Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
File:                     qvGUMwcPxnb61hIGsnGaCFqzi-U.mft (raw, json)
Hash identifier:          dt5RGRx32vtSS8ddZSMVpZX/vvgekrnWvPaSP8fvWS8=
Subject key identifier:   A2:69:A8:5B:FD:CF:96:40:1B:20:E5:83:97:81:BA:EA:DB:EC:6F:7B
Authority key identifier: AA:F1:94:33:07:0F:C6:76:FA:D6:12:06:B2:71:9A:08:5A:B3:8B:E5
Certificate issuer:       /CN=A91C3B4D/serialNumber=AAF19433070FC676FAD61206B2719A085AB38BE5
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
Manifest number:          3F
Signing time:             Wed 25 Mar 2026 07:39:53 +0000
Manifest this update:     Wed 25 Mar 2026 07:39:53 +0000
Manifest next update:     Wed 01 Apr 2026 07:39:53 +0000
Files and hashes:         1: qvGUMwcPxnb61hIGsnGaCFqzi-U.crl (hash: IvPYuI1GS4kjt0UOjv+weAbq3o+eckxMM3WH8ZIP8Io=)
                          2: 420E09ACCC1D11F08826FE2FC4F9AE02.roa (hash: 2P+rU4rRcFMrmIevktl5y2eI79U0fIUs0/O420QWuwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B4D, serialNumber=AAF19433070FC676FAD61206B2719A085AB38BE5
        Validity
            Not Before: Mar 25 07:39:53 2026 GMT
            Not After : Apr  1 07:39:53 2026 GMT
        Subject: CN=69c39149-a76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:ad:f2:a7:c6:f1:b4:07:47:9b:ec:61:11:
                    f1:20:3e:23:e7:99:e1:af:61:98:1f:c4:66:a9:8f:
                    b2:81:22:f6:09:3a:03:7d:91:85:19:fb:d1:35:72:
                    ba:04:22:cb:9b:e8:32:21:d0:34:f4:80:a6:27:29:
                    a8:1b:97:f5:79:03:eb:ab:4d:42:a2:47:f4:5f:5a:
                    dd:89:95:c0:03:fc:c5:2a:db:d4:c6:6c:36:b7:ab:
                    da:ed:4a:1f:1e:fc:ff:e0:35:37:58:4b:8e:1b:29:
                    8c:0a:b8:09:fd:08:a8:2e:3a:0c:b6:d0:d9:42:7d:
                    40:ff:3a:b7:31:68:65:be:9d:34:82:49:12:98:80:
                    a3:a5:69:b2:e9:6a:c6:0a:a5:39:65:23:c5:dd:3e:
                    6f:89:1e:31:91:cd:53:fa:eb:b3:8d:bd:d5:eb:f8:
                    9a:81:c9:ea:36:21:9e:38:e9:c8:d6:67:85:a8:25:
                    f6:eb:98:80:8d:3c:66:f4:20:d6:0c:d5:04:79:14:
                    70:ec:7a:99:02:80:12:30:fd:02:2a:78:b2:3f:65:
                    7a:5d:fa:16:92:77:fd:1c:bc:c9:d4:00:5c:a9:34:
                    b4:35:d4:db:ef:bb:01:0d:c8:ee:14:cc:8b:71:15:
                    67:b0:88:91:57:4b:f0:f0:08:ab:1b:f5:cb:94:81:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:A8:5B:FD:CF:96:40:1B:20:E5:83:97:81:BA:EA:DB:EC:6F:7B
            X509v3 Authority Key Identifier:
                keyid:AA:F1:94:33:07:0F:C6:76:FA:D6:12:06:B2:71:9A:08:5A:B3:8B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvGUMwcPxnb61hIGsnGaCFqzi-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B4D/D2D82BFECC1B11F095224A2CC4F9AE02/qvGUMwcPxnb61hIGsnGaCFqzi-U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:e2:7b:d0:b5:9e:a7:72:9f:c6:8c:02:54:7d:09:75:f0:
         5d:46:04:6b:f9:4b:7b:04:9b:d7:63:12:3c:37:2f:d8:00:e7:
         2f:3c:20:f9:bd:f0:fa:f0:8a:7e:da:fd:8d:b8:be:78:79:9f:
         fd:96:98:4a:86:1f:1b:f2:b9:6c:73:c5:ab:f0:91:3c:ad:f1:
         44:33:2c:7f:25:20:bd:1a:3f:d9:82:63:f2:e4:91:50:57:40:
         da:c3:b6:46:87:6f:06:71:18:59:6c:13:4d:82:26:75:88:1e:
         89:93:24:f2:b5:fb:dd:14:dd:72:f3:c4:72:b8:48:0a:b2:b6:
         54:43:1c:81:9d:ad:80:fb:fa:b0:cd:dd:55:e7:df:e0:4d:39:
         a5:35:b5:3f:5b:25:e9:e0:a1:a2:81:e3:99:59:b6:58:53:12:
         48:82:6f:8c:72:dc:ce:d7:ee:4c:76:4f:86:8c:ba:14:b0:9d:
         26:e7:5e:6b:28:bf:ad:b0:52:9d:65:91:49:18:37:9b:d3:d2:
         be:43:6e:c6:e0:84:56:6f:f7:19:5d:4f:4b:b6:b8:c8:eb:13:
         86:a3:33:51:3e:5b:95:13:2e:5e:b0:81:4f:8e:fe:b0:1c:c2:
         53:38:d8:8d:23:e1:72:53:98:97:c1:7f:61:7c:fd:17:2a:77:
         09:3e:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:03 2026 by rpki-client