Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
File:                     Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft (raw, json)
Hash identifier:          7ns3oZ1R0fMdOcyyS/CKUeuv7njHRoKySIFjaR0dVVw=
Subject key identifier:   CF:51:AC:82:61:9A:8F:1F:49:C0:C5:8E:38:F6:05:A8:C7:19:77:A4
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Certificate issuer:       /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial:       2859
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
Manifest number:          2846
Signing time:             Tue 24 Mar 2026 15:33:44 +0000
Manifest this update:     Tue 24 Mar 2026 15:33:43 +0000
Manifest next update:     Tue 31 Mar 2026 15:33:43 +0000
Files and hashes:         1: Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl (hash: EmXZOdANQ8Pv6Iv1TrCNIP7vglIWVXXx1U4RZsG7HGI=)
                          2: 6DAE125C54F611E79DF7E643C4F9AE02.roa (hash: LPyaDve5O9/4WQe5jKoSjlWttPY7ojSlNyw4xX1idoY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
                          rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10329 (0x2859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
        Validity
            Not Before: Mar 24 15:33:43 2026 GMT
            Not After : Mar 31 15:33:43 2026 GMT
        Subject: CN=69c2aed8-cb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:1f:06:54:bf:a0:ed:c8:0e:b3:ac:d5:7d:
                    cf:d7:d0:29:ba:41:b9:77:2c:00:8b:4f:3b:43:c5:
                    23:d3:a5:15:c2:0f:69:9f:db:3f:a1:20:47:2e:ca:
                    aa:42:29:bf:2f:5d:0f:ad:24:ce:21:ab:2a:08:77:
                    6a:24:d4:31:eb:d8:98:45:52:da:c9:73:18:59:e6:
                    e5:b8:d9:c2:59:7f:24:2b:93:34:7e:3d:20:3a:0d:
                    f9:d6:5a:31:1c:ac:76:09:7f:78:3c:f2:6f:45:be:
                    f1:78:fb:3b:ca:27:02:a0:ee:84:49:a3:2c:f8:e0:
                    3b:1b:f8:df:7a:cd:c3:a7:60:38:a8:47:45:a9:22:
                    07:19:b2:cd:b2:59:2f:ac:b9:a9:e9:0a:f3:7a:2a:
                    60:98:76:bc:b7:08:a1:61:f3:e1:c4:ed:36:7e:30:
                    a2:8c:10:bd:44:13:1c:cd:08:d5:c1:00:6a:6b:06:
                    69:4f:95:a3:e8:66:76:27:d6:9b:54:06:bd:5c:0f:
                    b1:71:8d:fb:7e:99:97:af:ac:dc:ab:60:e3:6c:a3:
                    22:25:10:b8:15:96:98:57:35:ea:2d:6d:9e:43:c9:
                    b2:af:73:16:61:5e:56:64:5e:f6:51:dc:96:25:47:
                    15:2e:03:01:92:24:7c:0b:4b:16:28:95:88:35:37:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:51:AC:82:61:9A:8F:1F:49:C0:C5:8E:38:F6:05:A8:C7:19:77:A4
            X509v3 Authority Key Identifier:
                keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:32:27:77:5e:13:bb:28:cc:88:a5:6d:df:c2:51:30:73:ff:
         f0:89:6a:92:93:60:fb:c5:0f:89:77:7f:c6:63:05:ca:93:0d:
         b2:c9:8c:d5:be:7b:83:85:0c:28:01:39:9c:6d:c7:01:22:3c:
         15:14:c1:05:77:d7:0d:29:1c:ab:49:f0:8d:12:43:19:c1:9b:
         a6:68:6f:c4:6f:99:55:1c:1d:5b:b4:53:5b:ac:fe:4f:e6:8a:
         35:bb:60:b7:4c:99:9f:80:54:36:33:81:f2:42:fc:44:60:0f:
         be:d0:47:cd:a7:f8:33:b8:95:66:5f:3e:b1:dd:32:c6:10:c2:
         6d:40:7a:2e:40:88:49:b2:65:ea:d5:58:c0:0a:3f:a1:09:28:
         b9:ee:e7:f3:1b:1e:e0:c1:af:0c:52:97:c5:fd:8f:37:6c:af:
         4e:dc:11:f9:d1:00:35:fb:3b:45:8c:be:f1:1b:8d:78:33:f9:
         f0:c2:00:18:84:08:c7:e7:84:a1:2e:f5:e5:f1:a1:2f:a6:11:
         9a:63:9f:fd:6c:c9:7e:a7:f4:8a:6e:0b:09:62:70:23:0c:1e:
         ae:55:7f:88:85:c7:2d:8e:3b:43:58:71:d9:5f:ae:1f:bd:52:
         f8:f4:39:74:9a:5d:01:9e:19:30:c3:4f:ff:d9:08:2d:f6:5c:
         aa:22:8b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:13 2026 by rpki-client