Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
File:                     8QiS-FRovwBO719OH6WRfwYyoEk.mft (raw, json)
Hash identifier:          mssWytEXIXwxBr3FM7iv49E/Z/NB5LyiQBBK0+gfUcY=
Subject key identifier:   3D:AC:61:4B:C3:FE:04:F8:3F:A5:02:B4:13:F6:9F:1A:44:DC:0B:1F
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Certificate issuer:       /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
Manifest number:          0865
Signing time:             Tue 24 Mar 2026 22:16:39 +0000
Manifest this update:     Tue 24 Mar 2026 22:16:38 +0000
Manifest next update:     Tue 31 Mar 2026 22:16:38 +0000
Files and hashes:         1: 8QiS-FRovwBO719OH6WRfwYyoEk.crl (hash: yWBCP9z4PSh22nqthIVarJ3O/jHb4s9l03dR8/2iz5k=)
                          2: C73A1C1CEEC211EFBB3A3D30C4F9AE02.roa (hash: w4L8dHVS1XHD4h6I2xHvOIj7Z4mM+7gLcE1i72z+Mh0=)
                          3: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (hash: ToDqmpyYy9fDyBGitKxxqoCmfFWhXOoX4JrjahgKPgk=)
                          4: 8280FB76969E11EF90AEE785C4F9AE02.roa (hash: Sqb1RnCHe7QmViOCcQqLHGN8k0RimMvBeGf+h/lyiNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
                          rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
        Validity
            Not Before: Mar 24 22:16:38 2026 GMT
            Not After : Mar 31 22:16:38 2026 GMT
        Subject: CN=69c30d47-b206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:dc:23:3e:51:4f:b6:2a:5f:1e:37:aa:7e:
                    7b:d9:dd:9e:7c:bf:d4:f2:c0:9f:8b:fa:a1:4a:88:
                    01:45:54:2f:7a:fe:11:ab:5b:54:b0:73:e7:e0:e1:
                    a0:43:c4:32:d8:c1:d7:ba:16:d2:64:a2:56:91:94:
                    b9:5f:ed:20:fc:53:a1:5b:1c:55:d3:f3:00:86:68:
                    b3:b9:ed:c1:4e:33:e4:4b:6b:0e:5a:76:31:0b:98:
                    4f:82:52:8e:0c:48:a5:b4:b0:85:50:6a:4b:73:ff:
                    8d:17:af:ac:6b:cc:5b:42:1f:04:7c:2f:e0:2b:7d:
                    98:e4:91:7c:10:82:b8:a7:cd:67:7f:5a:e4:55:06:
                    46:2b:0a:e9:7b:48:47:b6:32:00:7c:fa:56:b1:8f:
                    2e:d8:79:c9:dc:99:1d:8b:aa:b9:de:08:f2:fc:04:
                    14:1b:0d:40:0b:b3:94:12:12:2f:e0:9f:a5:66:82:
                    5a:eb:96:26:89:f4:03:e4:ef:b0:ca:e7:0f:91:8c:
                    1e:45:e0:86:73:c8:38:24:d8:35:2b:8a:75:b1:ac:
                    84:8c:4a:64:14:03:e3:6b:f0:75:94:e5:4b:81:54:
                    8c:c1:0c:cc:13:2e:36:b6:45:2b:17:20:f9:1e:13:
                    5e:20:71:91:18:90:cc:4a:e8:b3:8c:b5:17:9f:1b:
                    b9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AC:61:4B:C3:FE:04:F8:3F:A5:02:B4:13:F6:9F:1A:44:DC:0B:1F
            X509v3 Authority Key Identifier:
                keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:dd:46:fb:c0:8b:d0:f6:9b:2e:fb:24:b3:aa:ee:f3:da:
         e7:09:03:59:e9:54:99:40:9e:b8:38:21:d8:86:4e:22:cf:68:
         bc:49:9a:5c:03:55:39:3d:42:3e:5c:83:72:aa:28:8f:d8:46:
         e2:07:df:1c:d8:ed:c5:d1:44:97:81:13:5e:d1:f0:aa:b9:62:
         be:90:14:16:95:05:08:88:80:44:71:88:05:a0:0f:e3:10:13:
         b5:6e:16:b0:ef:23:93:cf:44:b3:86:44:c9:18:b2:66:e9:36:
         80:a4:ab:af:22:53:87:f7:b9:cf:7e:79:71:38:62:5b:07:4b:
         e0:d7:01:a7:a0:20:54:04:94:72:33:82:8d:1b:26:35:f6:a7:
         51:0c:ca:0c:77:76:c9:67:c3:da:49:d9:06:c4:da:6a:3f:f4:
         22:44:0d:6c:0f:9e:8d:0f:dc:1f:b5:bd:81:50:76:ba:9d:41:
         78:2c:81:0b:a9:ca:27:c4:81:80:ff:35:84:76:59:e7:bb:29:
         bd:8e:7b:99:59:18:f1:38:b5:1c:2b:18:c0:9e:4c:f7:d8:c0:
         89:a4:23:93:93:65:06:34:51:fd:01:6d:64:ba:0e:c2:63:98:
         5e:35:8b:7b:d3:11:fb:db:f0:0c:1c:a1:0c:1f:db:a3:e8:d1:
         1a:73:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:00:00 2026 by rpki-client