Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft
File:                     QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft (raw, json)
Hash identifier:          oE6SnZqEgye1+cVmBeioYZo4rGBYeubiXrYFNbLQ09s=
Subject key identifier:   49:11:C6:5A:98:D5:99:6D:38:AF:A1:81:6C:49:D0:0F:ED:DB:72:74
Authority key identifier: 41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75
Certificate issuer:       /CN=A9142127/serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175
Certificate serial:       0B7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft
Manifest number:          0B63
Signing time:             Tue 24 Mar 2026 19:02:41 +0000
Manifest this update:     Tue 24 Mar 2026 19:02:41 +0000
Manifest next update:     Tue 31 Mar 2026 19:02:41 +0000
Files and hashes:         1: QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl (hash: +nZuTVuPopv9FGm5cSkU+knnyscnRMmBl1Ql3ggbrZE=)
                          2: 7B3737EE546E11EAAA4CF919C4F9AE02.roa (hash: bmXoLBfX6xgDiWLYVB99IscKM8HoFwAC8VY8TFy+E/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl
                          rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2938 (0xb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142127, serialNumber=415027D8C9298E97DA05C0C43DCD8BAF52174175
        Validity
            Not Before: Mar 24 19:02:41 2026 GMT
            Not After : Mar 31 19:02:41 2026 GMT
        Subject: CN=69c2dfd1-761b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:58:8f:96:f6:00:b8:d4:d1:88:dc:90:5b:
                    e5:d0:ca:69:d0:91:92:d5:fb:c2:6c:8a:8c:0c:0b:
                    86:00:7a:0d:7b:13:1f:c5:35:14:b8:d0:5d:9c:29:
                    64:ae:89:de:54:b3:49:f0:a9:4f:ee:5e:74:cf:15:
                    d9:a0:4f:94:93:28:b1:c8:6d:2b:41:ff:14:bb:85:
                    e5:3c:76:a0:80:4d:b5:83:6d:82:32:1b:25:67:4a:
                    0a:a9:fc:5c:30:7a:6f:d4:fd:17:2c:6f:fe:79:99:
                    f1:15:a6:61:04:1b:a6:6c:79:37:99:80:c9:f5:74:
                    cf:11:48:f9:f0:24:a7:cf:af:67:3b:83:51:b1:d5:
                    fb:9f:dc:29:68:ac:ab:d6:7c:79:53:7f:a2:51:2d:
                    e6:fd:f4:88:5f:24:9c:7b:78:ce:ac:dc:9c:7e:f2:
                    09:d6:98:35:6c:94:03:0d:80:fe:1f:d0:43:ca:31:
                    17:04:b0:97:9f:17:21:cc:73:3b:8c:5e:55:b0:ee:
                    be:21:39:c6:1f:c6:dc:ea:05:7e:c7:b9:77:35:01:
                    30:ef:68:7c:2f:d6:8a:9b:1d:44:c2:4b:30:8d:47:
                    0e:1c:d3:ff:03:1f:0b:f3:c8:4e:73:ab:fd:c0:02:
                    04:1e:aa:dc:39:01:69:d7:d1:03:95:62:6d:c2:00:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:C6:5A:98:D5:99:6D:38:AF:A1:81:6C:49:D0:0F:ED:DB:72:74
            X509v3 Authority Key Identifier:
                keyid:41:50:27:D8:C9:29:8E:97:DA:05:C0:C4:3D:CD:8B:AF:52:17:41:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142127/20F4443A546D11EABDD3C117C4F9AE02/QVAn2MkpjpfaBcDEPc2Lr1IXQXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:05:e1:f3:0f:d6:e1:dc:4f:94:7a:ce:96:e3:f9:a4:82:
         c8:1f:87:27:ce:4d:c4:1e:a3:78:2f:c1:f2:38:45:7a:7f:eb:
         11:13:3d:e0:ad:4b:aa:41:9b:55:ee:eb:a6:2f:bf:22:d6:ab:
         dc:47:05:dc:60:d5:ec:02:f7:67:1d:61:b2:b6:9d:b1:b8:88:
         62:b6:ee:af:7d:2f:c1:56:81:14:8a:6c:32:27:39:5b:58:b6:
         c6:c0:0d:6b:10:54:12:17:64:5c:8b:4c:62:ee:94:ab:50:1c:
         46:4e:03:d9:12:c2:0c:61:af:8c:c3:f8:a8:f3:2c:da:46:4a:
         7f:6c:95:45:03:ed:96:c7:7e:1c:d7:88:17:f5:7f:a1:22:d1:
         43:57:82:27:fb:1f:8e:a3:f9:11:06:51:69:84:5c:d0:9d:ff:
         23:c7:20:b9:61:f4:11:4b:68:84:8c:d9:2d:fb:77:55:0e:28:
         49:f5:20:51:42:e4:c8:e8:e2:09:0d:19:02:ca:fb:64:d7:0a:
         4c:fc:9c:37:20:cf:a9:5c:1c:df:0b:c1:ec:70:75:31:bb:a0:
         a8:7d:82:04:f5:a9:8b:92:f7:c6:5e:7b:7f:c8:ec:4c:00:0b:
         e1:94:33:bc:7f:a4:11:aa:77:32:88:c4:b9:c8:bc:69:3f:18:
         e7:47:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:10 2026 by rpki-client