Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
File:                     qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json)
Hash identifier:          sATuJRo71rs5cM6MhJZHCtlbFsHGRX0FQvhQe3/13Io=
Subject key identifier:   A3:AC:6A:D5:8E:35:24:11:86:DE:A2:CF:C6:C7:65:9A:5A:E4:A3:9D
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Certificate issuer:       /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
Manifest number:          80
Signing time:             Fri 13 Mar 2026 06:41:34 +0000
Manifest this update:     Fri 13 Mar 2026 06:41:33 +0000
Manifest next update:     Fri 20 Mar 2026 06:41:33 +0000
Files and hashes:         1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: Cmg0Qd9AYCFl0tsKMOcTJPK9VMjedig3JkE1FkDlkSE=)
                          2: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=)
                          3: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=)
                          4: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
        Validity
            Not Before: Mar 13 06:41:33 2026 GMT
            Not After : Mar 20 06:41:33 2026 GMT
        Subject: CN=69b3b19e-8ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:76:40:34:a8:ec:c6:2b:a8:65:d8:99:85:
                    2c:13:45:60:86:a2:ba:5e:a0:d3:ad:29:96:4c:fb:
                    c6:1a:26:52:3a:bf:ec:72:95:a1:38:65:76:58:24:
                    58:5a:83:d7:83:33:5a:32:37:09:c6:89:46:ef:67:
                    b9:82:40:ef:93:38:8a:55:aa:d4:58:a0:9e:70:11:
                    c3:9d:08:9b:03:ef:56:b4:62:0a:0c:7c:e5:7e:d6:
                    3c:81:d7:8a:a6:f1:37:97:91:37:18:b2:f8:06:9b:
                    d7:6c:5d:c0:c4:ca:f8:f0:7d:9c:c4:b5:40:fa:b4:
                    27:cd:44:44:e9:fb:33:55:7a:29:43:09:ba:30:79:
                    2d:e9:11:da:28:35:8f:16:51:04:cb:ef:66:73:5e:
                    3a:5b:79:15:28:19:65:bb:44:8e:43:5e:0f:03:cd:
                    a5:2b:2d:64:49:73:77:13:61:55:35:71:a4:92:ce:
                    39:01:f3:b1:e6:4c:83:ba:d3:4b:9b:79:02:ac:2c:
                    90:87:e1:bb:a5:55:ef:66:49:62:0a:55:0d:ef:a5:
                    df:96:48:fd:b3:2e:5a:53:de:e4:a4:c4:76:e3:65:
                    61:a1:0e:6a:a4:2a:f8:17:96:00:c7:33:f0:da:fe:
                    8c:4d:34:f6:0d:a9:f9:cf:41:11:5c:12:11:5c:df:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:6A:D5:8E:35:24:11:86:DE:A2:CF:C6:C7:65:9A:5A:E4:A3:9D
            X509v3 Authority Key Identifier:
                keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:12:aa:fa:28:95:e4:e3:a1:b3:94:d1:db:d3:86:02:6a:50:
         de:38:83:6a:31:9e:93:cf:53:ce:89:3b:07:be:d7:bd:fb:1b:
         15:4b:6d:0d:7e:45:3a:ce:e1:a3:df:1d:ad:ec:1b:6e:17:9d:
         97:e4:68:76:c9:9f:6c:5e:37:cf:87:f0:58:bd:88:c0:91:33:
         38:ad:2d:e6:0b:65:9f:8a:46:f3:9f:d4:74:bc:60:4b:cc:11:
         32:cd:90:62:c6:15:4b:68:ff:47:aa:3a:96:f8:a6:60:ff:a8:
         d7:25:2d:b2:2f:10:9d:6b:87:bd:c9:92:eb:72:eb:64:18:9e:
         ab:54:33:da:89:d9:a6:2d:c6:0d:de:af:cf:f5:56:67:e1:6b:
         1a:98:1a:1b:f4:f8:fa:b3:20:e9:87:33:9c:7d:6e:33:9b:08:
         9e:b1:1b:cd:74:ae:58:05:4a:70:06:ae:4e:96:40:d2:b8:03:
         19:d4:10:48:00:3e:bd:9c:b8:fe:61:4e:bf:bb:bd:46:cd:8f:
         50:b5:63:e6:ca:77:25:8e:9a:5a:f7:01:bb:38:8c:92:86:3e:
         91:fa:c5:82:cd:7e:ca:c0:de:33:21:db:3a:aa:b0:f7:b2:62:
         bc:20:4c:11:41:7b:18:1c:8b:a3:fc:e8:f3:49:1a:3b:d6:f4:
         40:db:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:54:34 2026 by rpki-client