Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File:                     q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier:          mACTRd9xQ4Z6o2LI3d+CVxQ6YTR7ZJ3eTPyNrPg/PC0=
Subject key identifier:   16:19:4C:C9:43:31:AF:03:EB:66:7A:1E:94:B1:EB:29:C0:2E:44:AE
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer:       /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial:       021B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number:          0217
Signing time:             Fri 27 Mar 2026 02:22:08 +0000
Manifest this update:     Fri 27 Mar 2026 02:22:08 +0000
Manifest next update:     Fri 03 Apr 2026 02:22:08 +0000
Files and hashes:         1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: JdObcOi9b1/+LeQLIM3A85/wAL+AIw6KP8nKEwoAJqk=)
                          2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: Z6+FwOSORTO5IhxDQLbyy7addHO+Ye/7DWvOrUrjW0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
                          rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
        Validity
            Not Before: Mar 27 02:22:08 2026 GMT
            Not After : Apr  3 02:22:08 2026 GMT
        Subject: CN=69c5e9d0-2e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:34:68:b2:45:c2:bf:03:b9:44:24:b7:c2:
                    9b:f0:5d:a2:c6:4b:b4:a3:8a:75:72:e2:34:c4:74:
                    70:b1:cf:05:52:6d:12:2d:f5:a1:76:1c:f8:4f:18:
                    71:8f:f8:ee:c1:a1:67:81:13:bd:40:cf:62:9f:e2:
                    0c:d5:5c:90:2b:9d:d7:2f:59:eb:93:94:19:92:c8:
                    29:1e:5c:cb:bb:c0:e6:99:2c:1f:72:33:d6:2a:4a:
                    07:51:47:fc:a4:91:8b:d3:81:54:c0:36:b6:c1:15:
                    43:ec:62:5e:72:f6:ab:d0:f6:82:5b:54:ea:60:06:
                    f0:f8:61:a8:a5:4e:08:e6:c9:53:0d:9f:70:7f:51:
                    e1:f3:2c:9b:d0:20:5a:d4:be:09:b9:9c:53:13:ad:
                    7e:33:48:13:06:9a:5b:b3:b7:91:1b:61:58:7c:56:
                    b1:d9:9e:7f:2e:a7:12:dc:d8:9d:92:ea:c1:82:54:
                    26:12:bb:18:93:63:e3:0a:63:bc:8e:77:62:32:09:
                    7f:b2:41:a4:35:5c:a5:2a:08:32:c4:af:f8:35:e0:
                    45:96:c3:f3:88:66:f0:7c:34:bd:4f:2d:e1:6d:d0:
                    6b:58:ed:46:d4:91:3c:6b:35:b3:b4:2e:2d:37:02:
                    3d:d3:73:1a:ff:03:42:9b:05:f8:13:6c:4b:a6:2f:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:4C:C9:43:31:AF:03:EB:66:7A:1E:94:B1:EB:29:C0:2E:44:AE
            X509v3 Authority Key Identifier:
                keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:eb:f6:43:44:4d:b6:c8:48:20:46:3d:e0:20:45:44:07:
         c0:de:d2:eb:06:77:7d:b2:90:5c:84:be:05:69:8d:7f:8e:93:
         12:1c:a4:4e:ab:ab:96:f7:63:dc:58:8c:1e:b3:2d:b3:a9:b1:
         05:e4:b2:85:ab:f0:47:ac:48:56:50:c6:37:a4:90:8d:43:c1:
         6d:e9:39:9c:79:90:a3:10:77:0b:9f:21:89:4d:06:31:0f:c1:
         bb:98:b7:9c:71:e2:f8:22:b7:a3:40:3c:13:84:06:69:45:a7:
         28:85:22:00:2d:b5:26:06:e6:1b:75:45:ce:04:8d:ea:aa:d5:
         95:60:b6:30:25:2c:b2:09:ed:d9:55:58:b5:8e:15:4d:41:3e:
         7b:e7:f1:01:c9:ce:3d:29:eb:f1:af:94:0f:ec:f6:6d:81:db:
         e5:fc:07:c4:5a:b4:2a:1f:f2:62:13:4a:3c:74:2e:0b:d2:32:
         59:f0:79:6a:ac:65:0d:06:51:df:76:87:8e:a9:f3:53:ad:b4:
         fc:bb:13:c5:9d:18:f7:e4:ab:0d:62:6f:08:5f:d0:85:e5:6f:
         c5:21:4c:91:97:86:e5:8e:d9:9d:22:25:b3:2f:c2:19:61:4f:
         fe:16:b1:b2:9d:60:14:66:e9:d8:af:2f:d4:41:d6:01:ba:24:
         31:8c:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:39 2026 by rpki-client