Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
File:                     qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json)
Hash identifier:          FIxgbX6pgKvlz3D5Hgkoz7q87jO5GlWjhy0XnjLVDYE=
Subject key identifier:   A8:48:60:0A:17:8E:5B:19:33:87:49:63:19:2E:E3:20:87:2F:81:52
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Certificate issuer:       /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial:       0C15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
Manifest number:          0BF5
Signing time:             Tue 24 Mar 2026 18:43:21 +0000
Manifest this update:     Tue 24 Mar 2026 18:43:21 +0000
Manifest next update:     Tue 31 Mar 2026 18:43:21 +0000
Files and hashes:         1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: uNJmJTWPyOmSMLXZa2T5U+JY7btCXG4EC/MU/aBt9F0=)
                          2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: FPfgp7Al/sAnJcpnbzxEl6750GjZ2NbI2QBuF/gjvuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3093 (0xc15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586
        Validity
            Not Before: Mar 24 18:43:21 2026 GMT
            Not After : Mar 31 18:43:21 2026 GMT
        Subject: CN=69c2db49-1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0e:83:6b:05:2c:35:03:a0:ca:75:0a:00:df:
                    a2:5b:95:d9:3a:0a:1e:a5:b4:ab:14:9b:ac:97:ad:
                    d2:2f:9c:7b:e1:d2:ba:b8:ff:d9:d5:26:79:2c:23:
                    75:01:74:06:d3:7c:e6:f2:1d:d3:fb:de:72:ba:d3:
                    fb:9b:08:b9:0e:dc:42:c0:9b:48:3e:f2:71:85:6a:
                    bd:20:0f:e6:f4:b5:c0:21:01:b2:af:b9:36:64:b9:
                    6a:ac:71:d1:57:49:62:3b:ce:98:90:5a:f6:26:a2:
                    e9:9f:78:e7:6a:33:87:c3:8b:ea:0c:ca:6c:55:46:
                    42:b8:a5:a8:2f:4a:91:ed:84:8b:f1:d0:2f:d3:ac:
                    33:92:10:87:98:d6:29:47:ce:4a:06:4f:8e:4e:8e:
                    c7:48:22:62:ac:9d:6f:46:47:24:17:ac:b9:a7:71:
                    29:08:51:48:9d:0e:5e:1e:70:2a:da:97:f7:f8:b8:
                    15:df:69:20:e1:c2:2d:39:9a:6a:42:8b:4a:80:c6:
                    92:a1:28:8e:a3:a4:ae:a4:fc:99:00:c6:0a:cb:a2:
                    f7:eb:7e:10:f0:f2:7f:dd:8f:51:56:1f:e3:da:07:
                    c7:99:16:0b:91:f9:db:ec:14:48:d8:71:a7:8e:6e:
                    43:c6:b0:2e:71:69:ff:a7:24:0e:d7:17:e8:d7:e2:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:48:60:0A:17:8E:5B:19:33:87:49:63:19:2E:E3:20:87:2F:81:52
            X509v3 Authority Key Identifier:
                keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:e7:54:46:35:f5:f9:91:d1:b5:c1:d8:4b:84:59:5f:65:
         4c:98:24:c3:1b:32:d7:c4:47:7d:03:04:11:1d:8e:b8:ae:5a:
         f9:a6:ce:94:c7:72:6e:95:3d:5c:3d:86:45:1f:4c:c1:41:b0:
         a4:a9:0f:2b:28:50:86:f5:17:a0:e8:d1:af:dc:be:29:85:9b:
         04:dc:b8:51:2d:16:63:28:f0:e9:06:dd:52:4f:12:13:16:14:
         76:d3:f6:d3:3e:f6:b8:9d:c9:95:aa:fd:c9:a3:b0:08:cb:f8:
         41:a2:47:95:27:16:91:92:31:21:02:b2:22:2c:af:ad:a6:a2:
         2b:36:ac:0a:42:0b:4b:ee:c6:ed:1d:8e:10:7d:0a:38:e7:4e:
         8d:6c:23:df:90:2e:e2:3d:b6:03:1e:8b:36:92:5e:1e:fd:ca:
         5d:9d:b7:35:db:22:14:d7:a4:f5:a2:b9:7b:cb:b3:70:f0:2e:
         26:be:4a:d8:b9:ff:b9:9b:37:89:94:78:08:82:45:8e:79:6c:
         56:63:c0:2b:8a:09:1f:f2:42:c4:f4:0b:10:4d:3e:fa:94:f9:
         91:b6:64:d2:01:89:71:b3:ac:6b:1b:6c:15:5a:d8:97:6e:64:
         cd:5c:84:ca:65:42:b0:73:92:5f:c1:37:94:dc:69:fa:2b:49:
         7c:98:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:51 2026 by rpki-client