Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File:                     qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier:          27M7VQjh1KIh7z0OtYoaA5GYNTvHbddOBiBECTkcD/Q=
Subject key identifier:   01:9E:78:6D:5E:66:09:24:DD:7F:C8:EF:A3:10:AE:E9:DB:55:62:80
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer:       /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number:          02D8
Signing time:             Tue 07 Apr 2026 01:05:18 +0000
Manifest this update:     Tue 07 Apr 2026 01:05:17 +0000
Manifest next update:     Tue 14 Apr 2026 01:05:17 +0000
Files and hashes:         1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: m/MziOAbiGrwS0GFQoizJxCVSwvaXAdL56LQ3YglEJw=)
                          2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: 7veWVwTDcJIQiqB140/ZwdfOWsgZaB/7p0PlC1ugVfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
                          rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 01:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
        Validity
            Not Before: Apr  7 01:05:17 2026 GMT
            Not After : Apr 14 01:05:17 2026 GMT
        Subject: CN=69d4584e-835e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:98:c1:dd:f3:e9:1b:a1:61:0f:07:93:8f:
                    22:d7:c8:ad:ed:49:1d:70:7b:bc:7b:cb:14:9c:49:
                    f4:c2:2b:40:ff:16:a2:f9:54:1c:19:4d:83:d0:dd:
                    7a:04:15:48:5e:a4:4b:34:09:71:70:17:ae:3b:97:
                    57:97:58:de:bd:10:64:a9:2a:ae:18:42:b2:36:0c:
                    5c:eb:13:81:b2:76:92:57:39:95:74:19:e9:43:77:
                    62:6d:f9:86:9c:82:68:ca:b4:da:1d:6d:8c:6e:0c:
                    ce:fc:7f:5c:79:27:fc:f1:b9:18:93:fe:e0:1d:fb:
                    14:95:8d:b4:20:4b:06:c4:1f:94:78:04:ef:ab:f1:
                    b1:f3:db:91:ee:57:66:3c:39:a2:32:81:ac:14:ee:
                    f7:cc:e5:cc:a5:7a:0a:5f:64:64:36:83:b9:d7:92:
                    8f:16:5a:d6:a8:cb:96:4d:d7:a0:b6:2b:3f:da:df:
                    77:85:bd:74:bd:a6:32:79:df:44:77:bb:e3:6a:7d:
                    ba:1f:d3:88:f7:4a:b1:ce:ad:51:28:cc:81:ad:2d:
                    54:4f:c9:a6:ed:ab:e2:f6:ff:a4:7d:c5:8c:66:37:
                    46:b8:9e:9f:c2:a9:b5:7a:3c:22:e9:5d:94:80:c8:
                    e0:9a:a0:52:d3:85:f2:68:05:be:bc:65:d7:c6:50:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9E:78:6D:5E:66:09:24:DD:7F:C8:EF:A3:10:AE:E9:DB:55:62:80
            X509v3 Authority Key Identifier:
                keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c8:38:0f:cf:70:f9:8a:44:e5:55:d4:97:b2:25:45:c3:ca:
         03:5c:ff:21:50:1c:8c:b0:91:43:f7:30:72:24:a3:5f:ea:5f:
         a0:7d:df:ed:20:ab:a0:1f:e5:06:be:6c:f9:46:22:d9:56:45:
         70:a8:50:ee:dc:6c:2f:b5:92:6e:33:77:87:10:28:b6:4c:e6:
         eb:4f:f7:c6:48:5b:44:7d:00:82:ec:fb:87:1f:f3:ce:31:6b:
         98:c0:3b:46:19:cd:dd:e5:99:8b:ad:88:fb:71:df:e5:86:ee:
         84:30:2b:29:c3:e7:7f:ea:88:b5:e0:3b:df:e8:1d:ed:28:7e:
         70:63:b5:60:45:0f:69:83:5a:c5:3e:16:95:1b:70:39:c3:33:
         2f:ab:18:73:ba:13:41:9a:be:99:48:67:59:b9:76:2a:fc:25:
         4e:bf:47:84:9c:15:96:d5:a5:8d:5d:62:cf:6d:2d:c5:88:83:
         3f:27:69:83:ef:b9:23:5a:96:dd:1f:00:82:6f:52:12:83:95:
         9f:18:07:d5:ba:85:e0:2b:c7:9b:10:bf:63:a9:5a:ef:04:08:
         f2:c0:4d:54:d1:5c:a3:32:44:dd:94:ba:ae:a0:2b:26:96:28:
         74:c4:9a:03:a7:b2:fe:7f:7c:75:27:c9:6b:b1:5f:cd:83:73:
         73:9c:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 09:49:09 2026 by rpki-client