Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
File:                     qpoNy1ExOS1xlqhEGKioRkVTH5c.mft (raw, json)
Hash identifier:          r3OgKxw/KNA6a+FhsS8q3Mg/IDdrxFMOYXTcngjj5mc=
Subject key identifier:   A0:1D:20:37:7F:F9:60:0F:C2:EA:50:C7:E1:10:EA:C7:E7:CE:D5:F5
Authority key identifier: AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97
Certificate issuer:       /CN=A91EF66D/serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
Certificate serial:       01D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
Manifest number:          01CC
Signing time:             Wed 25 Mar 2026 03:03:30 +0000
Manifest this update:     Wed 25 Mar 2026 03:03:29 +0000
Manifest next update:     Wed 01 Apr 2026 03:03:29 +0000
Files and hashes:         1: qpoNy1ExOS1xlqhEGKioRkVTH5c.crl (hash: rBkqhboybXjXFFWtYLkJMRTkNyvOqu/gUYZUPQgIF+I=)
                          2: C2D66F8271A911EEAEEE351CC4F9AE02.roa (hash: BO6AQAh7td3nrZ1+SlYu2EFXvVbYw1fCjc63G21ZQuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl
                          rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF66D, serialNumber=AA9A0DCB5131392D7196A84418A8A84645531F97
        Validity
            Not Before: Mar 25 03:03:29 2026 GMT
            Not After : Apr  1 03:03:29 2026 GMT
        Subject: CN=69c35082-24fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:c4:6a:c1:f2:d8:2c:78:af:ae:bb:92:9b:
                    70:bd:e5:e4:4e:24:c2:a8:6f:8a:bb:df:9c:37:fb:
                    18:58:3a:54:00:0d:99:ad:90:68:17:e8:6c:76:10:
                    89:10:72:fd:b1:d1:d7:3b:72:ca:7c:11:b6:f0:19:
                    10:89:9b:ac:83:9c:e8:9a:62:7b:e1:d5:20:93:08:
                    0d:40:80:04:7d:bc:13:ca:12:7f:c9:1f:a9:0f:85:
                    5d:02:31:ad:b6:33:83:5e:63:d7:cd:85:b1:91:3d:
                    30:e6:95:28:e3:40:75:32:b7:ee:df:1d:6c:e7:95:
                    f8:93:25:7f:4d:3f:95:ab:bb:00:05:88:a2:89:da:
                    6c:f5:1f:84:92:3c:84:a9:7c:47:7a:1e:ec:3d:44:
                    60:26:6b:c4:19:c0:80:e0:53:57:42:3f:b6:d6:4a:
                    ea:0f:ba:81:7b:dd:90:9f:5d:27:4d:a2:75:dd:c1:
                    4f:2f:39:ef:92:b1:b8:33:bf:7a:2a:b3:75:ab:01:
                    34:b7:a1:ed:77:c9:e5:74:3b:8e:27:7d:06:a0:3d:
                    f8:b1:4e:f5:44:05:af:3e:c5:6e:43:92:93:21:ac:
                    4b:42:ef:56:c2:f0:60:85:8c:4e:ee:35:76:07:92:
                    05:65:e3:eb:79:ba:30:c7:c2:16:85:e4:f3:79:5d:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1D:20:37:7F:F9:60:0F:C2:EA:50:C7:E1:10:EA:C7:E7:CE:D5:F5
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0D:CB:51:31:39:2D:71:96:A8:44:18:A8:A8:46:45:53:1F:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpoNy1ExOS1xlqhEGKioRkVTH5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF66D/511A892E71A811EEB437F181C4F9AE02/qpoNy1ExOS1xlqhEGKioRkVTH5c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:0f:57:9b:16:d2:04:77:f2:a6:f1:2c:83:d1:05:d4:bb:
         62:09:6a:ac:16:96:56:64:d7:26:9d:7b:44:c1:15:c1:1d:12:
         a6:f2:11:6e:4c:fc:ee:10:73:e3:c8:46:8a:08:e0:34:72:1f:
         4d:6e:d9:b9:2e:d9:ef:cb:28:b1:85:e5:58:cc:58:ab:25:91:
         4a:05:a4:7c:17:a1:a8:00:a9:c2:d1:10:53:65:94:68:7d:26:
         46:4c:33:4f:da:7f:dc:95:bb:0a:da:c4:51:7a:c2:fe:23:13:
         15:75:8f:1e:b9:4c:90:43:38:8c:90:80:64:1f:4d:fb:42:e7:
         32:cc:1b:59:fc:04:8a:76:f2:0a:79:ae:d4:4f:e6:08:af:a8:
         8d:cb:9d:c7:b2:49:f3:ac:b2:fd:b9:a5:4a:12:ef:b5:c5:79:
         68:d2:87:a2:c8:a7:7b:fe:83:61:de:4e:e8:78:af:12:c4:ac:
         ab:bf:50:d6:0d:aa:fa:29:a5:1d:eb:73:46:98:5a:24:9d:25:
         53:2c:f1:cb:cb:63:d7:35:cf:42:9a:8d:22:6a:b9:91:53:eb:
         0d:4b:36:83:7e:ff:ed:be:f9:06:67:7f:1e:b5:05:41:b4:4c:
         6f:70:50:08:5f:80:0e:11:6c:21:9c:c8:83:78:dd:c4:ff:18:
         22:4e:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:49:19 2026 by rpki-client