Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File:                     qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier:          o0W7fNQpgAR5agEOAn3J1T1iBp1scWiDSEoQIqEebpA=
Subject key identifier:   AA:FD:82:16:29:90:55:A8:56:64:4C:FA:0B:8D:D3:1F:4A:16:B5:D2
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer:       /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number:          014E
Signing time:             Tue 03 Mar 2026 04:45:51 +0000
Manifest this update:     Tue 03 Mar 2026 04:45:50 +0000
Manifest next update:     Tue 10 Mar 2026 04:45:50 +0000
Files and hashes:         1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: RxkmvVoO9fcmI/6E6mV9l1foJ+YTZT41lZBM92Y/Dpk=)
                          2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: 3Wk8dYppZ9PYDGlWy8Aq6MWTQPzxpyguIWGe4yXyIMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
        Validity
            Not Before: Mar  3 04:45:50 2026 GMT
            Not After : Mar 10 04:45:50 2026 GMT
        Subject: CN=69a6677f-7577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:a5:7c:05:c9:ba:9a:b4:ce:b5:0c:de:3c:
                    2b:47:99:01:f1:32:2f:d5:3a:59:7e:7f:37:ce:34:
                    93:25:c0:d5:b6:79:d0:03:24:55:f8:20:ec:f4:c5:
                    8a:3e:9b:db:5d:b3:e9:65:81:68:b4:32:31:c6:9c:
                    62:37:cb:f0:93:7b:72:2c:f6:fe:e3:be:9d:09:2a:
                    c1:64:7b:6f:67:c7:13:13:da:88:39:3b:fa:d7:9d:
                    aa:12:c9:e1:10:c0:57:63:8c:b3:a4:77:a5:84:66:
                    32:b3:88:c8:72:14:b7:1f:e8:63:fb:af:1c:04:d5:
                    d8:9f:ff:fe:00:b9:76:85:76:c7:ff:1b:15:bf:40:
                    bf:78:36:b3:3a:66:93:b1:e1:14:b1:39:60:ab:ac:
                    51:01:8c:8e:8e:95:b5:d1:56:47:bd:03:fd:eb:61:
                    9a:a3:46:0d:c1:6d:9c:b9:25:4b:3c:29:6d:cc:d2:
                    72:4a:3e:f5:f8:6a:cf:f0:3d:bc:4b:bc:fc:de:ca:
                    67:f1:60:97:63:0a:1f:22:59:72:96:8a:b4:17:4b:
                    4d:2d:33:ca:1d:4e:93:7c:a9:17:61:2c:65:ee:30:
                    26:2b:3e:5d:f1:20:94:a2:4f:23:2c:a4:a7:00:71:
                    c3:2c:9a:f8:27:76:1b:d7:34:01:62:fe:15:76:71:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FD:82:16:29:90:55:A8:56:64:4C:FA:0B:8D:D3:1F:4A:16:B5:D2
            X509v3 Authority Key Identifier:
                keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:79:d9:b5:9b:0b:85:17:4d:ac:15:66:63:0d:28:5e:fd:77:
         3f:44:0b:d0:49:60:ae:ef:a5:ed:a0:c1:99:6e:9f:64:e9:4c:
         21:e8:7c:ec:d7:3c:6b:cc:32:ab:23:45:e7:60:1b:99:30:24:
         d8:f4:1c:a5:9a:67:2b:6b:99:a2:cd:a0:b6:69:e7:53:7d:02:
         a0:9d:27:09:79:eb:85:56:f9:60:23:73:37:e8:c6:bc:e4:86:
         81:89:66:80:70:81:47:e9:71:5d:59:62:70:aa:04:d1:03:75:
         b1:61:7a:14:45:5b:ad:69:29:26:0c:e8:ae:d6:b1:46:8f:3c:
         98:26:b4:2c:80:06:36:8a:20:1a:bd:46:6f:af:4e:d8:db:69:
         e5:a3:95:bc:c2:c8:7a:bd:1c:39:aa:2e:23:ce:d7:14:14:9e:
         8e:67:4c:c4:44:b9:52:ec:d5:2c:2c:d4:03:e1:a4:1f:78:dd:
         30:27:c9:48:20:8b:a4:6d:f3:ec:3b:8f:dd:5a:40:1d:6a:e3:
         da:d6:88:f0:cf:90:f6:78:b3:fb:f7:6a:1a:90:ce:4f:f3:11:
         13:d5:d6:d2:4e:14:65:63:98:4d:ba:e0:40:5a:8d:04:8d:69:
         60:ed:26:fa:ad:77:17:dc:66:37:4b:ea:ad:17:8f:93:a4:a7:
         07:3b:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:40:37 2026 by rpki-client