Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File:                     q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier:          ASvz+2atColEvD1p5IjpaYgJR6RPRfwuV5/R6Xp+GDg=
Subject key identifier:   91:D5:E4:CA:67:4A:17:A6:36:42:33:B2:A0:76:CE:4C:1B:F2:23:17
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       0984
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number:          096F
Signing time:             Tue 24 Mar 2026 19:52:13 +0000
Manifest this update:     Tue 24 Mar 2026 19:52:12 +0000
Manifest next update:     Tue 31 Mar 2026 19:52:12 +0000
Files and hashes:         1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: E6esYHo0ytoDylQqC2ibMByvR12yUwNP3iIzHTNxdY0=)
                          2: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (hash: elXGzOAXv/vOs6kbXOd59T9g8u/dR7mHNS46gVlolLM=)
                          3: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2436 (0x984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Mar 24 19:52:12 2026 GMT
            Not After : Mar 31 19:52:12 2026 GMT
        Subject: CN=69c2eb6d-6825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:64:9a:bc:4f:7c:f2:a3:f7:40:9f:a6:cc:
                    3c:a4:f6:1f:eb:97:9e:3f:45:85:ff:b2:c0:a3:b1:
                    8f:53:61:22:39:bf:ce:a8:81:70:2b:7f:63:d2:71:
                    8e:be:54:b6:c1:9f:83:32:99:3e:cf:aa:27:16:be:
                    18:8f:b8:76:a5:5a:e1:30:d8:28:f0:ff:fe:76:5a:
                    45:20:dc:a3:5b:48:9d:4f:db:0f:71:15:82:73:0e:
                    04:0e:cc:1f:18:5b:45:3a:eb:5f:82:3e:3c:98:bb:
                    74:18:f2:45:9c:32:6f:90:c0:99:cb:3e:2b:c0:9f:
                    89:82:c6:52:60:65:77:3e:46:40:59:eb:33:f8:7c:
                    99:e2:f1:08:03:95:31:cd:39:17:72:25:c4:37:b3:
                    f8:76:8f:3f:8c:89:c2:5d:06:9c:1a:a9:25:0d:7d:
                    ef:22:f3:9a:63:e4:2c:68:e4:52:17:9b:e4:8a:35:
                    09:44:d7:8f:6e:fb:8d:dc:81:25:a4:52:0c:3e:e2:
                    b4:7b:07:a4:5a:99:6f:e3:f0:d3:7d:cc:fe:06:8c:
                    c9:d5:c1:9a:e6:13:3f:43:77:b1:d8:67:f2:92:e4:
                    d2:f3:29:25:f2:ae:7c:ee:3c:a6:93:4e:0a:23:2c:
                    b4:0c:f7:89:41:1b:3e:df:dd:77:e8:df:9b:66:b1:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D5:E4:CA:67:4A:17:A6:36:42:33:B2:A0:76:CE:4C:1B:F2:23:17
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:63:13:2b:22:a9:07:5a:44:25:fc:66:d2:10:96:58:84:
         b8:5c:74:85:ac:03:1d:c8:e3:0a:6a:69:7a:1b:23:7a:1d:a2:
         6c:b6:ce:f2:37:53:81:f8:7c:17:f4:2d:5c:6b:ad:fa:3f:dd:
         a2:cb:9a:49:ac:ee:90:8e:e9:ba:33:a5:19:ae:6e:ca:0c:89:
         cf:20:ae:d0:2d:50:f9:be:7b:98:ba:0d:ea:5c:09:35:9a:12:
         2d:6f:c8:55:fa:ae:03:c8:16:0f:59:1f:90:1d:17:73:09:21:
         4a:a7:47:5e:c0:b4:d8:ec:94:0f:25:75:b8:ee:14:b4:5a:5f:
         f2:1f:b8:ea:77:58:83:f5:60:f1:e7:20:89:a1:46:49:80:48:
         dd:e7:ae:ad:a4:6c:40:3f:02:b7:05:79:25:b5:4e:0b:bd:42:
         0b:f3:3d:31:28:c5:bb:a5:33:3a:01:af:64:26:90:c4:c6:61:
         4d:14:23:ec:17:0a:12:1b:e6:98:21:6a:1a:8d:aa:96:9a:a5:
         5f:fb:b6:d8:3e:65:db:22:0a:f0:79:d7:a1:1c:e7:4f:81:fc:
         7a:94:e5:ae:d8:a7:7c:f6:ad:30:79:18:2a:8f:f2:66:5f:a4:
         7b:0b:7b:9e:16:91:a3:d3:fb:58:e5:e3:61:dd:ee:85:b3:cf:
         af:79:54:e1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx
OUFGQThGRDUwHhcNMjYwMzI0MTk1MjEyWhcNMjYwMzMxMTk1MjEyWjAYMRYwFAYD
VQQDEw02OWMyZWI2ZC02ODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk8lkmrxPfPKj90Cfpsw8pPYf65eeP0WF/7LAo7GPU2EiOb/OqIFwK39j0nGO
vlS2wZ+DMpk+z6onFr4Yj7h2pVrhMNgo8P/+dlpFINyjW0idT9sPcRWCcw4EDswf
GFtFOutfgj48mLt0GPJFnDJvkMCZyz4rwJ+JgsZSYGV3PkZAWesz+HyZ4vEIA5Ux
zTkXciXEN7P4do8/jInCXQacGqklDX3vIvOaY+QsaORSF5vkijUJRNePbvuN3IEl
pFIMPuK0ewekWplv4/DTfcz+BozJ1cGa5hM/Q3ex2GfykuTS8ykl8q587jymk04K
Iyy0DPeJQRs+39136N+bZrGG2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHV5Mpn
ShemNkIzsqB2zkwb8iMXMB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix
QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq
OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NjdGNS9CRDEwQjREQ0IxQzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhw
V1NrWGFhQm5BM01acjZqOVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYN1jEysiqQdaRCX8ZtIQlliEuFx0hawDHcjjCmppehsjeh2ibLbO8jdTgfh8
F/QtXGut+j/dosuaSazukI7pujOlGa5uygyJzyCu0C1Q+b57mLoN6lwJNZoSLW/I
VfquA8gWD1kfkB0XcwkhSqdHXsC02OyUDyV1uO4UtFpf8h+46ndYg/Vg8ecgiaFG
SYBI3eeuraRsQD8CtwV5JbVOC71CC/M9MSjFu6UzOgGvZCaQxMZhTRQj7BcKEhvm
mCFqGo2qlpqlX/u22D5l2yIK8HnXoRznT4H8epTlrtinfPatMHkYKo/yZl+kewt7
nhaRo9P7WOXjYd3uhbPPr3lU4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:53 2026 by rpki-client