Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File:                     qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier:          9InMcOrfQzGE+2gzzzGsEzozIDVnEMQGUh4Vwjacsug=
Subject key identifier:   A0:36:CA:9C:2D:45:B1:71:93:1E:4A:CC:82:8A:24:CB:69:C3:66:F5
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer:       /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number:          86
Signing time:             Wed 25 Mar 2026 06:54:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:54:42 +0000
Manifest next update:     Wed 01 Apr 2026 06:54:42 +0000
Files and hashes:         1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: XyX/ftM+PqHn/mYAVbOaxDIQ3XC1KocQZjysHyV9uSU=)
                          2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
                          3: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
                          4: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:54:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
        Validity
            Not Before: Mar 25 06:54:42 2026 GMT
            Not After : Apr  1 06:54:42 2026 GMT
        Subject: CN=69c386b3-fe69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:11:2c:90:4d:be:41:b2:07:5b:29:03:d6:
                    44:2b:e0:cb:e2:00:75:68:83:41:0d:8f:58:94:4b:
                    e1:95:e6:ed:9d:f4:58:2d:a9:1c:e3:51:51:dd:d6:
                    02:45:31:57:93:ec:47:ce:61:64:37:19:8f:e2:d4:
                    4e:85:fb:57:2d:29:a2:e5:dd:23:36:92:cc:bb:bd:
                    7b:2d:6a:79:8c:e4:24:ba:66:ba:89:79:9c:87:76:
                    1f:3a:4d:f5:b4:47:0a:59:86:b1:20:61:83:5b:14:
                    7d:7b:c8:e8:ca:46:3e:17:48:e7:de:de:2c:18:78:
                    bb:20:ca:a6:73:b5:12:7f:de:6e:90:b5:6f:a2:59:
                    e0:b7:59:f4:be:ee:ac:4c:f0:54:08:2c:37:b6:df:
                    5c:28:1f:8d:f2:2f:e9:9a:af:eb:f3:8e:d3:1f:5d:
                    d7:a7:3a:53:72:ee:f5:d5:77:75:b0:d7:bc:e6:81:
                    b0:7e:18:2d:d1:36:e5:5f:ee:f0:c8:c6:04:aa:a8:
                    6f:70:69:07:d4:4d:bb:fd:71:2a:ed:df:c4:6e:b0:
                    0c:83:75:fd:f6:f1:75:e9:47:88:b4:b8:76:41:20:
                    56:d6:f5:e4:6f:23:1c:78:b2:f4:ec:be:0a:2e:9e:
                    ea:62:1c:e4:62:87:a1:0a:8c:69:58:78:8b:a6:ca:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:36:CA:9C:2D:45:B1:71:93:1E:4A:CC:82:8A:24:CB:69:C3:66:F5
            X509v3 Authority Key Identifier:
                keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7b:ed:7a:fe:a1:03:5f:22:74:e4:51:69:fa:ae:0a:73:80:
         5c:aa:f2:e1:6c:91:88:6f:96:24:5d:85:f1:16:5f:eb:4e:bf:
         30:d8:37:6b:e4:98:bf:46:18:c2:61:96:eb:61:4e:67:4e:95:
         05:8e:13:a2:b9:1a:d8:d9:ed:18:98:94:f2:43:5e:8f:99:57:
         dd:23:66:70:aa:92:64:d1:37:ef:81:22:eb:66:3b:0e:c8:fe:
         f1:f6:c5:53:f9:a2:b3:0e:62:7e:fa:60:bc:c3:f0:70:57:0a:
         b1:73:ea:aa:11:18:f8:1d:d4:45:73:78:ac:97:98:7d:d3:d2:
         34:46:4b:0c:5e:21:c5:2f:e5:0e:76:76:58:9f:04:e6:d9:1c:
         de:1f:68:b0:4b:a2:b1:6c:ed:b4:5c:9d:63:21:62:52:b6:ff:
         97:b9:04:06:ea:cc:2b:66:f0:b6:8f:f1:07:89:4d:05:0c:5d:
         e0:2e:98:ce:7c:a6:c3:a2:dd:89:e5:9d:ec:ab:89:69:ab:a6:
         e2:eb:e3:41:63:46:0f:55:12:9b:df:0e:f8:83:79:d7:33:08:
         b0:26:4b:c1:12:8b:7c:9e:ca:58:68:d9:a5:fd:76:a6:bb:ac:
         68:93:8f:4b:ec:21:ba:b3:19:f4:d5:93:54:ed:4d:e1:92:b7:
         bf:fd:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:28 2026 by rpki-client