Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
File:                     4QZLtgGhMQh2G1RXofcVJMSky84.mft (raw, json)
Hash identifier:          8dNHJpoURmSTFYnKwl/1ezGNjxkubl+p41igUonojUo=
Subject key identifier:   07:1A:65:C0:C1:2C:BD:EF:09:25:5D:3F:8C:1C:3E:B7:D1:DB:1B:B4
Authority key identifier: E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE
Certificate issuer:       /CN=A914B57F/serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
Certificate serial:       0B6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
Manifest number:          0B65
Signing time:             Tue 24 Mar 2026 18:58:40 +0000
Manifest this update:     Tue 24 Mar 2026 18:58:39 +0000
Manifest next update:     Tue 31 Mar 2026 18:58:39 +0000
Files and hashes:         1: 4QZLtgGhMQh2G1RXofcVJMSky84.crl (hash: neiH/bfO6Rl+lSJ5HDG0fMatLMbzlPy/1slyT9pjKic=)
                          2: 11685AAC4F0D11EAA161D143C4F9AE02.roa (hash: 8RY8svb6SNxrn1KpRC36LY5heMgR5Mh+tAuTSevI5rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl
                          rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2926 (0xb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B57F, serialNumber=E1064BB601A13108761B5457A1F71524C4A4CBCE
        Validity
            Not Before: Mar 24 18:58:39 2026 GMT
            Not After : Mar 31 18:58:39 2026 GMT
        Subject: CN=69c2dedf-f9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:ff:47:da:95:79:a3:23:da:1a:f5:17:f7:
                    34:cc:24:69:c5:72:79:b0:0e:04:75:0f:f4:6e:b8:
                    d0:df:22:12:3f:8c:11:2d:fb:59:a5:fe:f2:4a:73:
                    ca:f7:81:31:bc:44:11:8d:c8:ae:41:99:9e:a1:8a:
                    ab:2e:9f:fd:75:d7:ce:aa:93:46:6c:e6:f9:5e:86:
                    1c:58:4c:9a:8b:1d:76:65:e4:72:20:0d:54:b5:5f:
                    af:52:6d:63:87:d4:41:4b:28:59:46:c8:8a:73:2e:
                    bd:4c:f6:97:02:34:c8:f3:8d:06:46:75:e1:58:19:
                    84:b5:ae:6e:65:43:4f:2e:98:a9:65:6b:16:a2:2a:
                    d7:1d:25:83:7a:87:47:bb:34:52:bc:19:a6:be:3f:
                    da:2e:1f:00:96:0b:de:45:69:c4:18:30:5e:a9:c2:
                    71:e0:ce:47:bc:f6:d5:79:bd:10:7c:1d:54:76:db:
                    a1:fb:03:0e:8b:b8:50:04:b0:85:33:04:67:ee:af:
                    62:21:02:a3:15:60:d7:bc:32:bf:2e:e4:ac:d2:36:
                    9f:12:eb:4f:d6:c0:82:f2:c6:a5:cb:5c:05:f4:9c:
                    10:b7:ea:0e:a3:2e:8b:eb:64:98:03:1c:f5:48:69:
                    af:fb:54:7c:66:e2:84:e8:d3:6b:9e:72:99:09:81:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1A:65:C0:C1:2C:BD:EF:09:25:5D:3F:8C:1C:3E:B7:D1:DB:1B:B4
            X509v3 Authority Key Identifier:
                keyid:E1:06:4B:B6:01:A1:31:08:76:1B:54:57:A1:F7:15:24:C4:A4:CB:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QZLtgGhMQh2G1RXofcVJMSky84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B57F/B2457D6A4E5911EA9EE9E20DC4F9AE02/4QZLtgGhMQh2G1RXofcVJMSky84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6d:ab:ba:4b:ab:e3:de:ff:99:2c:04:b6:54:0f:a4:94:0b:
         2c:21:15:cc:a6:2a:84:99:0a:f1:22:10:0c:de:6a:00:b2:8c:
         8e:cd:56:40:e2:ae:aa:35:b8:06:dc:24:52:d3:9e:95:30:66:
         21:39:9f:05:31:81:dc:9b:4a:c1:be:77:2f:75:2d:47:f0:1c:
         59:90:96:86:b7:7b:bf:f7:55:90:d0:ca:b2:b5:77:22:13:3b:
         f3:54:95:81:7e:9b:33:b8:86:eb:a0:73:03:b2:95:56:af:9b:
         ea:85:7a:69:35:b4:e4:f0:8f:3a:b1:94:0f:e6:99:01:b5:d6:
         4a:d8:66:26:fe:21:28:53:6a:aa:cd:f9:e2:0a:1f:e6:7c:ae:
         fb:5e:60:ab:d1:47:f5:44:d3:78:ae:a7:0e:f7:0d:ad:86:17:
         a7:9d:0b:17:0f:33:ed:b2:b6:e4:f0:cb:b0:60:bb:0e:97:1b:
         49:d3:be:ea:96:37:5e:7f:c6:18:ce:d7:d6:8b:96:de:bc:0a:
         6c:7a:97:e9:50:76:80:c0:00:15:e6:94:06:58:43:d8:31:b9:
         d7:60:e9:76:c5:b3:d6:b9:f3:d1:27:78:da:77:5e:5a:51:ce:
         ec:16:98:c7:3e:28:b8:bc:7d:80:d3:84:a3:1e:3c:db:b2:3a:
         1d:1b:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:38 2026 by rpki-client