Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
File:                     QidVkJNLMeOdgd28nAmFa39OWIQ.mft (raw, json)
Hash identifier:          RtqSr+2EtQxoeoMR7RsqvuDOeoKFHykTE0rz9ULP/EY=
Subject key identifier:   48:44:E8:F0:5A:95:0B:2F:BA:D4:45:C8:A6:2B:85:4B:60:70:AB:AF
Authority key identifier: 42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84
Certificate issuer:       /CN=A91DC009/serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
Certificate serial:       028D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
Manifest number:          0287
Signing time:             Wed 25 Mar 2026 01:11:47 +0000
Manifest this update:     Wed 25 Mar 2026 01:11:46 +0000
Manifest next update:     Wed 01 Apr 2026 01:11:46 +0000
Files and hashes:         1: QidVkJNLMeOdgd28nAmFa39OWIQ.crl (hash: dUrReDCpa1XK37i4EsUk1YarLZZ+gIhOOd3vzXAjpSU=)
                          2: 754A1888490D11ED95C7C86EC4F9AE02.roa (hash: Qahj6ijZlV0ENHSi7W3OwZGiJhU6W6dxMtqWIMdxIl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC009, serialNumber=42275590934B31E39D81DDBC9C09856B7F4E5884
        Validity
            Not Before: Mar 25 01:11:46 2026 GMT
            Not After : Apr  1 01:11:46 2026 GMT
        Subject: CN=69c33653-9a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:5d:8e:ee:36:6b:ae:c1:ae:5e:37:97:85:
                    e7:44:f0:f7:2b:7b:93:5b:98:90:6a:65:23:54:53:
                    66:b9:30:e3:22:34:a8:72:53:75:bc:49:25:89:b2:
                    bc:7e:4d:65:04:58:af:42:e2:48:da:6c:f3:24:ea:
                    35:c5:9f:14:57:bf:f9:70:63:55:b9:9c:20:7b:b0:
                    ea:f9:a0:ec:d4:80:63:7d:45:3b:d7:cb:62:84:73:
                    7c:d7:4e:97:0d:e8:a7:b2:cc:c2:a1:12:17:4d:1f:
                    21:31:17:f7:0b:d2:6e:ff:0e:5a:61:b9:17:30:43:
                    cc:51:8e:53:67:9f:15:6e:89:cf:1a:f4:77:e9:14:
                    5f:61:91:a0:f1:fd:a5:1c:6d:80:53:ee:7e:4b:69:
                    4f:10:33:10:45:6f:19:bd:da:fe:43:d4:79:16:bc:
                    39:a6:d8:00:af:5e:60:2b:42:c3:d6:05:f1:81:51:
                    01:13:fe:1d:7f:81:3c:7a:8c:19:31:cd:e2:27:8a:
                    b8:10:53:15:18:ce:5b:52:19:b8:b3:9c:3f:9c:1b:
                    7f:8f:3f:2a:4e:4c:40:5f:0b:90:53:73:0c:47:c2:
                    01:50:8d:0c:83:30:51:e0:8a:78:b1:b9:02:89:82:
                    99:45:e9:59:41:2d:1f:ef:a7:35:8a:ac:8f:09:4e:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:44:E8:F0:5A:95:0B:2F:BA:D4:45:C8:A6:2B:85:4B:60:70:AB:AF
            X509v3 Authority Key Identifier:
                keyid:42:27:55:90:93:4B:31:E3:9D:81:DD:BC:9C:09:85:6B:7F:4E:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QidVkJNLMeOdgd28nAmFa39OWIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC009/959DB85E490A11EDBB767848C4F9AE02/QidVkJNLMeOdgd28nAmFa39OWIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:78:8c:a2:a2:e1:4d:12:bb:99:d5:be:59:d0:1e:88:24:
         c5:af:06:d7:ae:1a:e9:ff:99:3e:cf:67:66:f1:4d:37:93:97:
         57:e4:a1:63:0b:7f:43:6d:a1:f7:37:ca:5f:2e:f6:f5:26:8f:
         c4:1d:64:d0:1f:1e:66:a1:c8:8f:00:d5:fc:d1:a5:07:bd:b1:
         4f:86:aa:a9:bf:60:bf:3c:55:76:1c:09:10:c6:42:e3:09:d6:
         1a:06:78:07:04:38:06:69:d3:1d:b5:73:8d:4f:01:2b:1c:5b:
         d0:44:69:69:c4:4a:86:49:a2:17:b3:77:66:0b:10:44:32:3e:
         11:70:d2:d5:24:5d:ad:c8:cb:72:8d:74:e3:f0:55:c5:f1:5f:
         5f:c2:c9:55:75:04:de:88:ca:f0:07:42:4b:f7:cf:5e:53:98:
         58:70:9d:04:08:54:55:fb:28:6e:95:2d:14:f6:ab:6d:cb:78:
         c4:48:c0:86:b3:01:89:4d:f0:2d:56:d0:c8:6f:fa:a5:3e:cb:
         a5:da:d7:33:98:76:e0:ec:14:33:96:64:f9:3d:e4:72:e1:81:
         36:07:15:b1:39:07:ae:1a:4d:02:1e:6d:ab:ac:77:e7:11:05:
         90:2c:2b:fa:c8:c2:8d:f3:fc:d5:5c:29:ec:80:94:52:be:92:
         5f:ae:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:56 2026 by rpki-client