Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
File:                     qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft (raw, json)
Hash identifier:          QkNAzWo/7SNHRaTFmKpkdNbdgp6EmbAW4kiF62Nn0z8=
Subject key identifier:   DD:6F:C2:71:C8:0A:C1:DA:78:70:F6:69:BB:E1:94:35:61:91:54:C4
Authority key identifier: A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2
Certificate issuer:       /CN=A914D6FC/serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
Manifest number:          0294
Signing time:             Wed 25 Mar 2026 01:10:30 +0000
Manifest this update:     Wed 25 Mar 2026 01:10:30 +0000
Manifest next update:     Wed 01 Apr 2026 01:10:30 +0000
Files and hashes:         1: qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl (hash: 71J2r0wxgh4ETgEB0zLq09HRv/2+St2qEKKcmqF2Y0E=)
                          2: 11EC50B48B8F11EF8DE96E60C4F9AE02.roa (hash: Ae2D09RrIAEsj2zD2tu6+cplYXPngj1cvZnsDaiUJHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl
                          rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:10:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D6FC, serialNumber=A8BF54F6081967221935CB17CC13EBFB841A60C2
        Validity
            Not Before: Mar 25 01:10:30 2026 GMT
            Not After : Apr  1 01:10:30 2026 GMT
        Subject: CN=69c33606-60bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:df:d0:75:88:ac:cf:d6:91:ee:43:10:b8:
                    e8:fa:7e:f8:80:37:c8:ed:fa:2b:a3:b1:1e:e7:71:
                    0e:f5:85:a9:ea:eb:4d:fe:79:88:8a:6f:ef:8b:cd:
                    14:be:01:bf:8c:a4:27:03:2b:fa:b5:b0:05:ea:f7:
                    25:89:c0:5c:af:cd:2c:c8:31:f6:a6:84:f4:44:5b:
                    39:ff:4f:63:bc:49:89:36:bf:ac:68:1e:68:05:d2:
                    37:cd:0c:a6:4e:69:32:09:8d:b7:20:1d:52:fe:d7:
                    5c:79:43:46:8d:6d:e0:63:db:c3:26:6f:d5:a3:f7:
                    ed:ae:d9:28:64:a6:18:5d:dd:e7:62:bd:7b:f4:fd:
                    5b:da:39:4d:46:cb:2e:91:9c:dc:1e:66:11:0f:bb:
                    eb:88:86:db:64:bb:32:53:ef:4b:3a:d0:9c:c8:dc:
                    04:4b:62:e4:13:b5:e1:13:15:02:de:86:10:be:a5:
                    d3:04:68:f8:6c:fb:91:aa:a5:a4:86:56:42:57:b4:
                    98:8d:8e:68:be:26:1c:35:66:21:28:b6:fd:72:29:
                    9c:0c:0f:12:1f:25:77:44:ac:61:03:6f:e8:79:a1:
                    82:01:59:25:d2:a0:fc:23:b0:15:65:8d:b6:a0:84:
                    cc:d6:b1:0a:38:d8:6d:77:87:5e:eb:dd:6a:97:6b:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6F:C2:71:C8:0A:C1:DA:78:70:F6:69:BB:E1:94:35:61:91:54:C4
            X509v3 Authority Key Identifier:
                keyid:A8:BF:54:F6:08:19:67:22:19:35:CB:17:CC:13:EB:FB:84:1A:60:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qL9U9ggZZyIZNcsXzBPr-4QaYMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D6FC/88759182432F11EDBBD98F5CC4F9AE02/qL9U9ggZZyIZNcsXzBPr-4QaYMI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c3:a7:ae:30:8d:be:b6:ec:8a:ab:37:c0:7e:e3:88:89:ce:
         4e:ad:13:d2:d6:e2:e2:c6:41:86:43:8d:11:0d:90:d8:84:0a:
         26:73:e2:0d:7c:2f:47:e4:05:35:1a:20:e9:9a:a5:41:b5:6b:
         58:af:1f:ec:37:d2:8f:84:0d:f4:56:c7:9a:df:4e:77:06:80:
         4b:89:4d:c0:2b:d3:47:21:29:40:3b:7e:ef:27:fc:44:dc:dd:
         df:d7:fe:0d:88:ba:e7:9e:25:95:d3:cd:92:63:b9:36:4d:92:
         e5:b6:3b:39:1b:a3:8d:20:59:96:81:5a:c8:12:9b:18:63:03:
         47:51:de:aa:20:23:d4:a6:22:a2:be:73:99:fa:09:22:62:48:
         c1:e4:30:86:63:be:ca:a7:9d:7b:1e:3c:92:a6:01:df:95:81:
         6b:35:08:2a:01:4b:89:78:6a:73:74:3f:b6:65:27:b6:39:e0:
         71:3d:c5:e0:45:4d:d0:97:a9:31:56:de:b7:ff:98:9a:ca:d6:
         e5:e0:c0:07:98:d3:ae:c3:f6:2c:a2:f8:e1:6b:28:fa:d2:0b:
         d8:9c:a3:6e:e4:e5:3c:6c:96:69:d8:d2:36:b4:c6:11:c3:19:
         61:e2:50:5a:3e:0e:31:88:52:b0:65:50:69:bd:3a:dd:c3:77:
         28:00:96:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:13 2026 by rpki-client