Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
File:                     Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft (raw, json)
Hash identifier:          zcU4mkYLSvt7xy405EwEsCSdCVKUWj3UP5duOjK1Kvo=
Subject key identifier:   56:DE:B5:2A:05:8B:F1:B2:2E:78:47:2C:FE:D0:D7:C7:41:48:A2:83
Authority key identifier: 43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B
Certificate issuer:       /CN=A915C325/serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
Certificate serial:       11BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
Manifest number:          11AF
Signing time:             Tue 24 Mar 2026 17:04:52 +0000
Manifest this update:     Tue 24 Mar 2026 17:04:51 +0000
Manifest next update:     Tue 31 Mar 2026 17:04:51 +0000
Files and hashes:         1: Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl (hash: WmrTU1vhXsIDybh+Z53wfqYSFmcNrYLzn3nq7/e5JXU=)
                          2: 1ED040D0137511E98DD28353C4F9AE02.roa (hash: p2avfwbA5rKR8w+8rtSYTQz3CfMf5vT3jgg0mIj4V8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl
                          rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4539 (0x11bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C325, serialNumber=434A4917595216BF08829DC52C2ED3A8F282048B
        Validity
            Not Before: Mar 24 17:04:51 2026 GMT
            Not After : Mar 31 17:04:51 2026 GMT
        Subject: CN=69c2c434-f772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:cb:5b:ec:23:b4:13:b4:cf:56:7c:69:6b:
                    12:8a:1b:44:06:d2:40:4d:3e:a5:41:e2:de:1f:56:
                    fd:65:60:5f:7c:1d:e8:96:bf:66:b8:c1:34:19:89:
                    9b:e2:69:2b:a1:1f:ee:42:81:18:69:55:5e:c1:86:
                    db:ba:ad:ef:cf:b7:02:8a:99:7e:80:d4:bb:7d:f4:
                    96:dd:90:8a:68:5e:66:71:85:3d:78:ff:86:f2:0d:
                    18:3c:60:51:83:ed:09:11:9b:a8:70:a1:a2:03:af:
                    a1:3a:18:d7:1e:3d:bc:31:2c:50:2e:cc:ab:ef:f9:
                    6b:07:27:c5:ae:b1:fb:fb:07:7e:91:b4:f7:d8:88:
                    1e:b2:04:56:5e:02:8a:ac:6d:86:98:36:0b:54:fa:
                    04:d0:5e:55:8d:16:a2:29:75:88:32:74:00:89:9b:
                    ab:db:c9:1a:5d:4c:96:55:5a:fc:92:ae:40:48:80:
                    53:c6:27:ca:39:71:59:d1:a4:3c:6f:1c:cd:97:ca:
                    a5:5e:3e:4b:49:d4:57:8b:fa:48:65:f8:01:5c:2a:
                    d2:42:83:32:43:20:29:8f:e6:65:0c:9d:73:7f:05:
                    74:48:a6:14:68:10:40:24:6f:29:a3:25:3f:8f:52:
                    60:7a:37:26:b0:cd:22:49:47:cd:db:99:06:f5:e2:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DE:B5:2A:05:8B:F1:B2:2E:78:47:2C:FE:D0:D7:C7:41:48:A2:83
            X509v3 Authority Key Identifier:
                keyid:43:4A:49:17:59:52:16:BF:08:82:9D:C5:2C:2E:D3:A8:F2:82:04:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C325/8CE7DE76137411E9A1DC1053C4F9AE02/Q0pJF1lSFr8Igp3FLC7TqPKCBIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:50:81:81:c1:49:7d:99:d8:01:b9:dc:1f:94:ba:42:94:
         4a:14:24:be:61:99:2e:d3:da:a9:6a:29:13:a6:e6:47:31:03:
         1a:a2:66:fc:d2:d1:37:e9:5d:11:14:7c:76:ab:bf:68:71:cc:
         0b:5f:a4:f0:b8:63:3b:78:1c:ee:7e:2f:44:3c:7a:4e:38:71:
         24:4d:58:be:6d:78:a7:12:9e:00:7f:fb:0a:97:e2:84:0b:db:
         d6:d1:59:07:1c:9e:5f:2f:f6:24:93:9f:8d:cd:ad:44:20:2b:
         c5:96:c6:1a:ab:e1:8a:3e:1a:67:52:50:4f:51:e3:63:f0:d5:
         a3:d8:0b:dc:a3:29:18:1a:4d:df:3a:de:39:2a:9c:a5:60:46:
         dd:db:dc:0b:99:fe:24:11:91:a2:b2:ee:27:1e:7b:92:dc:db:
         0d:3f:79:62:b1:8e:a8:f4:27:95:46:3e:b7:73:78:4a:0a:83:
         e0:b3:48:23:ef:e0:87:b0:80:29:d4:58:82:38:34:cc:e8:63:
         87:79:0c:b1:32:d1:45:fe:06:dc:8e:2d:85:4f:da:fc:26:69:
         dc:75:a2:8d:b3:4a:dc:e9:b3:76:42:5a:68:23:ef:d8:d3:df:
         c0:7a:61:b9:7c:9b:bb:d2:40:fa:4b:fd:21:06:28:d3:02:c9:
         e1:93:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:55 2026 by rpki-client