Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
File:                     QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft (raw, json)
Hash identifier:          C31jOzUZqqnK+bLXBWyTVB//iYYiiqwF4kuGMBWJRI8=
Subject key identifier:   6D:69:AF:05:2C:9E:BF:39:E1:73:66:38:06:57:24:DE:69:54:F1:D9
Authority key identifier: 40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67
Certificate issuer:       /CN=A918C31C/serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
Manifest number:          0100
Signing time:             Fri 27 Mar 2026 05:41:14 +0000
Manifest this update:     Fri 27 Mar 2026 05:41:14 +0000
Manifest next update:     Fri 03 Apr 2026 05:41:14 +0000
Files and hashes:         1: QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl (hash: d2dhujdo7ieYlXg5wIBBxGFux0zkEfGIvf6SAuigIeQ=)
                          2: 7C616486A6EF11EF9EB0B473C4F9AE02.roa (hash: SbiDykr/pWZIcmbH7i6N4pOfkuK1J/v0mHF6btkD3SA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl
                          rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 05:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C31C, serialNumber=40FAA70F8A23A03D16A11086DBE502E862164967
        Validity
            Not Before: Mar 27 05:41:14 2026 GMT
            Not After : Apr  3 05:41:14 2026 GMT
        Subject: CN=69c6187a-48fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:0f:4b:ed:39:04:6f:79:7f:6c:a6:79:f5:
                    01:0d:4d:69:8c:b4:7d:d9:6f:d2:59:3d:8f:0f:50:
                    ab:97:db:45:0a:be:3c:a3:d2:d4:9d:59:26:a9:4c:
                    9f:45:75:e7:4a:4d:27:19:b7:47:74:7e:af:96:16:
                    e6:5a:e4:20:04:35:66:8f:0d:ec:75:58:83:29:0a:
                    ea:77:6e:33:d9:1b:ff:ae:a3:8e:e6:00:e5:98:82:
                    ff:34:d6:68:4f:1a:07:95:66:e4:31:b7:69:e5:c4:
                    35:04:0b:d9:b5:dc:a5:62:9e:3e:ae:b1:a9:f1:44:
                    cb:54:83:e5:f3:ed:59:37:05:ed:66:bd:7d:6d:48:
                    29:e1:03:be:0a:e3:42:12:01:f7:17:19:30:87:cf:
                    b8:0d:17:a1:ba:8e:5a:a7:6d:36:43:90:db:3b:c7:
                    2e:0d:e6:d9:c5:1d:03:0f:71:f5:d8:b7:86:f9:0a:
                    79:77:55:c6:69:42:9a:ce:89:98:40:2b:fe:ec:6c:
                    48:fb:4a:5f:2b:39:86:1a:b4:4f:f7:fa:f5:e3:74:
                    37:8c:ed:f6:db:9d:d7:54:29:19:18:dd:5e:e3:36:
                    99:d0:38:e4:12:0c:6f:32:dd:0c:e6:02:96:0b:78:
                    7a:9e:3e:fd:8f:e9:fe:92:06:12:ee:91:e9:13:52:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:AF:05:2C:9E:BF:39:E1:73:66:38:06:57:24:DE:69:54:F1:D9
            X509v3 Authority Key Identifier:
                keyid:40:FA:A7:0F:8A:23:A0:3D:16:A1:10:86:DB:E5:02:E8:62:16:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QPqnD4ojoD0WoRCG2-UC6GIWSWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C31C/F107DA10A6CF11EFB2FBB57DC4F9AE02/QPqnD4ojoD0WoRCG2-UC6GIWSWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:07:9e:ae:a6:de:04:c6:2a:55:6e:67:a1:88:01:95:4c:0d:
         9f:8e:f0:d1:52:43:24:8e:db:61:cc:2c:56:4e:1f:67:3e:ab:
         42:a3:f8:7e:c6:ea:42:84:da:08:40:75:9c:9c:f0:af:ca:9c:
         17:7c:4b:88:d2:31:1a:03:0e:c3:55:6e:ef:1e:d5:14:38:18:
         46:87:93:7d:94:00:c2:cb:2f:6e:10:9b:c9:6d:38:8d:fb:23:
         42:f5:94:1b:29:42:50:00:86:c4:c1:c8:a1:fa:a6:8e:5a:c7:
         4a:0f:32:c4:b7:4f:51:cd:35:c3:fc:b0:a6:7a:32:37:b6:84:
         63:b2:08:b8:97:8d:95:84:f2:fb:35:55:9f:ca:fd:b3:7b:b0:
         53:d7:ce:9d:01:e0:49:66:d6:00:ee:40:f0:9e:1e:ee:d2:f5:
         62:77:7a:e9:4e:90:e9:d3:83:11:0d:02:a8:30:de:e3:0a:a5:
         cd:57:50:f4:93:2e:88:5b:44:a4:30:89:7c:29:91:21:9c:88:
         ab:b6:1f:d6:a9:04:49:49:b9:04:16:43:d5:fe:1c:6d:e3:07:
         22:bb:79:a7:a1:ba:82:79:0a:fb:eb:47:ec:60:bf:1b:95:c6:
         a9:06:f5:e6:d4:f2:1c:0a:a5:db:03:74:b8:1f:dd:77:a5:37:
         03:f0:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:52 2026 by rpki-client