Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
File:                     QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft (raw, json)
Hash identifier:          xsPYMrrsNssynAbt6YCkUw806FD6JOvHJE59B5VKvi4=
Subject key identifier:   72:57:3A:C8:58:1D:7B:C3:3B:22:DA:9D:E1:5C:60:20:BB:69:61:91
Authority key identifier: 41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53
Certificate issuer:       /CN=A91A35A4/serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
Manifest number:          01CD
Signing time:             Wed 25 Mar 2026 02:59:48 +0000
Manifest this update:     Wed 25 Mar 2026 02:59:48 +0000
Manifest next update:     Wed 01 Apr 2026 02:59:48 +0000
Files and hashes:         1: QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl (hash: nXIuXEbZjvi1ZFYoVg9l0G871gEEychjSHLvwYyWhhQ=)
                          2: 294325DC699711EEB317603DC4F9AE02.roa (hash: rkdbQ97/B4DHE2WNeWD/G6YxsLNJ2wf35oDouMC90w4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl
                          rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A35A4, serialNumber=41A0C244359F0235C9A60B1F719A5FD567966053
        Validity
            Not Before: Mar 25 02:59:48 2026 GMT
            Not After : Apr  1 02:59:48 2026 GMT
        Subject: CN=69c34fa4-71a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:12:dd:c0:e0:df:ee:22:f6:e7:c5:af:aa:
                    99:e4:7f:56:8b:db:2d:a8:48:ec:85:62:5a:8e:de:
                    12:ee:c5:e5:b6:a3:e5:fa:ac:c6:1d:c1:d5:8e:45:
                    a4:19:b0:b9:19:cd:92:24:be:25:09:34:13:dc:6e:
                    8c:0f:0b:92:5d:e1:c7:0d:b1:26:c8:bd:2d:30:3b:
                    ae:1f:d4:de:7b:01:f4:f0:b2:34:88:8a:4c:14:06:
                    7f:b6:42:7d:a7:29:ea:e0:a0:f7:eb:66:7a:60:08:
                    bd:1f:fd:53:b0:6d:38:44:92:32:0e:25:17:95:5d:
                    6b:17:f2:66:5e:52:bf:0d:8e:fb:16:f5:9b:65:19:
                    39:68:06:f9:82:0f:b4:51:08:b6:df:20:28:51:ee:
                    e7:51:69:b8:f9:6a:00:59:4d:72:9b:a5:17:fd:95:
                    04:fa:61:5e:a8:6f:fc:c4:ec:77:77:33:53:1f:76:
                    7c:c6:8d:59:cf:a5:de:9b:de:73:1d:ab:71:c1:4f:
                    ef:3a:d1:cd:93:db:02:3a:06:2b:9e:d1:c7:d7:9e:
                    80:e0:84:a8:dd:6c:a9:c2:4c:89:3b:b7:16:2e:66:
                    7b:03:71:b4:6a:25:40:39:d6:8c:a8:26:d3:be:30:
                    ed:2b:12:30:90:5a:72:46:e3:60:f7:0e:17:2b:eb:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:57:3A:C8:58:1D:7B:C3:3B:22:DA:9D:E1:5C:60:20:BB:69:61:91
            X509v3 Authority Key Identifier:
                keyid:41:A0:C2:44:35:9F:02:35:C9:A6:0B:1F:71:9A:5F:D5:67:96:60:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QaDCRDWfAjXJpgsfcZpf1WeWYFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A35A4/DBC1FD10699611EEB4E77B3CC4F9AE02/QaDCRDWfAjXJpgsfcZpf1WeWYFM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:75:67:f4:7e:6e:59:5f:b9:d3:dc:47:ee:85:ea:ce:e0:c6:
         cf:25:24:b5:68:a0:91:05:c5:9d:2d:6e:13:a1:be:c3:39:87:
         5c:9e:b5:91:0b:09:cd:fc:3c:cc:9c:20:f9:20:a7:7f:af:4e:
         40:02:50:15:65:da:43:60:2e:18:cb:b5:f9:02:e2:79:83:57:
         08:60:61:f7:66:6f:74:4c:e3:ca:96:df:34:d2:6c:e4:f6:fd:
         21:48:28:81:e5:24:b9:c9:39:8d:01:93:9f:c7:8a:13:36:32:
         a2:d4:31:f3:d7:21:9c:ce:c1:89:c9:22:6a:91:21:10:bb:b7:
         42:e0:55:71:f5:ae:b0:40:03:a8:15:05:0f:d6:13:ac:44:8e:
         e6:d8:09:35:97:74:27:46:13:08:86:a4:fc:63:a9:dc:16:28:
         d9:6a:eb:65:24:84:d1:a9:76:4f:b6:0f:71:a3:51:5d:e6:ad:
         4d:8b:ac:86:98:2c:84:7c:6f:b0:ef:a2:e8:67:d4:ac:14:ab:
         91:73:03:6f:a4:b1:5f:e1:9d:0a:51:3e:15:ba:02:9a:f7:8f:
         b9:27:eb:d5:9f:4e:ae:9c:13:a9:b3:d0:b5:8a:af:ad:ef:bf:
         5a:56:70:b6:27:c4:3c:5f:ff:c6:fa:9b:11:9f:a3:d8:4b:43:
         3a:3d:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:29 2026 by rpki-client