Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
File:                     QSplEc_tz-y1WQyWyMNh4v7USFc.mft (raw, json)
Hash identifier:          fiEx+aTUYhgMkl95Ahw5F4apwZlgqtvAyLccJBwNxjc=
Subject key identifier:   73:6F:64:AF:0C:3B:73:A7:C9:14:62:36:DC:AB:9B:54:93:FE:B1:35
Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57
Certificate issuer:       /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
Certificate serial:       6162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
Manifest number:          3599
Signing time:             Tue 24 Mar 2026 19:37:46 +0000
Manifest this update:     Tue 24 Mar 2026 19:37:45 +0000
Manifest next update:     Tue 31 Mar 2026 19:37:45 +0000
Files and hashes:         1: QSplEc_tz-y1WQyWyMNh4v7USFc.crl (hash: 88DBY/vTzvc0yzteWXQizyOMFVZuP7PVAG+ZCeK0Wg0=)
                          2: A4857438FC7C11EF9988DB39C4F9AE02.roa (hash: EK90wZgG6Wn7qBnC1Nm9OXhPfhSulwKRfsFnJn65QA8=)
                          3: A365FCD0FC7C11EF9988DB39C4F9AE02.roa (hash: r/tWm3svqSizLi93KrtuPnN7f5s/hbXKYISlAxjtEkk=)
                          4: 8A189A50115511F18399E378263D8C67.roa (hash: MbpCoxiWQhc/jhIYPfVczrQsLCaBpcKv/2DoYV9PUks=)
                          5: A7432F4E221011F09599EB53C4F9AE02.roa (hash: ioCIgk7+hXg1WdKX2zwZu6CuycCk0ahlbCER1zsK8Vk=)
                          6: 95B2E0261E7711F1B0920567023D8C67.roa (hash: gOdrBYASSLoLXotVo5C8NVlWUd9bV6I0Tz704E93O9Y=)
                          7: B991BA26335E11F082E02017C4F9AE02.roa (hash: x4zmGUIYHG6wUpYHg2WCYB2OsF/0rbt4d9EMNlPzVFU=)
                          8: A6C119B4221011F09599EB53C4F9AE02.roa (hash: DinmKr3OHy4BjIQxnkoiyB2Oz+zgiFQWsNdkv28QHoU=)
                          9: FA554EAC2A4811F0ABF04B60C4F9AE02.roa (hash: QMIDA3h2J2eRBwi4xgXJbJqb9U1f974ZROO/WRpjtAM=)
                          10: DDBC2904F43811EB996EF71CC4F9AE02.roa (hash: efWLmAjCGT+rH7EUQj+k0eGhbyU6lxgg8mvw1IUQ7lc=)
                          11: E27754123C6111F08D014F0AC4F9AE02.roa (hash: nTcQw9tW9VgDB8BtDeVRc3uzCocS+xlG/GUFD0BD7s8=)
                          12: B9F56378335E11F082E02017C4F9AE02.roa (hash: tAjjMBG33qgOgPDDngcaEQItqcmc5q+uF9P6zEx/mcE=)
                          13: CADB5E342D2211EE87D1FB10C4F9AE02.roa (hash: mD7eW0eMERPONF4wlJDU7cVF7ryXxBYaeVyy219s/n8=)
                          14: B2CE886C07B811F0992B401EC4F9AE02.roa (hash: PwDTDxHvqEbGUM+7/VWMB7V8nvsWJKnGzuqpWyR+ZKE=)
                          15: 8FFA8D36FF0C11EA854DE24CC4F9AE02.roa (hash: mYIBQRF3hI40eKX3tGkCtcYc8DmTtM88bTd9cHNVL/c=)
                          16: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (hash: qjLg+hKaCW+xuhGBi5lblITRW04TYZ+2VG9H1ZCe3no=)
                          17: 01A59B2EB72111EC9885AF51C4F9AE02.roa (hash: 6W5RZ8iNRVSsSS/c55qq1CjJR8MOUGy0O9ZIoemI6yA=)
                          18: AC32D0A0AD8311F0AE971C51C4F9AE02.roa (hash: iTay77sT0HsUaA9+vJ8V6EkP9qWXeG1pu9pjwt+MeZA=)
