Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
File:                     QyiNyelBKGI4XB6D3TeGNYMyDRg.mft (raw, json)
Hash identifier:          uN0MFLEKxYfVoXo5dLtw+EgKoXXg5X5FiRwR0H5QU9U=
Subject key identifier:   4C:00:96:57:4A:FD:93:C2:99:2D:16:C1:23:21:E0:6E:7D:90:97:50
Authority key identifier: 43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18
Certificate issuer:       /CN=A91D8A55/serialNumber=43288DC9E9412862385C1E83DD37863583320D18
Certificate serial:       0213
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
Manifest number:          020C
Signing time:             Wed 25 Mar 2026 02:22:57 +0000
Manifest this update:     Wed 25 Mar 2026 02:22:57 +0000
Manifest next update:     Wed 01 Apr 2026 02:22:57 +0000
Files and hashes:         1: QyiNyelBKGI4XB6D3TeGNYMyDRg.crl (hash: a6F3+8NH79OXdlBhZ6zq7UKunTgYNUIR5I3XlXoHaAA=)
                          2: D1596F0E0BCF11EE8FB8EE16C4F9AE02.roa (hash: Ig1Z+CeptiyE3XhLnjUeeZBH7sjFodnB6lczhxW6Yfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8A55, serialNumber=43288DC9E9412862385C1E83DD37863583320D18
        Validity
            Not Before: Mar 25 02:22:57 2026 GMT
            Not After : Apr  1 02:22:57 2026 GMT
        Subject: CN=69c34701-ea2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:1e:6f:c9:4b:8e:a8:66:bc:21:60:76:09:
                    d6:8e:c6:15:db:70:8a:96:13:00:8b:86:57:32:9a:
                    48:f5:c8:e7:54:2c:43:a2:3a:f4:97:a5:3b:f6:67:
                    30:1e:95:85:4a:be:f5:a3:4a:e8:06:69:a7:42:9c:
                    95:20:4d:5a:b1:48:98:af:f1:ae:e1:40:68:dd:ac:
                    14:97:89:7a:da:b8:d4:e0:d0:90:a2:da:91:63:47:
                    1c:fd:22:6e:9b:a2:2e:2e:d0:f5:d0:85:9e:85:25:
                    e5:94:1f:4f:81:46:3f:aa:f7:aa:6c:b3:af:5d:d2:
                    6c:71:79:cc:22:1d:df:d9:46:d3:4a:75:cb:e8:d6:
                    91:a3:11:cd:c0:2a:bb:89:2e:d6:fa:ab:a8:50:d3:
                    a0:36:a6:de:65:79:9d:8e:0b:d3:28:eb:b0:46:1d:
                    91:32:19:d2:7e:01:29:63:54:7d:2e:24:9c:f4:58:
                    df:bc:84:2f:c8:d1:f6:ef:f3:3d:b6:75:de:36:65:
                    1a:26:fa:cb:43:46:e9:49:3a:66:ae:60:31:31:b3:
                    e4:c6:00:17:81:02:d8:28:04:99:41:55:e3:2c:24:
                    98:81:85:b3:ae:ab:27:77:43:56:4e:f0:be:9a:13:
                    67:3c:4f:92:a5:00:07:83:db:f5:8f:79:16:f4:12:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:00:96:57:4A:FD:93:C2:99:2D:16:C1:23:21:E0:6E:7D:90:97:50
            X509v3 Authority Key Identifier:
