Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File:                     s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier:          zmUwu1fYezq/neU6wxVUq3/6HtpbK7Wcdw7R0Dg2gIY=
Subject key identifier:   18:1A:2F:6A:CE:A6:21:AB:A3:51:C6:AB:01:E0:88:03:77:3B:81:05
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer:       /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial:       0BBF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number:          138D
Signing time:             Thu 26 Mar 2026 18:51:00 +0000
Manifest this update:     Thu 26 Mar 2026 18:51:00 +0000
Manifest next update:     Thu 02 Apr 2026 18:51:00 +0000
Files and hashes:         1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: wjt4vA7wEM6egZ6UNyJavCDHv0ZHMWDkZ7vOdz9LQDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
                          rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 18:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
        Validity
            Not Before: Mar 26 18:51:00 2026 GMT
            Not After : Apr  2 18:51:00 2026 GMT
        Subject: CN=69c58014-7cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:1f:88:83:9b:98:70:9d:f8:a4:9d:70:10:
                    39:81:bb:93:d8:8d:67:83:4a:2a:81:8d:04:68:75:
                    f8:91:f9:46:a7:8c:73:fa:93:6a:92:97:0e:e3:dd:
                    ee:2f:0d:be:6a:8b:d6:96:60:23:c4:ef:82:cc:2d:
                    8a:08:8a:6c:2d:38:4b:a9:0b:aa:d0:d0:4e:68:9b:
                    3f:c3:e7:96:99:95:79:a7:b1:78:89:e4:d3:51:3a:
                    74:e4:a6:77:76:ed:df:61:f0:8a:a7:ea:68:0a:2e:
                    ae:0c:45:ff:29:9b:bc:bd:7b:89:5f:50:32:9c:a0:
                    43:65:57:48:63:5c:25:d7:88:91:5a:20:15:59:51:
                    b8:f4:8d:0d:ba:76:60:e6:bb:08:64:89:a8:0e:92:
                    e1:2a:f0:8b:ce:e6:8f:07:c2:a8:fa:df:d1:d0:a3:
                    ad:4e:e9:12:49:59:b1:21:6f:9a:d8:fc:50:06:ce:
                    4d:53:52:fb:8f:90:9e:58:8c:90:b0:67:d9:2d:ab:
                    9d:1f:29:49:9d:d8:e5:12:b9:93:4c:fe:6a:88:cb:
                    89:56:df:32:40:42:f9:8c:65:71:9c:92:f3:35:bc:
                    1e:12:df:bd:38:28:eb:bb:b8:cc:80:c2:b5:d1:b3:
                    a3:34:8c:2c:93:73:72:99:da:98:4a:c4:0e:28:6c:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1A:2F:6A:CE:A6:21:AB:A3:51:C6:AB:01:E0:88:03:77:3B:81:05
            X509v3 Authority Key Identifier:
                keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:7b:ec:eb:33:7e:59:77:6e:1e:de:fe:7d:4f:43:ff:82:2f:
         14:e9:b8:14:35:6c:93:e4:f9:da:03:99:53:72:52:74:2a:8e:
         f1:b4:32:63:c1:16:15:07:bf:b2:b4:6f:df:20:fe:b2:f8:76:
         61:88:d1:b0:f4:35:03:8d:ae:da:c5:58:0f:62:f7:36:e6:f1:
         2e:79:ca:c4:0e:6a:c4:a9:06:0f:9f:32:e9:65:e0:f9:ab:1f:
         c8:7d:94:09:ac:a4:f3:66:c7:22:7b:3a:11:0b:2e:4e:af:11:
         55:47:a4:a3:60:78:2b:fd:ab:61:60:0c:b3:c2:78:94:db:38:
         e0:33:7c:f2:34:1f:a0:16:d9:9d:1c:f2:c7:3a:3e:c9:16:19:
         44:55:3f:61:58:35:bb:a0:ed:c0:c0:a2:94:34:75:85:db:c5:
         8d:36:6b:29:aa:a7:f6:98:9c:25:d3:ad:ec:e4:92:f1:26:9f:
         41:6a:c5:4f:0c:c8:57:2c:48:c5:2a:27:bb:57:7e:76:c8:ad:
         be:be:cc:8b:f8:e5:a0:41:35:e6:97:d5:d9:fc:6e:58:9b:84:
         ef:85:22:86:4c:50:37:43:d8:e3:1a:c0:aa:4d:1d:c2:73:7f:
         30:58:eb:cc:5a:3f:6d:02:fe:9f:37:f4:2b:ad:fe:12:45:15:
         7c:50:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:15:12 2026 by rpki-client