Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
File:                     p-QTTZsR3qt1sReR1V450XROC_E.mft (raw, json)
Hash identifier:          vZGn6dJb4GJ+36CIGfL1w533caqhP+rf3+o5PaPL7RA=
Subject key identifier:   B6:1F:8B:CA:6D:47:47:B9:0E:75:59:C3:B6:F3:51:9B:E8:5E:06:6D
Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1
Certificate issuer:       /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
Certificate serial:       1E6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
Manifest number:          1E5F
Signing time:             Thu 26 Mar 2026 16:03:39 +0000
Manifest this update:     Thu 26 Mar 2026 16:03:39 +0000
Manifest next update:     Thu 02 Apr 2026 16:03:39 +0000
Files and hashes:         1: p-QTTZsR3qt1sReR1V450XROC_E.crl (hash: h7/JTOvd1IzrTtT0kdG8SHO/LFQif2unb6Tad8E+iH8=)
                          2: AE58A24695B011E696EFE472C4F9AE02.roa (hash: 9fJ1ri6IaNU9VtWg8Hqy+rRwD5x8nCDjNKKvvrEFZII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl
                          rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7787 (0x1e6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1
        Validity
            Not Before: Mar 26 16:03:39 2026 GMT
            Not After : Apr  2 16:03:39 2026 GMT
        Subject: CN=69c558db-6794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:27:f3:ee:44:a4:44:9c:b2:e9:5c:df:a0:
                    24:64:73:43:eb:76:3c:63:0a:9b:cd:70:db:ea:e5:
                    7e:b4:46:61:16:75:fd:39:b3:b5:ca:4b:f3:dc:99:
                    3b:55:60:bb:d2:5f:4e:52:0f:f5:18:00:89:eb:b6:
                    b0:14:81:9b:b8:0c:7b:13:bf:80:fe:b7:5e:17:e1:
                    a2:58:9f:b5:16:25:9e:ae:f0:68:39:fd:1c:18:78:
                    d7:95:a7:2b:fd:4f:b9:d5:c2:32:4c:8c:6a:15:44:
                    8f:c4:ba:02:80:2b:5d:88:fa:e7:10:00:cf:87:60:
                    ef:12:21:5b:90:a2:8f:6b:3e:d5:80:a7:80:d5:52:
                    9a:1d:55:69:85:df:b0:89:e9:2c:41:85:57:94:04:
                    52:8a:a6:d4:e9:b2:17:e6:42:2c:21:74:c9:52:6f:
                    c3:1f:8f:a5:62:99:7a:f0:f8:83:34:22:53:a7:6a:
                    97:90:92:f5:06:da:0c:21:c4:bc:66:3d:2f:7e:88:
                    5f:aa:c7:02:f7:2d:f3:9b:c5:95:0e:14:4f:f3:fc:
                    be:eb:90:a6:0d:ea:12:b7:2b:39:a8:52:5a:5c:7e:
                    2b:4a:72:13:ca:86:ca:0f:a0:ad:d7:ec:b3:14:ef:
                    f7:9d:17:cf:da:d0:b9:5e:d7:ea:2c:71:51:4a:15:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1F:8B:CA:6D:47:47:B9:0E:75:59:C3:B6:F3:51:9B:E8:5E:06:6D
            X509v3 Authority Key Identifier:
                keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:ed:64:6c:41:91:c5:62:ad:2c:1d:23:e0:44:3e:ea:d0:
         10:68:c2:57:0a:b2:7d:6b:0a:25:04:53:2e:2a:1d:7e:c2:fe:
         12:e1:c9:a7:f3:89:65:68:86:51:46:12:dc:0e:1a:68:dd:94:
         ba:89:36:be:80:5a:f3:7f:1a:88:73:bc:fe:16:cb:ee:a4:09:
         6d:59:48:a9:16:ee:87:7e:4e:68:04:66:ff:43:d0:4a:ee:51:
         38:d6:e3:62:6e:f8:85:30:76:f7:63:94:5e:0c:b7:a8:fd:fd:
         6f:4e:3b:7a:4a:42:89:64:fd:5c:3e:8a:bd:b6:df:f3:f7:78:
         72:c6:74:68:e9:6a:54:9a:43:27:34:69:4d:3f:b0:6e:68:d9:
         95:d3:1f:fb:8f:83:da:30:06:69:09:ae:46:48:b6:27:6b:f3:
         bd:08:6a:64:e4:51:cf:b8:bf:b5:03:8d:e9:1b:c3:99:52:a6:
         2b:64:fd:05:48:58:ec:d9:54:b3:f6:fc:ff:85:5f:f9:6a:75:
         1f:f1:36:15:a5:d4:9b:69:90:2d:f4:cc:ac:f5:e0:ca:fe:ca:
         c1:0d:2a:f3:33:21:7e:fb:f9:4b:1a:43:fe:d9:be:e5:af:26:
         f1:47:82:2e:75:53:71:af:cd:b2:aa:c6:9d:a6:ad:68:d4:c7:
         fc:31:53:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:20 2026 by rpki-client