Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File:                     QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier:          yE24HS5WyMPCkdDMVRNNHSShrRgpizJXVS/aeJiegIw=
Subject key identifier:   44:81:D7:97:4F:E2:DB:65:EC:61:EC:2D:C5:E5:5A:13:D5:22:F2:1B
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer:       /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial:       07A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number:          079D
Signing time:             Tue 24 Mar 2026 21:15:07 +0000
Manifest this update:     Tue 24 Mar 2026 21:15:06 +0000
Manifest next update:     Tue 31 Mar 2026 21:15:06 +0000
Files and hashes:         1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: c2LGXrabAOifxNLGVkNjPKZ3vYRRUwP4RA2+Fv7I+os=)
                          2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
        Validity
            Not Before: Mar 24 21:15:06 2026 GMT
            Not After : Mar 31 21:15:06 2026 GMT
        Subject: CN=69c2fedb-e4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:96:3f:71:37:f9:13:00:f5:c1:29:6e:d7:
                    7f:ac:5a:f0:b5:1d:68:b3:9f:8c:f2:5f:8e:e6:e6:
                    91:89:77:a4:e0:ae:dd:0c:dd:a9:91:22:9d:b4:4d:
                    aa:c7:a9:53:4c:5b:68:eb:38:a5:55:c9:87:3a:ff:
                    e0:13:b9:3b:dc:3b:87:ae:80:b5:cc:10:6d:4a:6b:
                    ee:6a:24:8d:01:07:65:94:96:38:bb:8e:c8:3a:92:
                    c3:ed:46:c8:0b:2d:39:7a:82:0a:9d:cd:82:15:38:
                    42:36:0e:10:22:17:db:f2:05:14:39:f8:cc:55:22:
                    90:2c:fe:78:41:fb:fc:37:5a:cc:5d:a6:2f:d2:66:
                    11:9d:48:62:54:d5:c8:79:83:c7:b1:8a:ac:a8:43:
                    47:7c:04:fd:46:ca:12:88:18:78:b4:59:97:bb:37:
                    d9:18:d5:30:87:db:41:a5:54:ac:bc:c5:25:bb:58:
                    fb:1e:fb:9e:37:e0:c4:9b:a5:2e:3c:3a:59:44:ed:
                    15:97:5f:4e:1b:b2:b9:c6:03:4a:a2:ff:7b:1d:80:
                    34:69:55:e0:35:50:5f:9b:21:86:8c:ce:61:f1:6b:
                    b6:ab:f8:93:52:d4:fd:19:98:d3:b3:35:a3:3c:50:
                    75:29:30:7a:3f:80:1b:ed:0d:cb:65:26:d9:c4:41:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:D7:97:4F:E2:DB:65:EC:61:EC:2D:C5:E5:5A:13:D5:22:F2:1B
            X509v3 Authority Key Identifier:
                keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:8e:61:34:a0:8e:71:63:df:c2:0f:ab:cd:9e:b1:44:6a:
         ad:ba:79:85:7c:f7:7d:bf:01:f4:92:bd:c5:a7:a6:13:86:e8:
         d0:d4:7e:1b:b5:ff:e7:57:7a:58:dd:a4:3c:c8:b4:71:94:5a:
         13:c6:68:1a:0b:28:c4:47:87:a3:a4:04:02:2f:5d:f7:38:ce:
         d8:52:8b:e4:12:53:2e:34:e8:8f:d2:5c:0f:9c:88:a7:a6:08:
         1b:fb:ef:d3:61:b3:d7:a7:ff:0a:77:c6:6f:59:9d:52:9b:89:
         72:73:b2:19:9a:cd:34:b8:d2:5c:cb:d6:70:fa:db:2a:80:3d:
         38:44:1f:8d:21:78:df:ca:72:8d:e6:50:ed:be:24:71:82:d8:
         36:d3:aa:59:cc:29:80:e9:d7:44:5c:94:7d:eb:d0:28:6e:3d:
         de:ae:c8:c3:c5:18:25:dc:10:00:b9:01:5c:6d:25:24:98:b0:
         b3:51:1d:13:a6:7b:cb:74:8d:3b:db:fe:f6:12:cd:25:3a:87:
         ce:b1:da:75:46:bb:a3:12:03:02:70:69:80:6d:05:76:71:14:
         e1:81:0e:4b:a4:a4:53:cf:59:e6:95:58:88:18:98:bb:b9:9f:
         63:7e:71:1f:ee:0b:e3:b0:48:04:d2:dc:6a:d7:34:69:8c:e3:
         fc:48:90:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:13 2026 by rpki-client