Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
File:                     q1NeEyiEvKNF969pE6sKOXdl56k.mft (raw, json)
Hash identifier:          9MvviH7Q38x4tuRU1CYKmWtHIsqYM/vqeYGX2k0oeug=
Subject key identifier:   F6:13:D2:FF:F6:BF:85:FE:36:83:6E:9F:88:E5:5F:38:E7:17:6F:B8
Authority key identifier: AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9
Certificate issuer:       /CN=A9115F15/serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
Manifest number:          07C5
Signing time:             Tue 24 Mar 2026 21:10:45 +0000
Manifest this update:     Tue 24 Mar 2026 21:10:44 +0000
Manifest next update:     Tue 31 Mar 2026 21:10:44 +0000
Files and hashes:         1: q1NeEyiEvKNF969pE6sKOXdl56k.crl (hash: oGEqrztO9YIIeyYXXscKtxJ3Dazve2S4GAYSrj5gmhs=)
                          2: 56D3C71687AB11F095613811C4F9AE02.roa (hash: 0iBnup8wptUHFtoJ6sIo1Mi6U0z/k64gTDUxYk5oZKg=)
                          3: 1F2DD6743A9611EB8CD4224BC4F9AE02.roa (hash: 73c7rPkr5oOJDjoo4nNiA+fWKV7P9/3x9TJs2lmqH+g=)
                          4: 574E0B4810E111F09B0FF441C4F9AE02.roa (hash: O/pW+oSzPwpDSh1DcS0KrdGVZXKtTtvU2uPHKAV54QQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl
                          rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F15, serialNumber=AB535E132884BCA345F7AF6913AB0A397765E7A9
        Validity
            Not Before: Mar 24 21:10:44 2026 GMT
            Not After : Mar 31 21:10:44 2026 GMT
        Subject: CN=69c2fdd4-31cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:9f:68:dd:49:00:6d:28:46:8c:8c:f4:e3:
                    b7:92:8f:69:2c:bd:16:00:10:c1:5e:fa:5c:dd:bf:
                    7c:9a:f6:b5:29:72:0c:cc:63:0e:23:a4:cd:5a:56:
                    11:3e:02:f5:70:07:24:40:15:78:27:58:9b:8f:e9:
                    ae:2e:11:5f:02:0b:c3:67:5a:16:25:6a:67:6b:a7:
                    7e:0d:a7:3c:a2:83:38:16:45:a4:56:5c:a6:c6:99:
                    bf:fa:76:58:cf:c2:3a:75:d6:ba:c8:8e:aa:9b:62:
                    20:db:ae:3b:ee:68:ef:38:59:4e:ca:56:45:36:41:
                    b9:8f:b8:81:36:b0:b1:b5:20:65:ef:20:04:b9:df:
                    cf:a5:df:9b:29:7c:72:ef:7b:b7:25:ab:b4:e5:d3:
                    39:cb:0c:be:33:98:a5:90:8e:41:68:be:a6:19:8b:
                    06:79:76:38:3c:37:c0:b5:a7:45:e7:58:28:17:06:
                    63:80:54:ca:9e:e1:c5:bb:3c:4e:89:19:da:f1:4b:
                    63:e3:59:6f:16:10:ca:13:56:a4:74:98:c5:84:dd:
                    bc:1f:96:a0:17:f7:8c:68:7b:35:d1:87:37:50:9d:
                    c7:9d:2d:f5:1e:43:b1:7b:0e:47:b2:c1:a0:ea:a4:
                    4d:30:fb:a2:bf:3f:02:cd:22:28:30:86:59:3f:ca:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:13:D2:FF:F6:BF:85:FE:36:83:6E:9F:88:E5:5F:38:E7:17:6F:B8
            X509v3 Authority Key Identifier:
                keyid:AB:53:5E:13:28:84:BC:A3:45:F7:AF:69:13:AB:0A:39:77:65:E7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q1NeEyiEvKNF969pE6sKOXdl56k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F15/FFED27943A9311EBABDE232FC4F9AE02/q1NeEyiEvKNF969pE6sKOXdl56k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c0:93:33:9b:c4:08:4d:ab:d2:03:43:56:c8:23:e1:de:24:
         50:1f:15:56:0b:ab:a9:28:46:93:80:7f:1b:3c:b6:5c:8d:cb:
         0d:0c:ee:ee:b0:66:bb:b6:19:be:66:73:3f:5a:30:1c:19:9b:
         f0:da:4f:7e:b4:ca:15:6b:81:81:fa:cd:41:98:df:84:ce:7d:
         9d:62:d1:26:8e:1f:c5:69:c1:81:76:92:82:c2:35:0a:4c:32:
         ea:7b:48:54:a6:48:4d:70:51:1d:07:73:9d:59:86:84:65:93:
         c2:72:96:8f:38:0d:50:60:49:d1:db:51:af:dd:b7:5e:ff:21:
         ce:61:c6:be:0e:95:14:f8:d9:56:5a:29:32:03:7e:c5:1b:80:
         43:f4:cc:67:ed:9f:d3:5a:42:54:5a:8b:41:2b:fa:2d:9c:9c:
         f5:a9:1f:d6:25:f8:1e:45:0d:71:e0:c8:f9:fa:39:2d:f6:e7:
         57:68:59:db:0b:90:44:59:70:6a:7a:f4:53:a7:bd:bc:77:05:
         3a:71:a2:a6:ed:43:b8:dc:2c:15:48:d4:d5:ce:b1:ca:e9:56:
         10:4b:47:35:a1:48:85:c7:c6:22:00:74:11:a3:7e:30:b1:43:
         7b:bd:3b:7b:d4:90:cc:81:51:0c:a5:19:53:05:fa:8e:0c:79:
         dd:8c:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:21 2026 by rpki-client