Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
File:                     CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft (raw, json)
Hash identifier:          CtocLusEgFnXgSId28DYgavjWOKyaZbPaeMOLn249Zo=
Subject key identifier:   6F:14:F3:C6:3C:DB:4E:06:D8:B2:50:F1:29:95:B2:8F:6D:C2:C6:BD
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Certificate issuer:       /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial:       D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
Manifest number:          D5
Signing time:             Wed 25 Mar 2026 05:54:46 +0000
Manifest this update:     Wed 25 Mar 2026 05:54:45 +0000
Manifest next update:     Wed 01 Apr 2026 05:54:45 +0000
Files and hashes:         1: CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl (hash: sLdFa+jPnN/qQ5LgyyuEfS7OHAB5KNsj8xHqHMlqVnk=)
                          2: 31471C24E77311EFA0F80E53C4F9AE02.roa (hash: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
                          rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
        Validity
            Not Before: Mar 25 05:54:45 2026 GMT
            Not After : Apr  1 05:54:45 2026 GMT
        Subject: CN=69c378a5-1340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:b3:36:a2:62:29:31:91:2f:2f:60:a3:70:
                    93:43:9e:97:da:18:4a:20:1c:d8:ba:94:f5:1b:8d:
                    e5:69:e2:b4:a9:73:f7:d0:af:a0:1f:c5:e2:66:c2:
                    66:9f:4d:fe:c9:d1:0d:22:72:f1:da:28:a3:fe:89:
                    17:9b:30:95:0b:f9:79:95:c0:dd:12:f6:a4:e4:de:
                    d1:ad:40:48:ac:d7:ab:c2:cb:8f:97:a4:8e:80:7b:
                    01:da:e4:fb:61:d2:59:aa:02:bc:02:71:bb:be:a1:
                    ec:13:7b:11:9f:26:be:5f:b9:1a:d5:eb:12:b5:07:
                    99:ff:f6:65:a8:9f:3d:d4:22:75:35:ac:1f:48:1a:
                    5f:fb:ca:2d:b5:b2:3e:53:a3:0c:df:a1:b6:52:f9:
                    9f:ce:10:8d:d6:4e:b4:27:ca:64:e0:79:7b:e5:3a:
                    4d:c7:87:de:10:2b:26:0d:c2:3a:b4:25:8b:65:49:
                    2e:cb:3b:d5:6a:ee:1e:11:b9:78:c9:a3:91:9b:45:
                    57:19:f4:b1:ac:e5:68:ad:a6:d6:27:7d:86:2d:49:
                    dd:0d:9f:6e:dc:10:55:c3:42:30:f8:84:ae:bf:b0:
                    a8:89:ed:42:d2:28:9d:1d:ce:43:86:8d:f4:42:e9:
                    b1:99:19:ea:28:01:d0:3f:32:cb:f5:36:12:2e:d0:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:F3:C6:3C:DB:4E:06:D8:B2:50:F1:29:95:B2:8F:6D:C2:C6:BD
            X509v3 Authority Key Identifier:
                keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9f:c7:ee:c6:a3:64:37:81:74:a3:88:32:b1:97:19:4e:5e:
         e3:76:16:d8:c9:a1:ef:5e:f7:55:08:4b:94:52:55:8f:71:7d:
         5c:06:28:81:dc:73:0d:68:f0:49:5f:3a:eb:1a:35:df:d0:93:
         12:44:17:4e:df:50:b2:c4:ee:15:d5:04:d9:93:64:07:35:65:
         1c:56:2c:09:a1:e5:52:24:57:0c:9f:d4:8c:71:30:46:f6:82:
         7b:06:45:da:0e:81:00:3b:50:ef:78:c6:eb:de:6e:c0:0f:29:
         b7:e7:74:08:30:7d:7b:bd:29:eb:4d:35:35:1e:7d:db:5c:2b:
         74:34:79:f3:2a:37:24:ef:91:a0:e1:b5:da:ed:51:a9:a1:fd:
         53:52:93:51:a6:9e:08:a8:94:a1:d5:18:0f:13:d5:a5:a2:8a:
         ba:e5:cb:81:ee:9d:f8:65:2b:2a:ce:a9:6d:2b:0a:ec:e0:80:
         e5:95:70:ef:36:2c:9b:6d:52:04:af:22:7c:d0:7b:c8:b6:47:
         6b:5f:ef:50:88:2c:c5:18:f6:0b:6c:23:a1:9e:ea:62:92:b7:
         9e:65:5e:1b:06:5f:81:4b:55:a5:f0:8d:ab:a9:19:7f:4f:fe:
         9b:73:67:64:58:5e:48:94:15:68:bd:43:66:21:73:b1:44:4b:
         47:9d:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:18:37 2026 by rpki-client