Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
File:                     Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft (raw, json)
Hash identifier:          go2g19qfxbbwNqNKOY5c9jZ6Gp4xBcaPs0duWSYZI+U=
Subject key identifier:   CC:1D:A6:E5:E0:35:61:AD:F3:41:13:27:A6:66:3D:2E:65:D5:51:D4
Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53
Certificate issuer:       /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
Certificate serial:       055F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
Manifest number:          0558
Signing time:             Tue 24 Mar 2026 23:04:21 +0000
Manifest this update:     Tue 24 Mar 2026 23:04:21 +0000
Manifest next update:     Tue 31 Mar 2026 23:04:21 +0000
Files and hashes:         1: Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl (hash: 2Ov9pJ+Srz3qtqI4owbf6reMNYewDwWy6D7DO64nazk=)
                          2: 083000C22A6F11EC9AD38840C4F9AE02.roa (hash: caAFkHTlhWluO59jeavUVW/7IbtAmxOVURoDRMIZiDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1375 (0x55f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653
        Validity
            Not Before: Mar 24 23:04:21 2026 GMT
            Not After : Mar 31 23:04:21 2026 GMT
        Subject: CN=69c31875-5517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:4c:8d:33:43:71:0c:d5:72:d9:43:50:06:
                    b7:24:bd:e7:2a:b9:12:81:98:36:6a:bf:64:4e:4e:
                    c8:e8:01:67:45:82:0f:82:d4:d2:a4:64:5e:fe:0f:
                    07:fa:01:32:bf:31:e7:5c:1a:13:c3:f3:b9:1a:87:
                    24:c8:8c:ee:8b:73:36:a3:05:f0:83:3d:76:90:15:
                    ac:2d:4e:a2:80:2a:3d:cf:1f:1b:0e:87:6a:8a:05:
                    8e:6f:ff:30:12:5e:5b:fe:91:03:2c:00:a5:55:28:
                    c7:69:de:7d:95:56:05:91:2e:3a:0b:3c:9d:be:45:
                    17:9e:6f:ad:34:3b:97:2d:ee:ce:55:1c:db:a9:89:
                    a3:96:45:8f:1c:23:d1:85:d0:bd:a1:f0:8b:1a:c8:
                    4e:82:65:36:57:c7:69:68:30:87:c7:db:81:cf:a8:
                    6f:a1:dd:5b:0b:57:e8:91:e8:e5:59:f7:73:6a:d5:
                    59:76:49:21:24:06:24:e0:b2:79:49:d5:1e:f2:a6:
                    3f:0d:64:2d:e3:0f:da:25:e1:58:fd:34:3a:93:f5:
                    5b:0b:fc:40:1e:48:0f:e9:2b:cb:26:af:d6:76:f1:
                    11:fc:96:e0:3f:1a:38:9f:70:a0:a1:41:e0:a1:ce:
                    97:ea:8e:98:10:0f:df:ce:37:99:58:32:8e:63:1c:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1D:A6:E5:E0:35:61:AD:F3:41:13:27:A6:66:3D:2E:65:D5:51:D4
            X509v3 Authority Key Identifier:
                keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:4d:e1:2a:ae:c8:22:e4:32:7c:84:15:73:27:30:ab:70:57:
         97:a8:00:9f:3f:37:84:f6:7f:f0:22:e1:ef:1d:ab:78:98:ca:
         a6:c1:00:ac:0e:30:08:89:09:7f:73:07:6b:4d:e3:1e:49:13:
         20:b6:b8:72:07:c9:f3:f0:e5:f5:bf:a9:49:35:05:2c:fd:33:
         fb:89:16:7e:d7:26:ae:67:b4:d8:ea:4e:e7:e2:32:15:21:af:
         62:8a:ed:c2:af:6a:3a:37:1d:c0:e4:aa:4b:64:f2:24:3a:2c:
         47:18:db:ff:af:3b:2c:0d:b0:92:b2:0f:7e:f2:c5:25:2f:b5:
         ea:c1:ca:b3:56:d8:33:e2:d2:fe:94:e9:73:33:5b:64:bb:cf:
         96:bc:bd:9c:07:95:42:64:0d:c7:c7:c5:0f:03:48:ac:9c:db:
         d6:6a:b5:a4:19:db:40:a8:94:0c:41:42:69:28:5e:2e:60:c4:
         e0:ea:ff:c9:06:95:e3:c3:f4:73:9c:e7:cb:f7:61:27:ab:b8:
         cc:ae:b1:db:73:71:35:d0:80:50:74:ae:13:f6:68:34:5b:f9:
         06:e8:9c:a9:b3:75:bf:fa:42:46:fc:3b:d8:ff:69:74:38:e7:
         c9:c9:04:90:97:fc:9d:4d:d4:58:e0:9e:f0:a9:5c:bc:4f:ec:
         c5:e2:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:37 2026 by rpki-client