Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
File:                     Qyo25tVwCwvKzOD0FXauaxPK08A.mft (raw, json)
Hash identifier:          RbLQrjvJT0VchoBvHmFW091CyL+N/6QS0S7+0aESDqo=
Subject key identifier:   CF:56:05:59:92:25:5A:30:17:E0:A2:F5:94:6C:C9:96:23:E3:94:6B
Authority key identifier: 43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0
Certificate issuer:       /CN=A91627B1/serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
Manifest number:          01BB
Signing time:             Wed 25 Mar 2026 03:09:21 +0000
Manifest this update:     Wed 25 Mar 2026 03:09:20 +0000
Manifest next update:     Wed 01 Apr 2026 03:09:20 +0000
Files and hashes:         1: Qyo25tVwCwvKzOD0FXauaxPK08A.crl (hash: cppQC3XfRSCsoCwjxZtiqKmHuHAzsqUtYV5XzFQxvZQ=)
                          2: 3ED152FE82A411EE87690C58C4F9AE02.roa (hash: gEpkbZAOCiAGZqrCOuhhWC5OkOPHde0fYqgs1m5gseY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl
                          rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91627B1, serialNumber=432A36E6D5700B0BCACCE0F41576AE6B13CAD3C0
        Validity
            Not Before: Mar 25 03:09:20 2026 GMT
            Not After : Apr  1 03:09:20 2026 GMT
        Subject: CN=69c351e0-d1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:77:bc:de:6c:a7:9d:e0:aa:3a:68:58:8c:e1:
                    6f:f8:41:34:0a:83:6e:ad:cf:01:fd:d0:a0:9b:b4:
                    5f:86:0e:16:8f:e3:15:e8:e7:71:ba:09:b6:d8:85:
                    62:69:e0:bf:b1:03:ad:31:cf:b0:e3:cc:72:83:09:
                    66:34:61:6d:05:38:1f:2e:f9:17:21:85:ca:99:55:
                    ff:db:96:65:e2:ea:a1:d1:ea:ac:f9:a1:01:1d:88:
                    4b:db:66:7e:40:f4:3b:3c:91:a8:4d:0b:b5:46:5a:
                    9c:f9:d0:45:e8:4f:d0:55:74:f2:1d:d1:02:ac:27:
                    c4:7e:11:e3:e5:c9:72:6e:75:ab:e6:a7:2a:0d:68:
                    e4:38:06:ef:62:49:92:6d:dc:ef:b4:f4:6a:26:e6:
                    d3:9d:1d:d3:8b:bb:a7:a5:11:b4:02:43:04:9c:94:
                    07:5b:a5:3f:cb:cf:35:4d:f4:56:90:48:86:ab:35:
                    6b:31:b6:c6:04:4a:9f:61:d8:18:cb:e9:44:d9:9f:
                    94:47:e8:85:e1:b6:8a:e3:60:4d:26:f3:94:14:db:
                    c7:9f:7a:6d:45:8f:03:7a:5c:33:8c:ce:5f:a1:a0:
                    7e:9d:2f:d3:b8:ef:b4:a4:bc:a2:32:68:f1:a8:09:
                    d0:53:ef:4a:fa:5c:ad:4b:5e:d3:4c:78:42:60:83:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:56:05:59:92:25:5A:30:17:E0:A2:F5:94:6C:C9:96:23:E3:94:6B
            X509v3 Authority Key Identifier:
                keyid:43:2A:36:E6:D5:70:0B:0B:CA:CC:E0:F4:15:76:AE:6B:13:CA:D3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qyo25tVwCwvKzOD0FXauaxPK08A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627B1/8FAF2BDE82A311EEAC69F456C4F9AE02/Qyo25tVwCwvKzOD0FXauaxPK08A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:67:e6:aa:c4:48:ae:32:31:a5:8e:2e:2b:e2:1a:0d:47:
         d3:60:62:cf:fd:62:a9:aa:ae:f2:10:cb:a7:8d:53:f3:a9:70:
         07:b7:8f:87:9b:1d:61:6a:43:ab:93:67:a2:f2:2c:8b:7d:c0:
         3f:30:cb:f5:01:e6:9e:5c:4d:88:c8:85:32:8e:c8:13:9e:5d:
         af:22:7d:fd:fc:8d:98:b5:b7:55:0d:07:2e:13:36:87:52:bb:
         aa:d0:b3:22:72:02:cb:af:47:10:89:cb:c9:2a:96:d7:51:83:
         8d:e7:ce:9d:b8:27:d9:cc:73:27:ab:1c:8b:89:aa:55:1d:2b:
         f2:4a:64:a4:d8:c6:d2:43:8b:41:27:11:8c:89:34:78:5e:bd:
         15:e0:ed:be:5d:19:68:23:ee:65:9a:27:ab:2c:50:20:2e:37:
         89:28:f0:5e:84:4a:2d:6c:08:de:f3:b1:8d:df:78:d7:6c:07:
         94:76:a7:79:db:fc:43:3f:7a:58:37:5b:ac:98:3d:cd:08:07:
         5f:1c:69:fc:b2:53:b7:40:d7:cc:70:7d:86:77:12:31:3c:c5:
         03:a1:ad:fb:7e:cd:ce:f0:ad:2b:76:7f:3b:24:15:7c:b7:cc:
         70:56:54:76:60:64:f0:50:e6:59:ff:d0:00:cc:f5:bf:e3:0b:
         ed:2a:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:13 2026 by rpki-client