                          19: 3741E882335B11F09856AA2CC4F9AE02.roa (hash: 7h4RargpDGRKXAdpOJvGbjenAH0DHbOFZMHXQm21dcY=)
                          20: EF536DB8F29811F08FD07DA76E6F56BC.roa (hash: gh5NDMFItruLQMVLqU8Ao5yuLPHXhly+AThb9ED3ptI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl
                          rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24930 (0x6162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857
        Validity
            Not Before: Mar 24 19:37:45 2026 GMT
            Not After : Mar 31 19:37:45 2026 GMT
        Subject: CN=69c2e80a-508b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:85:f0:de:44:dd:34:fc:da:e6:fc:fe:5a:
                    10:45:c1:06:0e:27:4e:82:c7:20:b8:90:83:b8:db:
                    aa:db:fd:8e:ae:78:c3:4c:71:66:d6:a3:92:56:98:
                    b3:ca:f7:72:14:53:24:c0:81:0d:b9:3a:bc:0a:2e:
                    ec:d9:44:72:16:3b:2a:a3:ed:64:be:6e:83:ce:53:
                    6e:ab:b6:4b:15:6e:e2:6b:db:e2:54:18:3e:82:35:
                    22:f3:1b:a2:5e:cb:8d:ec:fd:5c:40:2b:e7:4b:d4:
                    2f:48:8c:29:de:90:eb:96:c6:0d:99:b3:ce:2d:ad:
                    93:79:43:f2:1c:4c:5a:01:f8:12:2f:a6:fb:b3:98:
                    f4:e4:75:6f:0b:9d:09:2f:02:26:2b:81:5a:5d:29:
                    df:96:d0:24:3e:23:01:d9:3f:e9:45:8f:0f:1a:53:
                    2c:7d:6d:3b:0a:93:d2:82:dc:0d:bc:d2:c3:bc:72:
                    5d:39:7e:78:e1:6d:4a:d9:bc:4c:e1:45:a4:20:88:
                    6f:47:38:d3:7b:ce:2a:34:29:8b:a8:dc:a7:e5:c6:
                    87:81:e8:1e:ce:52:6b:2c:42:38:ee:f0:30:81:42:
                    5e:da:41:71:8a:54:ca:03:d9:b8:62:80:d2:11:10:
                    ef:bd:ae:be:d4:34:e2:7b:2d:f7:c8:60:67:c2:51:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6F:64:AF:0C:3B:73:A7:C9:14:62:36:DC:AB:9B:54:93:FE:B1:35
            X509v3 Authority Key Identifier:
                keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:22:46:d1:20:80:7f:c1:81:08:37:c4:a7:dc:d1:6d:ee:b1:
         84:4a:cb:05:87:4a:c6:9d:72:fe:12:3e:9b:70:da:8c:d9:52:
         15:bd:58:be:f7:ea:66:cf:56:ae:ec:8a:cf:0b:e3:70:b8:5f:
         b8:dc:e2:ee:92:28:39:95:e0:32:74:24:d9:eb:95:dc:5c:5e:
         57:ac:4d:4a:24:3e:87:70:8c:a2:53:60:bb:7a:fe:2b:22:e4:
         19:d0:1a:61:37:58:c5:8d:66:72:c4:58:9d:9b:df:39:c9:96:
         8d:28:d0:09:08:09:3c:0f:4c:13:54:3a:dd:79:e8:11:32:64:
         e7:d3:7f:7c:60:2d:59:0a:d7:79:fe:ce:2f:02:bb:c7:af:15:
         79:99:c8:cb:fc:99:56:78:5f:27:1d:84:da:70:00:92:7e:c5:
         36:f2:0d:c9:f0:a9:54:35:e4:4f:dd:5a:ff:3b:34:bc:cb:d0:
         8a:73:24:80:cc:7f:30:42:a1:fa:46:14:ec:6a:bc:36:3b:b5:
         47:f6:ae:b0:25:b0:47:8c:64:06:a6:4d:1a:2c:63:87:d7:73:
         e2:5f:06:06:92:54:62:93:49:83:d8:7e:df:cc:9f:d8:6e:2f:
         d9:40:42:49:69:4b:99:4a:04:90:7d:b2:6f:41:07:91:1d:5c:
         28:a2:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:45 2026 by rpki-client