Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
File:                     QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json)
Hash identifier:          RF++XKuPw8k2aOFi+/50Sr+r6gsonU+klkjp9Rqo13k=
Subject key identifier:   F7:8D:35:43:B2:2E:94:7E:C1:A3:76:33:82:6C:C8:03:D4:74:A0:EB
Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F
Certificate issuer:       /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
Manifest number:          020B
Signing time:             Fri 27 Mar 2026 02:28:40 +0000
Manifest this update:     Fri 27 Mar 2026 02:28:39 +0000
Manifest next update:     Fri 03 Apr 2026 02:28:39 +0000
Files and hashes:         1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: EoWaDQjbBYz4jgnNQq8FAhnNVGOri1nyyYnyf+7hfWA=)
                          2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: b4sgJcDJhftGhDWysYunsu/KDke3XRuXY3MfBbMHDRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl
                          rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F
        Validity
            Not Before: Mar 27 02:28:39 2026 GMT
            Not After : Apr  3 02:28:39 2026 GMT
        Subject: CN=69c5eb58-8404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:97:e8:54:29:ea:53:f8:0f:c8:42:19:cf:
                    0b:e2:fc:07:b3:e5:9a:1b:9f:13:c8:81:e1:22:cc:
                    81:99:35:60:69:05:b0:23:2b:1f:62:d8:72:0a:a6:
                    b2:b9:cb:4e:ff:08:44:51:3f:6a:48:26:26:47:ec:
                    03:12:be:d3:fd:c6:72:52:81:ef:cb:16:69:ab:df:
                    48:bd:9d:01:06:99:dc:3e:18:68:6e:fb:bb:19:cf:
                    73:71:a6:e0:89:47:a5:f3:7f:2a:ad:1b:b9:f7:e9:
                    bd:02:cf:1c:1d:df:fb:fb:37:bd:b4:2c:f5:2a:94:
                    bc:38:36:a3:1e:39:31:58:45:aa:a2:e5:7f:46:fc:
                    34:f0:7d:f8:d4:89:ac:be:5d:18:be:95:bb:01:88:
                    48:79:94:d8:12:c2:cb:2b:cd:f3:ac:bc:a4:a6:32:
                    f7:8d:a5:13:3b:7b:7b:f8:80:dc:9f:aa:b0:28:49:
                    d7:6b:fe:c4:0a:83:3c:da:e2:5b:b4:dc:d4:2b:16:
                    57:79:19:cf:b0:dd:0f:3f:6b:be:9a:4d:0f:26:b9:
                    34:83:73:23:11:2d:b5:dd:ec:99:1e:bf:f1:70:40:
                    86:83:5a:27:6b:73:61:5e:87:7f:09:a6:35:8f:7a:
                    df:c4:9f:59:8e:16:6e:a8:b4:45:75:ac:f9:b6:12:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:35:43:B2:2E:94:7E:C1:A3:76:33:82:6C:C8:03:D4:74:A0:EB
            X509v3 Authority Key Identifier:
                keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:71:ec:d3:d2:f8:7b:8d:a9:18:34:8a:9b:4b:94:19:88:ab:
         4d:81:c3:e5:03:bb:93:e2:dd:8f:59:13:54:f8:00:4a:6f:4e:
         1e:eb:7a:99:95:b1:a7:d1:0d:71:ea:ea:9b:87:88:2e:b0:e2:
         25:99:31:b2:85:f4:4e:1c:e5:a6:48:7d:2c:6c:78:a5:86:cf:
         8b:31:ba:df:d7:72:63:ae:78:ae:1f:ee:97:3e:22:0f:ed:61:
         da:b4:3b:66:d3:e0:d3:64:bb:21:d5:da:cf:b3:b4:e0:f3:92:
         38:d5:2d:9d:18:1e:31:79:f8:a0:b1:be:0c:cd:e7:e5:95:be:
         11:7a:6d:75:6b:9f:6d:56:f7:f5:39:c9:2b:c8:4e:b4:5c:af:
         ce:7f:2e:17:5f:3e:09:5d:e2:03:2c:67:09:95:36:28:d2:05:
         c8:5e:bd:a9:01:19:14:11:50:0b:c9:23:93:76:e6:d0:2a:b5:
         e3:c2:ee:0c:46:d4:64:10:b5:5d:38:25:17:1b:0f:92:44:a6:
         3c:6f:1f:6a:71:74:8a:3b:40:68:a0:7b:bc:77:7d:c2:c5:59:
         63:06:50:4b:66:39:6f:65:17:40:57:0a:ff:69:23:d1:b8:d5:
         70:7e:ad:84:5f:44:eb:33:2c:b0:4b:7b:98:c6:41:80:3d:58:
         b6:9b:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:44 2026 by rpki-client