Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
File:                     fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json)
Hash identifier:          mLMSrEKsb2a3R9fPRx7agp8gfB+lS8aSobeOxkscL2I=
Subject key identifier:   82:C8:28:18:66:2C:CD:37:7A:9B:1B:7C:10:84:58:7A:A8:9E:CC:B9
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       2980
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
Manifest number:          28ED
Signing time:             Tue 24 Mar 2026 15:32:45 +0000
Manifest this update:     Tue 24 Mar 2026 15:32:45 +0000
Manifest next update:     Tue 31 Mar 2026 15:32:45 +0000
Files and hashes:         1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: wICdsU/ELedgbzBqfPSTwRlE/lSmB4XbWFhP4ZO0ky8=)
                          2: BC85BF12986611F099AC837DC4F9AE02.roa (hash: ou4cUOcNjqtElt4sr1NAu49lP8L4hmyuw27B/RIohB0=)
                          3: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: z56uJ2U87y4BZLiIWCO/gwAwKZ33is7HYYG+KYeN+9U=)
                          4: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: 00gpwc2zOnyGovrxz5NLVNWOFFs8dFrjb8ZlbuA2tCY=)
                          5: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: CH+P1DrpmZpd0ULB0EGA0EwiZi1YaDYI+NO8M1bemyE=)
                          6: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: VLiSpEsf9qV7L6/Fw29gbB6h1KnjaO5VGM7Rak0+JP4=)
                          7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: eTadtDYNDPp/pHk3FfF1hzmaueMz7ziMe0kecofm1oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl
                          rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10624 (0x2980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Mar 24 15:32:45 2026 GMT
            Not After : Mar 31 15:32:45 2026 GMT
        Subject: CN=69c2ae9d-82c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:71:cb:4e:5d:4d:f1:9a:37:6d:15:9d:ce:
                    01:e6:7e:5a:b4:7e:b7:a6:f6:cf:a7:19:52:31:44:
                    fc:86:56:9b:04:e3:82:2e:96:7f:01:a8:28:95:df:
                    01:c5:d6:63:d2:48:88:54:6a:eb:63:b3:ed:5f:2e:
                    f7:c8:c0:5d:de:c2:df:89:a9:04:4f:69:c5:ee:4d:
                    46:0e:ce:f7:88:2e:2b:cf:a0:c8:d7:16:a7:fa:21:
                    16:63:34:98:56:fd:7d:cf:c4:36:70:82:10:fd:4d:
                    8e:65:e0:80:83:20:24:df:a3:0f:02:20:7e:c2:81:
                    6e:65:9d:4d:fd:f7:7c:06:66:85:b3:da:c4:32:06:
                    43:bf:54:3d:a6:1e:86:d4:4f:84:d5:d5:20:da:73:
                    77:af:62:c0:97:2a:6c:b7:0c:c7:ab:e2:8b:f6:41:
                    70:30:c0:ae:b3:32:93:b1:ca:93:e1:58:96:93:4f:
                    41:2b:29:48:d7:06:13:bd:1b:25:42:8f:dd:43:06:
                    6f:4c:54:d2:f3:6b:a9:8c:50:83:0d:df:10:b1:48:
                    0c:93:ff:20:1c:28:c3:3b:1e:45:94:eb:b4:39:c3:
                    59:fe:1a:83:c8:97:3b:cc:cc:b1:71:a6:03:09:a7:
                    0f:c1:fd:df:96:cd:b1:6f:be:24:53:0b:cf:b7:cc:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C8:28:18:66:2C:CD:37:7A:9B:1B:7C:10:84:58:7A:A8:9E:CC:B9
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:39:4a:21:55:49:24:9f:7f:88:7c:be:93:15:fc:b0:83:25:
         f3:bd:e9:75:42:c1:4c:3b:8a:bc:e3:be:13:be:74:21:d6:73:
         c1:0b:7b:2e:37:bb:2a:96:be:c2:88:14:34:f5:1c:b0:4d:6a:
         e0:90:ce:ed:8a:7f:cf:97:7b:33:cf:89:c4:99:c6:ae:0f:89:
         58:e8:58:72:ec:02:67:70:a0:6d:db:52:a4:3e:0a:e9:9e:ac:
         42:b5:7e:93:95:87:00:0b:a4:3b:90:87:87:41:9a:ec:3b:a6:
         89:72:8d:92:df:7d:90:68:32:28:9b:21:b6:28:5c:a6:a8:5e:
         fa:8a:63:1c:18:47:ee:1d:9d:c0:b1:c7:23:a4:9d:d2:6a:06:
         72:9a:65:1f:17:0c:4b:53:70:9a:43:a9:e3:ff:a5:30:1c:11:
         c3:00:94:17:5b:87:6f:07:ff:cf:d6:e4:21:38:ab:a4:1a:ac:
         c1:1b:0c:4e:a7:6b:26:07:ca:fe:71:10:56:9e:f0:86:34:71:
         0f:be:a0:9f:6b:8f:75:ca:bc:22:c0:d0:bf:42:43:ef:bb:d0:
         57:f2:7a:c5:3f:32:9f:c9:30:5c:76:c8:0d:cf:2f:84:17:e1:
         7a:bd:f8:0f:6a:64:8b:01:0f:e7:47:a1:5a:d6:84:aa:8c:e6:
         6b:75:6e:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4
RTkzM0ZEQ0EwHhcNMjYwMzI0MTUzMjQ1WhcNMjYwMzMxMTUzMjQ1WjAYMRYwFAYD
VQQDEw02OWMyYWU5ZC04MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsO9xy05dTfGaN20Vnc4B5n5atH63pvbPpxlSMUT8hlabBOOCLpZ/Aagold8B
xdZj0kiIVGrrY7PtXy73yMBd3sLfiakET2nF7k1GDs73iC4rz6DI1xan+iEWYzSY
Vv19z8Q2cIIQ/U2OZeCAgyAk36MPAiB+woFuZZ1N/fd8BmaFs9rEMgZDv1Q9ph6G
1E+E1dUg2nN3r2LAlypstwzHq+KL9kFwMMCuszKTscqT4ViWk09BKylI1wYTvRsl
Qo/dQwZvTFTS82upjFCDDd8QsUgMk/8gHCjDOx5FlOu0OcNZ/hqDyJc7zMyxcaYD
CacPwf3fls2xb74kUwvPt8zXvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILIKBhm
LM03epsbfBCEWHqonsy5MB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG
OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L
RTQ3a2RiQl82WDZPa3pfY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOzlKIVVJJJ9/iHy+kxX8sIMl873pdULBTDuKvOO+E750IdZzwQt7Lje7Kpa+
wogUNPUcsE1q4JDO7Yp/z5d7M8+JxJnGrg+JWOhYcuwCZ3CgbdtSpD4K6Z6sQrV+
k5WHAAukO5CHh0Ga7DumiXKNkt99kGgyKJshtihcpqhe+opjHBhH7h2dwLHHI6Sd
0moGcpplHxcMS1NwmkOp4/+lMBwRwwCUF1uHbwf/z9bkITirpBqswRsMTqdrJgfK
/nEQVp7whjRxD76gn2uPdcq8IsDQv0JD77vQV/J6xT8yn8kwXHbIDc8vhBfher34
D2pkiwEP50ehWtaEqozma3Vu9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:28 2026 by rpki-client