Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File:                     Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier:          WIRiCT5eCVbtN+WUf2ZFuvHvTvL5EjAytt3hVIzGAeA=
Subject key identifier:   47:04:7C:AC:41:C2:AF:1F:90:AB:68:F3:56:67:58:E3:CC:B2:41:B6
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       09E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number:          09C3
Signing time:             Sat 28 Mar 2026 19:51:18 +0000
Manifest this update:     Sat 28 Mar 2026 19:51:18 +0000
Manifest next update:     Sat 04 Apr 2026 19:51:18 +0000
Files and hashes:         1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: kV2xTTJwTKjKV8sIxs9FUduv9Dv2bVOVrFGL2KSax+s=)
                          2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: G8tEalgIYlF459jNjIZOJNDqLr5DDsJR+CWVbE3khX8=)
                          3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: 61z0KuT36nUVuAoy7v3bsXZ/PxDyaJ+n/vqrzGvGZYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 19:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2535 (0x9e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Mar 28 19:51:18 2026 GMT
            Not After : Apr  4 19:51:18 2026 GMT
        Subject: CN=69c83136-b7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:2e:12:70:55:dc:8c:4a:db:c9:8a:18:42:
                    5b:b9:76:5c:f4:77:46:5f:86:f2:d1:b0:f7:04:ce:
                    87:f4:19:4a:df:64:02:da:d2:4e:6f:af:f3:d0:89:
                    9b:c6:cc:40:2d:f4:0e:15:d7:66:7a:8b:3c:f1:83:
                    f4:ca:c3:c1:28:cb:e8:82:43:63:06:ac:69:71:9a:
                    eb:6d:59:25:8c:e4:bf:53:c8:b2:b0:df:c3:65:f9:
                    a0:0f:75:87:15:a0:e4:ab:ee:14:89:5c:a1:7d:55:
                    0e:a0:22:96:26:4e:12:ae:01:18:b4:f5:12:45:fd:
                    d4:4a:10:c7:e2:35:8a:b0:ea:c2:c0:e0:bd:50:c7:
                    e1:2e:fa:33:8a:05:7c:ac:ee:d3:c0:bc:41:30:01:
                    da:c4:0c:83:4e:d8:39:b5:57:ca:c9:63:06:eb:a1:
                    c4:d9:01:0b:64:39:7c:dd:49:f9:01:7c:b3:15:69:
                    45:a4:57:64:94:65:06:73:e3:dd:d4:4f:0e:96:28:
                    51:cf:ef:03:61:16:32:a3:d8:16:53:95:25:6b:6e:
                    0b:cc:7c:40:90:c1:f5:dc:24:2b:85:a9:1a:a5:8e:
                    7d:69:8c:0c:79:6b:23:a0:54:3f:39:40:7a:2f:cc:
                    31:34:de:a1:60:88:dd:fc:a2:22:b6:a4:1f:fd:33:
                    d2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:7C:AC:41:C2:AF:1F:90:AB:68:F3:56:67:58:E3:CC:B2:41:B6
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:75:00:29:00:89:d2:00:fb:2b:b8:0c:c8:27:28:a9:6a:
         86:6e:f2:2a:5b:14:e9:af:8a:c3:b7:86:04:5c:b8:1d:44:cd:
         9d:c2:c9:44:7c:80:26:45:79:af:8b:3a:50:ce:b4:30:b8:4c:
         a6:51:d8:5d:ac:99:d0:de:f3:8a:56:e9:49:1c:77:23:5c:93:
         3b:95:d5:01:75:cb:8b:84:f1:f1:39:bc:ec:d5:aa:55:27:1f:
         bb:56:94:36:62:4c:d4:e7:f5:ed:bf:98:7d:59:8c:d4:82:9b:
         fb:37:4c:e6:84:a5:4e:83:46:57:ef:c0:9c:9e:91:e2:e7:c6:
         1d:18:9a:ea:ab:e2:5b:1e:de:62:ed:fd:07:d2:39:9e:18:33:
         db:32:3b:b8:a2:83:13:a2:8f:77:5f:40:80:3e:90:fe:51:19:
         9e:24:1c:6d:44:0d:6c:26:7c:0c:73:b7:f6:38:3c:70:42:da:
         02:8e:cd:0c:55:80:99:93:87:c0:dc:01:8c:e0:77:87:da:b9:
         fc:7c:72:d6:a3:eb:a7:37:f8:f8:66:0c:35:d3:25:dd:39:98:
         fc:c7:fd:cf:c4:3e:a9:0b:b5:fa:32:65:4e:87:6b:2e:cf:0c:
         2a:73:53:b3:5d:dc:63:6b:cf:e2:b2:7d:24:a5:db:fa:23:bf:
         28:9f:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:38 2026 by rpki-client