Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
File:                     qSHPiNjIngus1O4YU4wzsnipWSw.mft (raw, json)
Hash identifier:          2fLeXr+m7Ka/d8fh6okFTH8LcBFX4W/EkJoiJ2FvZlI=
Subject key identifier:   EA:38:F8:F8:C5:D5:40:4F:1A:38:D1:E5:1E:40:CB:C9:59:52:B2:40
Authority key identifier: A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C
Certificate issuer:       /CN=A91127A2/serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
Certificate serial:       068E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
Manifest number:          0686
Signing time:             Thu 26 Mar 2026 22:20:04 +0000
Manifest this update:     Thu 26 Mar 2026 22:20:04 +0000
Manifest next update:     Thu 02 Apr 2026 22:20:04 +0000
Files and hashes:         1: qSHPiNjIngus1O4YU4wzsnipWSw.crl (hash: ZYa5KP+oRHb97kX4kkKNmrpXYWcREIM2CSNdXzqnXrk=)
                          2: 07332486B1D111EBA956F96AC4F9AE02.roa (hash: fipC8fnuwGfyjeMJXsenerqMyqmtrvp5/f9MWaX5s6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl
                          rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1678 (0x68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127A2, serialNumber=A921CF88D8C89E0BACD4EE18538C33B278A9592C
        Validity
            Not Before: Mar 26 22:20:04 2026 GMT
            Not After : Apr  2 22:20:04 2026 GMT
        Subject: CN=69c5b114-6902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:cd:48:00:07:8f:6f:49:27:8c:7c:a5:bb:
                    3a:a1:f2:1a:5b:02:a4:69:c8:12:c9:87:cf:8f:f8:
                    af:44:ac:e5:74:be:f3:a2:a3:09:c9:39:47:b9:9e:
                    82:84:77:49:20:11:ac:24:40:31:ab:08:b0:6c:4b:
                    ec:11:88:e5:2f:55:42:4b:96:8c:b0:f0:84:79:ae:
                    38:6f:69:71:68:d5:b2:ab:d0:77:9a:70:ac:a9:46:
                    82:17:6b:bf:fe:4d:29:50:24:4d:cb:b2:1a:18:91:
                    34:02:4e:18:2e:5b:0b:1e:6f:0b:e3:bd:bf:3e:eb:
                    43:15:40:f0:a8:ed:a7:c5:16:7d:74:23:a0:6f:d9:
                    20:2b:5c:5b:75:4b:cb:3c:74:91:05:9f:94:8b:0c:
                    b3:54:05:04:06:3f:b2:13:a5:1f:2e:2e:07:48:d4:
                    14:e0:6e:ae:01:fc:92:75:55:6b:cc:b9:ab:a4:ad:
                    c3:dc:7b:77:fb:9b:ce:08:be:4e:61:78:bc:be:89:
                    25:2c:9e:ef:64:b6:fe:01:c5:10:34:f5:8b:1c:8e:
                    75:1d:c3:b7:96:50:ae:74:16:76:ec:38:04:8d:2c:
                    02:c9:e9:25:23:36:bc:90:d1:1a:78:3d:0b:95:34:
                    7f:96:fa:26:14:75:7d:4a:1d:83:aa:23:1c:c2:0f:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:F8:F8:C5:D5:40:4F:1A:38:D1:E5:1E:40:CB:C9:59:52:B2:40
            X509v3 Authority Key Identifier:
                keyid:A9:21:CF:88:D8:C8:9E:0B:AC:D4:EE:18:53:8C:33:B2:78:A9:59:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSHPiNjIngus1O4YU4wzsnipWSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127A2/D1CD5458B1CE11EB8FF1C067C4F9AE02/qSHPiNjIngus1O4YU4wzsnipWSw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:c3:29:1b:ca:c4:a3:2e:14:d5:35:12:9d:9f:69:1d:ff:
         37:b3:a4:90:14:53:8e:ab:99:70:36:2c:eb:f3:35:71:a6:f6:
         28:04:0b:82:a4:af:ca:9f:0c:0c:8f:4a:8e:8e:dc:41:02:81:
         35:d6:95:7b:3f:3d:02:c0:e4:14:38:00:60:ee:45:ed:a1:6e:
         ac:d9:a5:db:43:45:60:4b:ca:d6:e7:58:f1:0f:68:87:ff:bb:
         d1:ac:a7:de:64:9c:81:72:29:cb:0a:b4:0b:3f:79:6a:42:56:
         e7:51:f3:d3:48:0e:22:7f:f8:21:ae:93:e0:2d:d4:ec:de:35:
         8a:ab:3c:58:f8:44:28:2d:b7:c6:95:ac:ed:7c:4e:0a:84:43:
         e0:a6:78:f2:cd:2f:0d:82:cf:0a:5c:00:51:dd:08:e5:0e:52:
         8d:4d:da:5a:2f:e6:af:4e:ca:a8:aa:c0:7a:59:d5:1e:29:c5:
         7b:93:33:09:84:51:14:35:fd:18:24:73:19:4f:3f:41:9a:d0:
         c8:6a:22:43:fe:96:7a:0a:d7:0a:28:40:eb:ab:dc:a0:9f:16:
         a5:8c:c6:73:ae:ca:d3:45:3d:64:d8:1f:00:61:47:a5:36:1f:
         f8:f9:e5:fb:1c:1b:f6:f1:46:03:d4:19:7d:43:07:42:34:66:
         5e:75:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:38 2026 by rpki-client