Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          f97B4/C8BdVoXZl6cOvwKFPk0dKLvz/Rz/4u5eAoWUU=
Subject key identifier:   09:C1:26:53:F5:EF:42:E7:E7:1A:58:85:EB:D2:DC:30:5C:AB:E9:C4
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          0116
Signing time:             Wed 25 Mar 2026 05:05:41 +0000
Manifest this update:     Wed 25 Mar 2026 05:05:41 +0000
Manifest next update:     Wed 01 Apr 2026 05:05:41 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: /kYYWPHFty15VFdG44g4q1jaLULkwCB2MKypeaIFDLc=)
                          2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
                          3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Mar 25 05:05:41 2026 GMT
            Not After : Apr  1 05:05:41 2026 GMT
        Subject: CN=69c36d25-6f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f7:00:60:6a:a5:70:ef:3b:fc:cd:44:cf:98:
                    16:42:89:9d:28:69:d5:90:92:77:ca:48:b4:07:e0:
                    cc:50:d0:2c:cb:83:20:61:a1:eb:6c:77:13:cb:6e:
                    3a:d7:64:25:87:2f:c6:1b:06:d8:68:32:9d:f0:b0:
                    fb:52:84:e7:aa:d9:1e:72:c0:db:fe:fa:f8:89:db:
                    c9:76:47:8b:70:23:01:4e:ef:f9:e5:3a:90:d9:35:
                    13:e8:d3:c9:40:b7:ff:ae:77:99:e2:63:fa:fc:23:
                    a2:47:06:83:da:c0:41:6b:da:6c:21:2b:cb:c2:84:
                    ea:41:9e:59:1d:5c:5e:c9:ce:7d:08:30:c7:62:d0:
                    71:90:65:c5:18:21:a9:0f:01:18:1d:a9:af:23:b8:
                    db:e7:ba:b5:13:0a:62:e4:eb:9c:f2:a2:4f:74:9a:
                    d4:90:bd:9a:8a:7c:fb:8e:ab:bb:c2:5d:8b:1c:a5:
                    82:c0:86:11:09:fe:99:80:33:07:db:d5:68:b6:f8:
                    f5:b0:3f:9e:96:6e:1f:e1:55:bb:59:7b:56:c4:6c:
                    81:ec:13:ce:4d:a6:a7:d0:51:87:08:7d:43:55:17:
                    5f:69:9f:27:2f:ae:ad:fd:91:26:a9:a4:3d:09:fa:
                    f4:08:cc:a7:dc:2b:28:90:f9:a0:ee:f3:70:36:41:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C1:26:53:F5:EF:42:E7:E7:1A:58:85:EB:D2:DC:30:5C:AB:E9:C4
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:b4:a4:3d:0c:31:59:70:e9:ac:83:29:f8:fc:4f:da:4c:
         6e:42:f4:44:a1:73:38:a1:95:08:fa:5e:ba:39:b1:8f:c4:0d:
         9c:e3:38:67:86:6e:e2:83:56:d9:c8:8b:ef:47:77:70:bb:29:
         39:17:f7:67:ab:5d:13:45:18:54:9a:ba:c3:63:96:5e:2a:68:
         b0:c1:88:c6:8b:a6:24:97:b5:92:69:90:d5:31:26:50:ae:fb:
         25:6d:2b:4d:97:da:9e:39:72:1d:a7:ac:bc:3f:8f:80:77:1f:
         7d:53:0b:b3:31:17:41:fe:15:19:7f:c6:af:20:26:bd:46:24:
         7f:98:82:6e:ee:63:e2:92:f1:70:35:21:e8:8e:77:2e:93:bc:
         fd:5a:8b:c5:3b:92:6b:87:31:07:51:d9:39:62:9f:de:2c:05:
         47:2b:c1:21:bc:72:ee:51:e3:b0:21:ff:30:0d:02:c9:ba:ee:
         5a:a3:17:ec:60:8d:0c:ce:ce:26:df:72:d2:c0:86:a0:e1:89:
         b7:3d:b5:c8:52:34:fd:1f:95:75:6a:00:19:81:d8:b8:bb:e0:
         17:14:d3:df:5e:3f:f3:3d:b9:82:b4:37:fa:45:6c:83:60:6e:
         29:b7:a3:72:b5:a0:1a:33:8e:8c:5d:a4:77:50:8f:1e:3e:fa:
         fd:4e:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:04:05 2026 by rpki-client