Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
File:                     q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json)
Hash identifier:          rAt/CRTU3WHyXvRZ6dOvnIBvAsykmPnDdR6MN79AmPc=
Subject key identifier:   7F:91:DB:84:62:D1:74:69:CC:6D:B8:A8:9D:72:4D:F5:D6:39:90:41
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Certificate issuer:       /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial:       0B5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
Manifest number:          0B48
Signing time:             Tue 24 Mar 2026 19:04:14 +0000
Manifest this update:     Tue 24 Mar 2026 19:04:13 +0000
Manifest next update:     Tue 31 Mar 2026 19:04:13 +0000
Files and hashes:         1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: UdE10pOs+xpe1rCf/zyAzx4e3E9NChMa81sxl11WX4o=)
                          2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
                          rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2906 (0xb5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
        Validity
            Not Before: Mar 24 19:04:13 2026 GMT
            Not After : Mar 31 19:04:13 2026 GMT
        Subject: CN=69c2e02d-4e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:ed:72:b1:1d:68:05:d2:d8:d3:1d:04:9d:
                    0e:c7:82:39:dc:4f:eb:4d:e3:03:57:b3:e9:75:96:
                    69:7a:51:94:21:fe:21:56:5c:4f:cd:9b:c3:cd:42:
                    a4:b1:61:cc:a2:ba:19:21:05:2b:1e:37:bc:12:91:
                    81:bd:78:40:46:49:ec:54:67:b3:04:b6:b2:fd:d5:
                    ec:f8:5f:51:fa:38:3b:23:8e:54:a1:9d:54:a1:3c:
                    5a:d9:07:fe:8d:91:f7:9f:2c:c2:53:eb:a9:1d:36:
                    41:00:9d:fb:73:2a:1b:56:a5:de:e9:d4:49:8f:1c:
                    85:fd:45:fb:77:45:1e:3a:d3:21:a2:3b:f6:c6:ca:
                    65:1b:b9:ee:58:e5:74:98:4d:14:92:7f:2d:29:e3:
                    9c:07:5b:cb:b6:44:86:5d:e9:78:4b:e6:50:ee:f9:
                    39:76:ff:40:ee:91:ec:9a:88:b2:f0:f2:f9:34:c4:
                    98:b4:4a:2c:f6:0b:33:37:cb:70:e4:11:01:8b:de:
                    ce:0a:dc:fd:e2:25:6c:70:99:db:d0:d6:78:27:11:
                    34:2f:3c:e4:41:2e:09:25:27:82:d8:c9:da:b2:e6:
                    60:23:7e:e9:89:29:3c:f3:d7:87:96:25:e2:24:08:
                    2f:9a:d4:79:3e:49:f1:68:ec:f9:7f:e3:9b:72:82:
                    a2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:91:DB:84:62:D1:74:69:CC:6D:B8:A8:9D:72:4D:F5:D6:39:90:41
            X509v3 Authority Key Identifier:
                keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c0:b4:e2:67:91:3a:00:89:03:df:8b:fc:1d:1a:ae:7c:f5:
         9f:0b:12:db:67:8e:0f:24:d9:75:c8:f6:e7:be:79:00:8e:e2:
         58:f0:24:5e:6a:a2:9f:62:30:54:51:c4:3d:85:d8:10:15:08:
         6a:2b:bc:18:bd:ce:5b:9c:d0:59:09:ec:93:09:ae:8e:59:8a:
         c4:7d:7d:71:db:36:5a:d6:bb:ae:4f:b1:38:a0:9b:67:06:bf:
         f9:a0:7f:4d:ab:72:c0:73:44:66:c1:66:e5:df:83:71:54:1e:
         bc:9c:3e:a4:38:39:78:34:9b:96:ee:44:87:87:59:6c:49:43:
         f3:84:7e:08:f0:7e:2f:59:e4:5d:0f:ae:98:bd:23:d5:fb:b3:
         1e:75:06:a0:f6:09:03:f3:27:a8:05:b7:84:53:c0:ff:b5:9d:
         f9:ee:dd:ea:a6:12:93:4d:c5:13:e6:ad:38:d2:84:45:db:e5:
         ba:18:b5:3e:2e:57:7a:de:96:ea:66:67:ba:57:a1:a0:b4:4c:
         9f:3a:17:d6:fa:e4:65:cd:99:35:b8:68:14:8d:cd:f1:74:43:
         bc:bd:2a:55:88:d9:df:32:19:22:4e:3a:3d:2a:91:42:3f:b4:
         12:bc:d4:e9:93:84:a0:e0:ac:82:17:8b:2a:61:88:d1:90:a4:
         d7:7d:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:59:36 2026 by rpki-client