Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
File:                     qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft (raw, json)
Hash identifier:          QiYynefS/PswceFkRTxvgvBUTbm+95zTRfh3eln/Jh0=
Subject key identifier:   CE:D6:9B:62:B2:64:BA:26:3F:18:F6:15:99:94:43:CF:1D:A8:60:56
Authority key identifier: A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93
Certificate issuer:       /CN=A91953AF/serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
Certificate serial:       0193
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
Manifest number:          018E
Signing time:             Wed 25 Mar 2026 03:42:43 +0000
Manifest this update:     Wed 25 Mar 2026 03:42:42 +0000
Manifest next update:     Wed 01 Apr 2026 03:42:42 +0000
Files and hashes:         1: qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl (hash: KhptDhPpvJ7KZYO4ONk9br+wmI6NS0/Y+U2Ohi2CCwk=)
                          2: 593AFF1ACA0611EEBA01A22CC4F9AE02.roa (hash: CY7sgHFLl+nOK7TpwFje8AHE3rJopUk0iaEHtQoJM00=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl
                          rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91953AF, serialNumber=A824B663F3F5A34F82EE2272A8AEFDE43B79BD93
        Validity
            Not Before: Mar 25 03:42:42 2026 GMT
            Not After : Apr  1 03:42:42 2026 GMT
        Subject: CN=69c359b2-d45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:ca:e4:32:0d:2e:dd:8c:72:dc:02:3e:e1:
                    a7:dc:5c:65:1c:be:99:7e:0a:42:b9:aa:d2:60:14:
                    2a:2c:d7:b7:95:c8:75:79:29:67:7a:6a:70:ee:95:
                    65:4d:d6:29:ed:b2:b4:16:9c:bf:b0:78:33:04:03:
                    ad:3d:1b:a5:6c:87:05:1d:e7:f8:45:32:e6:90:ad:
                    67:a0:ee:b6:2c:dc:69:37:b2:85:dc:e4:0e:56:9f:
                    b2:14:d0:c1:d7:90:ef:be:c0:ab:d6:85:2c:b8:6c:
                    a9:7b:39:28:7d:bf:98:f0:28:ae:5e:30:a4:e8:54:
                    e5:a2:e8:97:9b:d3:a7:e5:82:36:5d:a7:82:41:3e:
                    de:25:2d:fa:24:2a:fb:cb:97:be:a3:1e:24:92:67:
                    71:72:86:36:9f:a2:73:62:4e:08:66:62:00:29:dd:
                    9c:06:5c:b0:ea:3d:5a:14:70:bb:73:f3:02:31:20:
                    af:eb:50:f4:29:b2:ab:35:32:ee:86:97:93:6a:c0:
                    f9:ed:90:92:a9:4a:5f:3e:38:04:53:bc:c0:56:a1:
                    14:e8:2b:08:db:55:37:3a:94:77:22:2c:c3:2b:40:
                    90:cb:b9:22:93:f2:51:1c:09:69:1f:fb:77:fc:bd:
                    d5:d7:b1:36:cf:ac:37:94:3f:c8:39:5b:34:38:ac:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D6:9B:62:B2:64:BA:26:3F:18:F6:15:99:94:43:CF:1D:A8:60:56
            X509v3 Authority Key Identifier:
                keyid:A8:24:B6:63:F3:F5:A3:4F:82:EE:22:72:A8:AE:FD:E4:3B:79:BD:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qCS2Y_P1o0-C7iJyqK795Dt5vZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91953AF/043160B0CA0411EEBCD01770C4F9AE02/qCS2Y_P1o0-C7iJyqK795Dt5vZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:64:32:0f:b7:38:ed:5c:b1:98:94:f4:96:e9:80:83:50:
         bb:19:3e:ac:2f:0c:2a:a9:8b:3f:ce:ce:6f:65:65:5a:17:27:
         92:21:2d:a5:51:01:a9:f1:b1:b8:25:74:6d:b1:a1:53:fb:28:
         cb:78:40:fb:9c:36:ff:29:d0:a6:2b:3c:77:8b:cf:b5:55:22:
         ba:6d:6a:94:d4:8f:2f:e3:b3:c2:c3:46:e6:75:e6:be:37:e4:
         2b:b6:96:29:34:53:76:45:5b:d0:2d:d5:32:63:29:08:c5:4f:
         cf:69:ec:f5:09:bb:67:a2:9d:be:7b:d4:d9:0b:18:33:15:6e:
         d0:ef:86:6d:b2:a1:a4:1f:14:36:5e:3d:cb:56:ab:3b:40:a6:
         65:c9:6e:d7:08:77:07:86:2e:a3:fe:ea:55:da:c5:78:1b:87:
         ad:f0:6d:ef:96:d7:8c:48:55:98:15:12:2e:33:b9:4f:0b:8f:
         e0:e9:e3:4b:5c:31:80:8b:d4:23:ff:69:0d:ac:24:d7:a2:dd:
         26:b6:b2:12:a3:aa:2b:4f:9f:ee:e3:e3:17:34:5a:45:c6:13:
         34:84:9b:36:44:f4:ce:20:1b:39:1a:4b:3e:0a:92:05:e8:2c:
         c8:d4:cd:6a:8f:3b:ff:57:80:2f:e3:ba:11:c6:07:79:53:bf:
         7d:b8:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:34 2026 by rpki-client