                keyid:43:28:8D:C9:E9:41:28:62:38:5C:1E:83:DD:37:86:35:83:32:0D:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QyiNyelBKGI4XB6D3TeGNYMyDRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A55/5FC658260BC911EE9C6F185EC4F9AE02/QyiNyelBKGI4XB6D3TeGNYMyDRg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:64:6e:01:da:dd:c1:44:39:6c:6c:26:b8:94:5f:2c:cc:
         57:54:8a:17:e0:27:d5:88:ba:52:8b:50:5a:e0:ec:28:33:4e:
         2d:dc:a4:d9:d7:c5:4a:76:b9:cb:80:76:6b:8c:cc:15:b8:b3:
         f2:bb:41:48:60:3e:20:3a:d3:af:33:5a:92:e4:31:d0:c0:7e:
         18:f0:0c:0f:42:66:db:12:fa:69:21:59:96:66:3e:ad:74:3f:
         cf:c4:3e:ff:c7:85:f5:3b:04:2a:f3:7d:b5:ea:dd:cc:0b:22:
         5b:8c:ea:f6:79:15:50:78:3e:67:74:2e:b0:1a:c2:d8:d1:78:
         2d:e3:01:5b:ee:1d:ca:3f:17:bb:e5:74:91:2b:ba:fe:f4:63:
         bd:6e:87:9c:06:c6:89:80:22:12:f8:d6:76:45:e6:11:7d:01:
         4a:a7:1f:5c:f3:22:60:21:d7:25:4d:1a:62:48:3d:2f:33:7a:
         20:cc:23:7c:19:46:b8:54:84:de:4f:6f:38:e9:f4:3a:5d:db:
         b4:82:c0:5e:05:1c:16:09:34:11:98:2d:66:a7:c7:4b:a6:ef:
         7c:74:ad:81:ed:e2:ff:a9:c3:c4:02:d3:12:89:23:d9:c1:8a:
         ff:76:89:99:7f:0f:9b:c9:1b:e8:50:0a:9d:2e:44:88:0f:3c:
         fc:21:a6:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhBNTUxMTAvBgNVBAUTKDQzMjg4REM5RTk0MTI4NjIzODVDMUU4M0REMzc4NjM1
ODMzMjBEMTgwHhcNMjYwMzI1MDIyMjU3WhcNMjYwNDAxMDIyMjU3WjAYMRYwFAYD
VQQDEw02OWMzNDcwMS1lYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjoseb8lLjqhmvCFgdgnWjsYV23CKlhMAi4ZXMppI9cjnVCxDojr0l6U79mcw
HpWFSr71o0roBmmnQpyVIE1asUiYr/Gu4UBo3awUl4l62rjU4NCQotqRY0cc/SJu
m6IuLtD10IWehSXllB9PgUY/qveqbLOvXdJscXnMIh3f2UbTSnXL6NaRoxHNwCq7
iS7W+quoUNOgNqbeZXmdjgvTKOuwRh2RMhnSfgEpY1R9LiSc9FjfvIQvyNH27/M9
tnXeNmUaJvrLQ0bpSTpmrmAxMbPkxgAXgQLYKASZQVXjLCSYgYWzrqsnd0NWTvC+
mhNnPE+SpQAHg9v1j3kW9BKK2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEwAlldK
/ZPCmS0WwSMh4G59kJdQMB8GA1UdIwQYMBaAFEMojcnpQShiOFweg903hjWDMg0Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE1NS81RkM2NTgyNjBC
QzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktHSTRYQjZEM1RlR05ZTXlE
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F5aU55ZWxCS0dJNFhCNkQzVGVHTllNeURSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEE1NS81RkM2NTgyNjBCQzkxMUVFOUM2RjE4NUVDNEY5QUUwMi9ReWlOeWVsQktH
STRYQjZEM1RlR05ZTXlEUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqTtkbgHa3cFEOWxsJriUXyzMV1SKF+An1Yi6UotQWuDsKDNOLdyk2dfFSna5
y4B2a4zMFbiz8rtBSGA+IDrTrzNakuQx0MB+GPAMD0Jm2xL6aSFZlmY+rXQ/z8Q+
/8eF9TsEKvN9terdzAsiW4zq9nkVUHg+Z3QusBrC2NF4LeMBW+4dyj8Xu+V0kSu6
/vRjvW6HnAbGiYAiEvjWdkXmEX0BSqcfXPMiYCHXJU0aYkg9LzN6IMwjfBlGuFSE
3k9vOOn0Ol3btILAXgUcFgk0EZgtZqfHS6bvfHStge3i/6nDxALTEokj2cGK/3aJ
mX8Pm8kb6FAKnS5EiA88/CGmXw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:51 2026 by rpki-client