Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
File:                     Q59amkDhmWeae8Cb4gf9H2CgSFc.mft (raw, json)
Hash identifier:          yas8zJIc1mv2n1Y1bWSo0z3usiv6F4g3t0ZdwvqrEjY=
Subject key identifier:   40:AB:21:85:F0:F7:94:13:39:07:AB:4C:A6:EB:E5:75:51:37:06:60
Authority key identifier: 43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57
Certificate issuer:       /CN=A9126C60/serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
Certificate serial:       2E25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
Manifest number:          2E03
Signing time:             Thu 26 Mar 2026 15:30:34 +0000
Manifest this update:     Thu 26 Mar 2026 15:30:34 +0000
Manifest next update:     Thu 02 Apr 2026 15:30:34 +0000
Files and hashes:         1: Q59amkDhmWeae8Cb4gf9H2CgSFc.crl (hash: +BnMgfcmQFIk7MZgsJV62J6e1PZXRH5U3/xH0n9rU2c=)
                          2: 4A66F4B0C52F11E59EE2C868C4F9AE02.roa (hash: Wc0o48iov7rXKqvl8HBWTbUP09bv/Hb3Sn4CiAQcsog=)
                          3: 7726182828DD11ED8EA0FC4FC4F9AE02.roa (hash: RRtlZPLxNXoaDY5ECfLrXwJY6e1jfEEkw/UE23pwwM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl
                          rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11813 (0x2e25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126C60, serialNumber=439F5A9A40E199679A7BC09BE207FD1F60A04857
        Validity
            Not Before: Mar 26 15:30:34 2026 GMT
            Not After : Apr  2 15:30:34 2026 GMT
        Subject: CN=69c5511a-071e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:f7:c5:69:5b:24:cf:33:e9:83:61:a1:a4:
                    6a:c1:2b:5e:57:b9:cb:c6:b2:bc:6f:aa:96:be:27:
                    55:7b:69:9f:08:8b:b6:f6:66:69:21:c8:90:59:ab:
                    fd:8a:a3:9f:aa:cc:d8:dd:f6:59:0b:06:bd:46:d8:
                    c3:4c:24:e6:0b:7a:d5:7c:48:0c:e0:0e:6b:88:80:
                    99:6a:90:f7:35:ff:32:da:92:d0:49:c5:6d:f6:5f:
                    fc:2d:ff:8e:d4:dc:27:db:65:11:69:8f:73:8a:7e:
                    38:37:29:31:3b:80:58:c8:0b:ce:94:30:cb:06:3a:
                    87:22:e8:a1:f3:03:44:8d:e4:88:48:d7:ec:8f:05:
                    b7:e0:e9:7e:5f:e3:6e:bc:22:7d:2b:f1:91:28:2e:
                    59:a2:6b:d5:e9:c8:ca:c5:03:7e:19:2f:20:26:d5:
                    07:76:d6:26:c4:9b:8c:25:06:ec:1a:53:2b:79:45:
                    ff:e3:90:97:53:65:72:b7:8a:61:4d:b0:76:26:5f:
                    70:1f:29:fd:00:96:b2:b8:f0:8b:cc:79:32:7c:50:
                    64:67:89:97:ac:ab:72:dc:68:ad:c7:02:b0:6e:00:
                    fb:08:af:72:23:f2:a7:53:4d:79:38:bc:6d:a0:43:
                    6a:18:54:9e:fe:fb:ad:8a:d9:a2:9b:a1:dd:10:f0:
                    32:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:21:85:F0:F7:94:13:39:07:AB:4C:A6:EB:E5:75:51:37:06:60
            X509v3 Authority Key Identifier:
                keyid:43:9F:5A:9A:40:E1:99:67:9A:7B:C0:9B:E2:07:FD:1F:60:A0:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q59amkDhmWeae8Cb4gf9H2CgSFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126C60/BF6323E6894B11E387C49E675911EA32/Q59amkDhmWeae8Cb4gf9H2CgSFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:ee:ae:d4:2f:4e:74:6f:06:fd:41:ff:04:5a:f1:55:2b:
         b0:fd:63:de:de:c8:bd:29:44:83:93:ac:2e:16:44:14:1c:84:
         6b:28:09:f1:3b:d8:5e:ce:08:68:fe:c2:a3:9b:d9:6f:ec:e2:
         82:ac:6f:8c:75:eb:6d:4a:83:bb:5e:73:19:6c:4c:83:60:9d:
         1b:1e:16:11:88:ec:68:f3:24:0c:fb:18:17:b0:ae:55:06:93:
         10:a2:d7:d3:24:f9:28:0a:e8:77:84:ac:88:b3:e6:43:b6:27:
         98:63:ee:9c:85:9c:b3:fe:8c:a2:1d:fc:cd:cb:4f:f3:20:e2:
         f9:4c:cf:e9:50:c2:b9:22:d2:db:f5:57:23:25:41:16:de:e6:
         fd:4d:4c:f9:97:27:67:e2:4a:78:c3:78:3b:ef:c5:bd:ce:ac:
         d8:2c:93:2e:81:94:2a:33:ce:bd:51:37:08:0d:5a:23:65:9b:
         57:ed:c5:02:e5:4a:bb:54:2d:67:42:68:a7:41:a2:a6:3a:23:
         f7:fb:26:bf:64:50:28:ae:00:2e:ab:ad:83:ee:42:c6:d7:11:
         a5:0c:df:78:d3:09:e3:26:30:ed:d8:83:02:1e:fb:bc:b8:2a:
         d9:53:31:14:18:a5:58:0f:3d:08:a6:8b:01:08:f7:7f:cc:21:
         35:8c:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:00:17 2026 by rpki-client