Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File:                     Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier:          HT3r9vSlRV5auuv3oeAYhJccUysDs3dykEof7qj3UZs=
Subject key identifier:   98:38:99:0D:EE:AE:3F:EF:DE:58:5D:52:04:12:DB:4D:9D:F5:43:65
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer:       /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial:       0359
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number:          0351
Signing time:             Wed 25 Mar 2026 00:35:39 +0000
Manifest this update:     Wed 25 Mar 2026 00:35:38 +0000
Manifest next update:     Wed 01 Apr 2026 00:35:38 +0000
Files and hashes:         1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: z0IMexxbmZHDN1aHRTkNxfURE5qwU9pSa9jaOXY0B+k=)
                          2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: tyV63/6XwWHMEnlVNrZpKRUTH+qgqLOvrBf/JcSlvnU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
                          rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
        Validity
            Not Before: Mar 25 00:35:38 2026 GMT
            Not After : Apr  1 00:35:38 2026 GMT
        Subject: CN=69c32ddb-6cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:0e:1c:0b:8d:ed:bf:18:f5:6b:b6:1c:ce:
                    99:d4:bd:33:72:ef:9e:9e:67:53:1e:18:4f:8f:07:
                    ec:7a:6f:60:1d:cd:14:e3:7c:7b:cb:4e:b1:52:57:
                    c6:66:21:8b:da:14:4e:67:eb:02:91:00:83:22:39:
                    30:39:03:d0:29:b3:1b:bb:44:a9:7d:eb:92:e5:44:
                    7f:13:e2:09:d0:81:02:23:c2:06:72:cc:6f:17:c5:
                    75:3a:f5:f8:2e:53:e1:2a:cd:b3:e1:4a:42:0d:29:
                    63:ad:30:41:00:3e:0b:7e:8d:19:01:c0:e5:3d:75:
                    4e:d3:a5:24:7c:bd:bc:ff:8b:10:40:04:0c:e8:0d:
                    6e:9d:b1:da:29:8d:ca:47:77:82:1a:4f:40:22:2d:
                    5b:0a:62:bc:cd:38:84:37:65:12:73:8d:dd:29:c5:
                    aa:2e:d1:bd:61:8c:e9:08:21:11:72:b4:39:93:df:
                    41:09:8b:35:a5:34:17:07:e6:2d:d4:24:36:49:c3:
                    a5:8e:cd:23:c7:1a:c2:a0:b5:62:b8:2a:55:12:c3:
                    36:80:b2:b2:c5:cf:d7:b8:51:22:51:76:27:7a:e3:
                    41:fc:f0:4e:58:6e:08:39:de:f9:42:35:85:70:5e:
                    92:c5:a2:80:c1:7d:a7:6f:1f:e0:d7:ba:af:da:e7:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:38:99:0D:EE:AE:3F:EF:DE:58:5D:52:04:12:DB:4D:9D:F5:43:65
            X509v3 Authority Key Identifier:
                keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:27:89:a0:5b:10:d6:8a:13:48:33:2a:89:33:25:19:58:37:
         4e:c1:86:28:d4:d9:5c:b3:de:10:27:98:c4:23:5a:8a:ca:a6:
         20:fa:97:81:97:76:ff:3b:6c:6a:6b:d5:45:d9:53:32:b6:c5:
         89:7d:d7:e3:aa:e9:31:b3:4f:5c:20:ec:c9:84:82:f4:35:6a:
         c3:05:f6:e5:22:e0:9c:58:e1:64:c9:b7:5e:7d:7f:b7:f8:96:
         cd:67:c2:92:aa:6d:27:cf:83:f8:97:5a:dd:39:15:70:89:d9:
         cf:16:5c:5e:b4:cf:a1:b2:c9:1b:f9:9d:d2:d1:6a:a3:bc:a8:
         86:06:96:89:76:f6:49:ee:ec:a8:fa:68:29:6a:47:80:68:b5:
         0e:89:23:ad:79:ee:44:9c:20:e8:43:01:e8:6d:d0:40:ff:01:
         6f:3f:b4:e3:a6:de:6e:74:b1:7b:a1:e1:d5:c3:41:48:c8:cc:
         c8:cf:53:b9:90:e6:4f:8b:b4:9e:dc:60:77:47:9d:7f:a7:8e:
         73:32:a3:1a:46:8e:fc:af:04:85:a6:62:7a:19:65:a5:7b:e6:
         07:b3:b2:5c:73:53:21:68:1d:58:11:86:80:d2:10:b0:95:38:
         3f:ac:cb:c2:53:0f:cb:84:7a:0b:62:55:52:13:dc:a6:ad:63:
         99:46:fd:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4
NjFGMkE1MDMwHhcNMjYwMzI1MDAzNTM4WhcNMjYwNDAxMDAzNTM4WjAYMRYwFAYD
VQQDEw02OWMzMmRkYi02Y2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtu0OHAuN7b8Y9Wu2HM6Z1L0zcu+enmdTHhhPjwfsem9gHc0U43x7y06xUlfG
ZiGL2hROZ+sCkQCDIjkwOQPQKbMbu0SpfeuS5UR/E+IJ0IECI8IGcsxvF8V1OvX4
LlPhKs2z4UpCDSljrTBBAD4Lfo0ZAcDlPXVO06UkfL28/4sQQAQM6A1unbHaKY3K
R3eCGk9AIi1bCmK8zTiEN2USc43dKcWqLtG9YYzpCCERcrQ5k99BCYs1pTQXB+Yt
1CQ2ScOljs0jxxrCoLViuCpVEsM2gLKyxc/XuFEiUXYneuNB/PBOWG4IOd75QjWF
cF6SxaKAwX2nbx/g17qv2udr6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJg4mQ3u
rj/v3lhdUgQS202d9UNlMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1
REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD
NlllSFBZYW5ST0tHSHlwUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJieJoFsQ1ooTSDMqiTMlGVg3TsGGKNTZXLPeECeYxCNaisqmIPqXgZd2/zts
amvVRdlTMrbFiX3X46rpMbNPXCDsyYSC9DVqwwX25SLgnFjhZMm3Xn1/t/iWzWfC
kqptJ8+D+Jda3TkVcInZzxZcXrTPobLJG/md0tFqo7yohgaWiXb2Se7sqPpoKWpH
gGi1DokjrXnuRJwg6EMB6G3QQP8Bbz+046bebnSxe6Hh1cNBSMjMyM9TuZDmT4u0
ntxgd0edf6eOczKjGkaO/K8EhaZiehllpXvmB7OyXHNTIWgdWBGGgNIQsJU4P6zL
wlMPy4R6C2JVUhPcpq1jmUb9pw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:42 2026 by rpki-client