Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File:                     QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier:          gUwgsa9fD8hFAF/D70Z4YzK9rR6hCSid5ipl2JssPiw=
Subject key identifier:   B4:15:A0:78:9D:9C:E7:1B:D1:81:38:82:3C:94:57:7F:90:69:D5:82
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer:       /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial:       0D11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number:          0CE6
Signing time:             Thu 26 Mar 2026 18:22:22 +0000
Manifest this update:     Thu 26 Mar 2026 18:22:22 +0000
Manifest next update:     Thu 02 Apr 2026 18:22:22 +0000
Files and hashes:         1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: 9hGk9sMRu5Qh0Q90T8zGyhMM3AEUWkHYjuj/kIMl/Fs=)
                          2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: fs8vNdHPTeEjIkaHFCo8i9QI5xttWL2wCiA1UOJja1k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
                          rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
        Validity
            Not Before: Mar 26 18:22:22 2026 GMT
            Not After : Apr  2 18:22:22 2026 GMT
        Subject: CN=69c5795e-0ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:f7:77:0f:8f:aa:29:2b:4d:74:22:8b:00:
                    f6:a9:61:5a:f8:8a:bd:55:38:4d:ad:67:a1:9d:7d:
                    2a:46:99:bd:99:6f:fc:9c:9b:e6:cc:d5:9d:30:08:
                    bb:e7:04:8e:63:bc:4e:35:ca:85:cd:dc:36:5b:19:
                    e9:c6:8f:ae:9f:a2:7b:90:13:c8:3a:52:65:c2:46:
                    a6:cf:6a:d6:0c:51:4a:01:97:36:1e:8a:cb:32:84:
                    44:74:7f:7c:f6:ba:e7:de:b4:d2:c2:ac:ce:c9:18:
                    e5:6c:90:27:64:9d:15:3f:a2:19:48:e1:34:f6:a8:
                    4c:47:94:ba:84:5b:b4:33:9e:e6:6e:c9:41:49:58:
                    6d:95:04:af:4f:54:07:87:d8:cb:30:03:c6:96:81:
                    0d:5d:b7:6c:44:c9:0d:d8:27:a0:14:0b:a1:2b:08:
                    eb:a8:34:de:49:3f:cb:a4:0d:6a:07:73:06:69:9c:
                    57:d3:98:46:7b:ff:b7:85:d3:06:e6:a4:70:ca:7d:
                    3b:4d:d8:af:ed:e1:17:a3:04:d3:b9:db:4a:a2:d3:
                    2c:8f:2a:a2:04:4d:d8:9f:4b:ce:01:0b:9b:85:7b:
                    cb:1f:29:d2:dd:f2:a9:a5:89:d4:4c:fe:60:a8:ce:
                    f7:18:62:58:64:f8:4f:91:f4:44:e4:4f:d7:c2:bb:
                    a8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:A0:78:9D:9C:E7:1B:D1:81:38:82:3C:94:57:7F:90:69:D5:82
            X509v3 Authority Key Identifier:
                keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6a:9c:b4:bd:1b:c7:14:93:d6:3a:f4:c8:92:03:bc:0f:ee:
         0d:18:53:f2:06:db:06:50:4a:17:60:84:16:38:63:24:9a:97:
         5e:48:ea:8e:20:e8:ce:3e:74:ac:44:11:cf:64:2e:21:78:42:
         be:f2:bc:62:df:2d:52:28:17:62:76:be:0a:e8:d9:f2:04:36:
         57:c9:aa:0c:22:39:b6:91:be:40:5a:95:67:13:2f:ad:c5:20:
         66:d8:bf:7b:42:09:7c:f6:fe:11:e6:c5:ea:87:19:35:5a:fc:
         fe:d3:80:35:05:25:75:9e:d8:b7:5a:4b:fc:68:c6:43:a4:64:
         49:10:35:d9:0d:f9:57:8d:99:9f:53:0d:cc:24:87:8c:f9:cc:
         b9:94:ad:cb:a9:9b:1c:14:df:ea:36:3a:6e:38:50:d9:59:f9:
         40:73:79:b7:f4:0d:29:ec:ed:e2:1a:48:64:d4:0e:2d:b6:05:
         47:2d:aa:18:17:c2:38:20:5e:ae:19:d7:b2:dc:53:b9:66:aa:
         97:fc:b9:4d:a5:3e:1d:3c:db:f9:77:a2:ca:0c:a4:41:7c:f0:
         e9:25:7c:6a:99:3b:8c:ed:ae:80:80:ad:1a:98:ad:52:fb:41:
         98:20:d1:92:bc:66:26:07:49:48:89:6d:e9:e9:85:b4:f2:0d:
         12:84:bd:44
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw
M0E1MDJDQ0MwHhcNMjYwMzI2MTgyMjIyWhcNMjYwNDAyMTgyMjIyWjAYMRYwFAYD
VQQDEw02OWM1Nzk1ZS0wZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlu73dw+PqikrTXQiiwD2qWFa+Iq9VThNrWehnX0qRpm9mW/8nJvmzNWdMAi7
5wSOY7xONcqFzdw2Wxnpxo+un6J7kBPIOlJlwkamz2rWDFFKAZc2HorLMoREdH98
9rrn3rTSwqzOyRjlbJAnZJ0VP6IZSOE09qhMR5S6hFu0M57mbslBSVhtlQSvT1QH
h9jLMAPGloENXbdsRMkN2CegFAuhKwjrqDTeST/LpA1qB3MGaZxX05hGe/+3hdMG
5qRwyn07Tdiv7eEXowTTudtKotMsjyqiBE3Yn0vOAQubhXvLHynS3fKppYnUTP5g
qM73GGJYZPhPkfRE5E/XwruoGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQVoHid
nOcb0YE4gjyUV3+QadWCMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD
RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM
TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp
d3E3dWstRHU1bmtEcFFMTXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu2qctL0bxxST1jr0yJIDvA/uDRhT8gbbBlBKF2CEFjhjJJqXXkjqjiDozj50
rEQRz2QuIXhCvvK8Yt8tUigXYna+CujZ8gQ2V8mqDCI5tpG+QFqVZxMvrcUgZti/
e0IJfPb+EebF6ocZNVr8/tOANQUldZ7Yt1pL/GjGQ6RkSRA12Q35V42Zn1MNzCSH
jPnMuZSty6mbHBTf6jY6bjhQ2Vn5QHN5t/QNKezt4hpIZNQOLbYFRy2qGBfCOCBe
rhnXstxTuWaql/y5TaU+HTzb+XeiygykQXzw6SV8apk7jO2ugICtGpitUvtBmCDR
krxmJgdJSIlt6emFtPINEoS9RA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:37:00 2026 by rpki-client