Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File:                     _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier:          WDFwb0w//P22QVM3X1B8NO0perjInVGeeW11eELdV5A=
Subject key identifier:   C5:8B:5F:77:77:C0:6C:F3:6F:8D:87:1E:C1:FC:41:5F:42:4F:98:59
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number:          0154
Signing time:             Sun 29 Mar 2026 04:47:28 +0000
Manifest this update:     Sun 29 Mar 2026 04:47:28 +0000
Manifest next update:     Sun 05 Apr 2026 04:47:28 +0000
Files and hashes:         1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: tHxYW8u4V1csrCxv5kBFh8wHPVXZKc3htwE7WZ0t0j4=)
                          2: C06D45B6961611F0870D4413C4F9AE02.roa (hash: hIpv58h7Px9PA6uLUl6YRPJ1ini2ySNj91INQdwC5XY=)
                          3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: FcyMfOj2hcMJUJHyK83l34d3Lj+tu/xZiBykgdbj9QM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 04:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Mar 29 04:47:28 2026 GMT
            Not After : Apr  5 04:47:28 2026 GMT
        Subject: CN=69c8aee0-a958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:b1:4a:b1:c4:05:37:16:2c:8a:df:d8:59:
                    86:0f:3d:05:d8:eb:d2:c3:d2:de:78:39:bf:ab:a1:
                    61:83:41:bc:d7:2e:b7:f2:31:1d:cd:21:69:0e:b3:
                    92:f3:ac:d1:ec:4f:fb:52:64:a5:78:09:8f:2e:a9:
                    75:e6:d6:d1:81:01:1a:ee:83:fe:b7:35:64:ca:27:
                    15:d2:98:5f:a2:8a:9c:91:59:3f:c5:43:d4:d8:e6:
                    26:be:06:c9:83:c8:e8:d4:c2:9e:e9:29:4d:d0:82:
                    ef:27:41:33:b1:7d:0d:29:80:e5:ce:e1:86:76:f8:
                    5e:58:44:f0:c9:ed:22:23:d3:15:37:ad:fc:62:2d:
                    86:4c:54:10:d7:7a:8b:f4:50:6f:e9:10:11:36:04:
                    c5:9f:5c:c3:1c:76:e6:62:35:c1:b7:70:a9:14:4d:
                    46:e9:c6:7b:90:07:b4:79:07:ea:49:87:18:19:e5:
                    3e:7b:92:61:5f:c9:20:76:a8:28:e4:6d:22:57:48:
                    17:8d:be:55:6e:f1:41:10:26:72:69:01:1d:4d:8a:
                    13:82:c7:03:d5:f2:ae:e7:8c:dc:c4:09:aa:e1:6a:
                    be:01:a7:c4:dc:69:7e:bb:ce:68:3c:73:a0:69:15:
                    29:d2:fb:c9:2c:37:96:8a:05:3d:58:d1:82:ce:34:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8B:5F:77:77:C0:6C:F3:6F:8D:87:1E:C1:FC:41:5F:42:4F:98:59
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:10:7e:8a:fa:80:9e:d4:a2:32:97:fc:96:ef:2a:c8:27:0f:
         d1:e5:99:40:86:8b:8b:bc:92:c1:41:3d:55:07:12:aa:24:06:
         40:be:3f:36:df:a2:f1:ed:1f:d6:4a:8b:af:30:17:f9:30:c3:
         bc:99:28:15:b9:b2:c7:04:a0:84:74:dc:9a:c0:b1:15:b5:04:
         33:2a:c6:b7:e1:a8:73:3e:8b:33:09:5a:f0:9c:51:a5:9d:86:
         6b:a2:da:e2:7d:2b:40:ec:b9:01:bc:3a:66:0c:bf:21:aa:50:
         60:c9:7b:71:cf:b7:a7:62:3a:e2:de:9a:82:2b:4e:dc:b2:4b:
         af:e5:73:cb:bf:3c:29:10:57:52:dc:7f:23:c3:55:9f:40:21:
         e0:25:69:6e:63:21:a6:ac:e6:42:e3:29:b8:92:7a:6d:55:7b:
         a8:38:0b:c0:e4:e7:53:dd:93:70:e3:c1:57:2b:c7:d1:a8:95:
         d8:95:18:27:30:71:de:40:04:5f:cb:ea:23:55:83:84:54:ba:
         fe:d5:3d:c8:b4:83:9e:7d:3d:7d:e3:ba:06:43:59:fe:8f:2d:
         aa:2f:6d:e5:93:ea:d2:3d:ac:33:60:03:bf:6c:51:e2:e9:06:
         fa:b9:0b:53:f1:10:a0:2a:a6:88:58:f5:f4:1f:85:67:45:d9:
         28:a4:7f:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz
Q0VEQjJDN0YwHhcNMjYwMzI5MDQ0NzI4WhcNMjYwNDA1MDQ0NzI4WjAYMRYwFAYD
VQQDEw02OWM4YWVlMC1hOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xGxSrHEBTcWLIrf2FmGDz0F2OvSw9LeeDm/q6Fhg0G81y638jEdzSFpDrOS
86zR7E/7UmSleAmPLql15tbRgQEa7oP+tzVkyicV0phfooqckVk/xUPU2OYmvgbJ
g8jo1MKe6SlN0ILvJ0EzsX0NKYDlzuGGdvheWETwye0iI9MVN638Yi2GTFQQ13qL
9FBv6RARNgTFn1zDHHbmYjXBt3CpFE1G6cZ7kAe0eQfqSYcYGeU+e5JhX8kgdqgo
5G0iV0gXjb5VbvFBECZyaQEdTYoTgscD1fKu54zcxAmq4Wq+AafE3Gl+u85oPHOg
aRUp0vvJLDeWigU9WNGCzjQsGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWLX3d3
wGzzb42HHsH8QV9CT5hZMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw
NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY
QWp6Yy14WVpBbTg4N2JMSDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQxB+ivqAntSiMpf8lu8qyCcP0eWZQIaLi7ySwUE9VQcSqiQGQL4/Nt+i8e0f
1kqLrzAX+TDDvJkoFbmyxwSghHTcmsCxFbUEMyrGt+Gocz6LMwla8JxRpZ2Ga6La
4n0rQOy5Abw6Zgy/IapQYMl7cc+3p2I64t6agitO3LJLr+Vzy788KRBXUtx/I8NV
n0Ah4CVpbmMhpqzmQuMpuJJ6bVV7qDgLwOTnU92TcOPBVyvH0aiV2JUYJzBx3kAE
X8vqI1WDhFS6/tU9yLSDnn09feO6BkNZ/o8tqi9t5ZPq0j2sM2ADv2xR4ukG+rkL
U/EQoCqmiFj19B+FZ0XZKKR/Qw==
-----END CERTIFICATE-----
Generated at Mon Mar 30 22:55:55 2026 by rpki-client