Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
File:                     qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft (raw, json)
Hash identifier:          B//n8hF4hUpTNJVIBEFWvzuz3kadm0ksAKMobv6RpYk=
Subject key identifier:   F2:3D:99:7C:CA:15:78:E4:F8:B3:E3:A0:86:43:60:E9:82:E2:C6:88
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Certificate issuer:       /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial:       359D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
Manifest number:          3552
Signing time:             Tue 24 Mar 2026 14:24:58 +0000
Manifest this update:     Tue 24 Mar 2026 14:24:58 +0000
Manifest next update:     Tue 31 Mar 2026 14:24:58 +0000
Files and hashes:         1: qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl (hash: VdyVccJ2drOG+2PHf1kQnrrOENwH3gSN5ROlSeVvzUY=)
                          2: 2CDDCAB868AC11EDAA6C8F2AC4F9AE02.roa (hash: u9kZzqte8G5R67x31+sR3q0YHM2V76JLvdvpfY5M4UA=)
                          3: 3F0948F82D1011ECB745DB85C4F9AE02.roa (hash: kdT+sm008k7EJlVFHgyPf3s8RNvidHK++rJzxUn0e/U=)
                          4: D93EA75AEE5C11E995881B1BC4F9AE02.roa (hash: vYqWGmmOYgaht4Cgd4bFsJwNZUwoI1PZZtT6AUWgHOM=)
                          5: 0D0AE5040AE711E89D0C5071C4F9AE02.roa (hash: 0BiJ0HOA6qUFHN5xA8AuCJXROkGBYs9uD+TpXugIdmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl
                          rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13725 (0x359d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
        Validity
            Not Before: Mar 24 14:24:58 2026 GMT
            Not After : Mar 31 14:24:58 2026 GMT
        Subject: CN=69c29eba-80cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:53:e0:7c:59:9c:94:f8:47:83:2b:96:39:3f:
                    ec:b9:d1:f3:52:15:74:97:6f:aa:f5:73:fb:51:01:
                    88:50:08:de:da:87:e6:37:40:71:57:36:95:c8:d4:
                    0d:01:23:54:0d:fb:9c:f5:e1:9a:7c:4c:52:11:d8:
                    7c:49:30:6a:56:98:24:aa:ca:cb:57:57:6d:a5:42:
                    39:95:3f:10:60:41:d8:f8:01:be:65:94:8a:02:c2:
                    4e:fc:46:4f:2d:2c:84:a9:5a:04:c8:76:46:b8:43:
                    04:1f:37:65:67:e1:c2:16:fd:01:cf:94:89:3f:da:
                    a1:0d:84:69:52:05:0e:42:86:1b:8b:ef:cc:73:55:
                    25:c3:f4:b7:c6:bc:70:7c:61:c3:6d:77:a6:ef:fc:
                    aa:fe:6b:a3:ea:58:4c:34:15:18:6c:dd:d3:34:2b:
                    97:e5:00:38:17:87:70:5b:84:98:f2:9c:37:7b:29:
                    93:1a:bb:85:35:49:7f:8a:85:8b:8c:65:78:7b:b3:
                    59:6d:00:8b:7e:96:8d:4f:43:4c:34:d3:a2:a3:16:
                    79:34:28:32:bc:36:5a:78:52:07:5c:e6:be:15:0f:
                    6d:5a:a5:c8:13:44:fe:44:ab:2d:6d:62:51:c9:3f:
                    61:32:31:98:ed:c4:d1:15:6f:8b:81:74:f9:7e:63:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:99:7C:CA:15:78:E4:F8:B3:E3:A0:86:43:60:E9:82:E2:C6:88
            X509v3 Authority Key Identifier:
                keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:c7:de:2f:fb:da:e0:9d:94:06:90:cc:bc:e9:ef:ad:48:
         86:4e:0e:31:48:a2:d3:e7:7a:a4:75:a9:46:d5:ea:f8:61:63:
         de:85:8e:e1:e6:55:45:8c:20:2e:ff:ba:a5:16:e6:bd:5b:4d:
         17:01:aa:d6:f2:db:c1:16:a3:9c:3c:fa:80:db:bd:19:04:54:
         80:ef:f4:26:88:3e:b7:04:89:69:d2:f9:17:51:74:3b:3d:19:
         18:41:b6:09:d1:3d:e7:01:ef:f3:1f:4d:a3:55:ca:70:00:e9:
         64:5c:b9:1b:a9:dc:f5:40:a6:97:83:29:94:75:ac:4f:df:65:
         58:e7:78:58:a8:2c:3c:e1:a8:5d:9d:32:c6:0f:92:a7:e3:51:
         c9:f9:a2:03:36:a5:71:1f:07:34:fd:eb:a2:01:0b:11:96:11:
         7b:53:5c:95:76:3a:60:4e:6d:96:35:86:8b:25:8e:ec:33:74:
         69:b8:d1:d7:96:57:57:29:4a:7d:83:72:a0:6f:7f:5e:9e:66:
         8f:33:e9:a8:bb:3e:44:96:26:29:ad:4f:04:f3:05:83:80:54:
         d2:3e:38:19:45:e4:11:23:1c:13:36:6b:9f:c5:fb:a0:87:7a:
         c3:c1:af:7c:08:41:9d:21:4e:98:c2:c2:81:9c:f1:c7:d4:b6:
         26:2e:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:38:37 2026 by rpki-client