2026 23:56:07 +0000
Manifest next update:     Sat 11 Apr 2026 23:56:07 +0000
Files and hashes:         1: QAHwzRnduZQstaOVZ-w2k74lxqA.crl (hash: AYuhLue0AvR51Z/fJhG0XwcaG+mArsRK4IR4wyeZPvM=)
                          2: 0ECA16060C5911EFA8601E42C4F9AE02.roa (hash: EAZq5ICviDwHpkwl67AFkwJKvgTwEE2w0QqDhrDYQew=)
                          3: F91B41A40C5811EFB9F63337C4F9AE02.roa (hash: z0SpWhiQq8PZIb6gNqRYDPk3XAcQSbjGxmSYWbxSdVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl
                          rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0
        Validity
            Not Before: Apr  4 23:56:07 2026 GMT
            Not After : Apr 11 23:56:07 2026 GMT
        Subject: CN=69d1a517-545b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:a1:a1:4c:06:d0:9c:ed:a1:c7:74:56:54:
                    1c:fa:2b:05:a6:68:a0:21:92:53:4c:d1:5d:1a:32:
                    ca:e0:e9:08:cc:0f:35:bf:23:87:03:b5:fb:3a:8d:
                    bc:df:18:91:9f:3c:69:cf:a8:f8:1e:d0:65:d8:4a:
                    81:33:d2:1f:de:71:cb:89:c9:4c:64:03:50:b0:e6:
                    e0:4d:eb:c1:83:cb:e3:19:6b:35:30:61:20:fd:19:
                    71:e4:7b:be:47:b2:04:80:cb:b4:83:a4:1a:0a:28:
                    0e:9e:58:51:58:17:a4:b0:7e:97:0c:f3:7b:e3:02:
                    83:1f:0a:d4:f9:15:bc:30:ec:b6:9e:83:aa:6c:01:
                    12:e9:72:00:3e:5a:02:3d:bd:8f:5c:30:41:1e:5e:
                    bb:6e:f7:45:ec:74:c9:84:cd:d5:e0:de:a9:b9:da:
                    48:9b:18:74:ac:73:c8:9e:7a:27:ac:ea:8d:69:70:
                    78:b7:c7:62:2a:9b:0f:8c:9b:58:71:c8:21:58:2d:
                    20:aa:59:b7:f4:5b:ce:8c:06:e8:ab:2e:93:6e:63:
                    6b:f7:e4:e3:f7:ba:2e:d0:de:a6:fd:05:57:81:fd:
                    6d:d1:e9:b6:e4:45:a1:7b:b3:77:36:ba:4d:d3:c4:
                    31:11:d1:4c:89:58:b9:a1:f3:c6:b4:4f:01:04:49:
                    40:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:D2:C9:44:36:BE:D4:1D:72:5C:7B:E1:40:6A:6B:99:8A:65:36
            X509v3 Authority Key Identifier:
                keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2e:d9:b4:23:f8:a9:f4:95:f3:23:c2:a6:47:cb:d1:08:04:
         0b:c0:25:45:e2:a1:04:82:55:20:bb:a6:9a:e3:06:f1:08:b9:
         81:ce:7b:8e:75:3d:56:b3:33:2a:9a:39:fd:b3:c0:57:77:c0:
         b4:f2:6f:3b:e5:b5:2e:40:91:c3:92:50:de:56:d2:e7:6b:7d:
         a2:85:42:fc:0c:6a:6d:36:fc:02:69:b4:44:e7:35:d4:d1:26:
         db:cc:9c:bb:ee:32:c3:c7:61:26:94:90:23:bd:73:5c:8e:1b:
         44:43:a2:66:21:a4:cd:62:74:b7:8f:61:ca:fc:7b:cf:e5:ca:
         1c:5c:c8:6a:d0:7c:f1:02:7c:89:f7:65:ef:d9:bf:17:96:1e:
         01:5f:3d:dd:06:2d:6a:ea:e5:e5:ee:23:80:d5:e4:9b:b8:64:
         99:53:2b:64:b7:95:9a:3f:88:38:90:25:17:af:29:92:d2:90:
         68:6f:eb:7a:5a:40:04:c2:90:7f:ea:29:98:29:f1:8a:32:dc:
         34:bd:c5:5c:3e:da:c7:1f:f0:f8:ba:e2:33:47:a6:cd:d3:af:
         be:b0:80:23:0f:97:13:ed:df:89:e8:08:31:e1:93:b0:a2:0b:
         08:33:92:9d:c8:90:43:85:2d:fa:ee:16:e3:57:43:1a:a7:26:
         19:06:c4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:27 2026 by rpki-client