Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
File:                     qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json)
Hash identifier:          SJcZIxWTjHSW5Mg/x2RXAKCek12umMZYsYR/BFNTj1Q=
Subject key identifier:   BD:49:81:0B:C3:ED:96:54:E9:5E:D1:18:E8:DE:7C:24:3A:CA:BF:34
Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
Certificate issuer:       /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
Manifest number:          08BC
Signing time:             Tue 24 Mar 2026 20:12:21 +0000
Manifest this update:     Tue 24 Mar 2026 20:12:20 +0000
Manifest next update:     Tue 31 Mar 2026 20:12:20 +0000
Files and hashes:         1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: Hm78DcYUkk3ZZVV8MXFuVmhRiEI4kPHmuw1hZdJAtMM=)
                          2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: P9sNvR/Bcqt0bM7h111r4ZkTzU2KfMVGnEEXn/iTvs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
                          rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
        Validity
            Not Before: Mar 24 20:12:20 2026 GMT
            Not After : Mar 31 20:12:20 2026 GMT
        Subject: CN=69c2f025-00f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:4a:2b:fc:66:f8:e9:d3:70:e7:f5:ad:86:
                    80:ee:de:14:34:a8:1e:5a:21:81:af:6e:75:be:a9:
                    d1:02:75:01:e3:82:b1:13:fe:81:22:a3:99:77:ec:
                    fd:13:40:8a:c0:87:ca:21:0a:35:ae:5a:c3:52:aa:
                    88:89:6e:8c:74:ea:dc:1b:c0:28:ec:1a:b7:84:c2:
                    a7:2d:cc:e8:f0:ba:31:87:da:6f:af:e8:1d:c1:5a:
                    42:3a:18:fa:c3:95:37:97:e2:47:9a:4f:75:88:c7:
                    e9:7d:a0:6b:d7:b5:24:76:09:e0:c7:90:65:8a:8a:
                    fc:de:96:98:b0:4d:06:84:02:81:9d:96:eb:64:0c:
                    54:c4:53:d2:f8:94:25:d3:d1:ee:08:70:b1:b3:51:
                    a4:e2:d9:7d:60:bd:0f:01:fa:62:55:48:5c:e0:cb:
                    ff:15:7c:bf:f2:02:49:3e:93:b0:1a:f6:4d:3d:21:
                    f8:da:05:ce:1b:64:bf:b0:7a:e3:8a:5b:14:df:85:
                    94:c3:ec:d4:94:cc:61:58:bc:0a:4d:00:a4:99:cc:
                    a6:b0:a6:a0:73:fe:85:49:ce:33:7c:da:de:76:8f:
                    33:3e:a8:36:82:76:06:b8:6e:d6:26:d0:9e:61:f8:
                    07:be:65:ad:fb:37:b7:4a:f9:fd:5c:67:d1:f3:21:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:81:0B:C3:ED:96:54:E9:5E:D1:18:E8:DE:7C:24:3A:CA:BF:34
            X509v3 Authority Key Identifier:
                keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:62:cc:c2:f5:13:12:ab:b5:a5:0c:b4:20:00:fd:52:c1:6f:
         ee:3d:23:79:9d:45:4b:64:08:6f:7a:bf:ed:f2:56:2b:15:2e:
         50:a1:6c:07:44:c0:bd:19:72:46:d9:6f:ca:f1:98:cf:95:68:
         60:95:bf:91:99:4c:6f:06:c8:85:b8:49:d9:df:9f:72:06:b9:
         2c:3b:a4:cb:c3:57:b8:56:96:d4:72:8f:32:cf:17:d7:39:93:
         23:8e:da:68:ee:eb:83:f6:3c:0f:c4:b2:04:0c:16:0b:6a:33:
         98:4a:fb:a2:9d:0f:3d:23:dc:c2:8b:23:8d:9b:49:3c:f8:c2:
         de:3e:da:d6:9b:bf:1e:b3:55:83:a4:1e:4d:b1:50:15:f7:34:
         7a:4c:96:03:56:0a:bf:33:c8:0d:59:c4:28:21:57:cf:83:f4:
         8d:39:17:8a:3b:6b:04:d5:1c:ce:d7:3e:d0:5b:2d:21:c3:7e:
         13:54:58:cc:a3:45:b5:44:09:89:ac:bf:7b:f3:56:a8:68:37:
         0e:93:7c:af:b7:17:42:a5:31:6c:1b:3f:53:18:01:50:bb:bb:
         28:da:0a:be:f3:05:96:de:c0:76:18:b8:49:01:3f:83:36:e2:
         60:fc:df:cf:80:b5:13:5f:14:51:fe:93:6d:63:75:50:92:6c:
         b5:47:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:57 2026 by rpki-client