Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
File:                     q34sraVZrlbMJaH2mPiFCTmIifk.mft (raw, json)
Hash identifier:          lCp0urZDMhd9HdKvulvSvGC5qdCVfH8FLvuigUeI6d0=
Subject key identifier:   75:9F:01:AB:EA:C9:83:B8:47:AE:06:31:E4:2E:CF:75:D7:62:D2:54
Authority key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
Certificate issuer:       /CN=A91C3DEA/serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
Manifest number:          17
Signing time:             Tue 03 Mar 2026 08:40:22 +0000
Manifest this update:     Tue 03 Mar 2026 08:40:22 +0000
Manifest next update:     Tue 10 Mar 2026 08:40:22 +0000
Files and hashes:         1: q34sraVZrlbMJaH2mPiFCTmIifk.crl (hash: ZeqhgOXCdMmK7e9nhYtv6RKAYzWDDE56t37V6E91Vko=)
                          2: 18FB6A08FC9E11F09F0AC8105E6F56BC.roa (hash: +t1U6IIjEcIREP8ILzimtngggq+V6zIVth7nVFeYBis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
        Validity
            Not Before: Mar  3 08:40:22 2026 GMT
            Not After : Mar 10 08:40:22 2026 GMT
        Subject: CN=69a69e76-b046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:fb:bc:bb:f4:31:a4:0d:4f:51:20:dd:a9:
                    4d:97:7b:b2:ef:ae:c5:41:aa:a0:b8:58:31:31:a4:
                    df:52:b8:f1:06:43:20:4d:62:c9:21:e3:ed:b4:7e:
                    ef:56:6f:c1:2b:8c:69:b0:ce:de:85:02:ab:a9:c3:
                    e6:b3:a6:0e:6c:50:60:9b:71:68:6c:83:4e:59:a5:
                    63:a3:3c:a3:51:c7:c0:56:6f:37:cc:92:16:a7:b8:
                    14:84:f4:d9:bf:7c:b9:82:f9:b4:a1:ab:05:8c:a2:
                    94:83:0f:77:d3:92:a2:b9:57:a7:36:bf:73:44:b0:
                    5d:4e:1d:5b:63:2d:3a:8f:0a:28:a8:35:3a:0d:aa:
                    da:d6:38:3e:65:c1:30:7f:fd:6b:a9:47:f0:fa:47:
                    ee:1d:3b:2a:6e:93:fe:06:b6:89:12:11:a7:75:b0:
                    d3:bd:85:76:fd:39:48:97:42:0a:10:bf:bc:11:53:
                    c6:c8:f4:2f:7d:f9:33:f8:0b:31:a9:fb:aa:6a:eb:
                    e9:d8:18:36:dd:34:72:89:11:d1:44:20:b2:02:f4:
                    9f:e6:03:74:5a:ff:05:c8:42:78:74:02:70:2a:83:
                    b2:37:3e:db:4b:3e:61:20:f3:ac:12:a8:88:8a:d3:
                    6a:9f:01:6e:b5:ce:cf:e0:3c:ae:1b:b1:77:0c:38:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9F:01:AB:EA:C9:83:B8:47:AE:06:31:E4:2E:CF:75:D7:62:D2:54
            X509v3 Authority Key Identifier:
                keyid:AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:06:4f:51:af:44:84:15:a4:e6:b8:15:e6:83:d9:6d:7b:
         31:3e:bb:2f:27:b4:c5:ba:fa:1b:83:0b:31:bb:22:d4:02:29:
         c2:12:96:8d:1b:c4:9a:9f:2b:52:9c:bc:fc:57:00:b7:f6:9c:
         04:75:c8:b8:b7:51:66:38:a8:ca:fb:da:88:ab:5a:21:34:a1:
         a4:bb:cc:15:8d:43:a4:1c:60:25:df:cc:c0:5c:93:c2:68:b5:
         af:a6:3f:b1:65:37:74:59:51:0f:47:fe:7d:7e:7d:02:0e:da:
         28:05:f9:db:11:10:5b:20:44:01:ed:f8:3e:25:43:c5:d2:36:
         60:90:e5:ca:1a:80:14:9f:db:bf:4e:95:42:bc:b2:3a:50:ca:
         a8:2e:8e:e1:e5:7f:24:bb:21:63:fb:8e:06:00:7a:99:e6:5f:
         ec:96:89:d2:e8:c5:83:cf:1b:57:f7:16:78:1e:27:0f:c3:51:
         a2:6c:cb:de:a9:96:6d:b3:24:60:7c:12:36:2c:8f:9e:0d:3b:
         bc:a9:43:c5:22:21:d5:02:fc:af:f2:eb:d1:61:d1:80:3f:e5:
         53:16:b8:e5:c8:fe:3f:bf:38:e7:25:e9:83:33:7d:68:c4:28:
         9f:d8:3e:c0:08:92:75:50:b2:9d:77:e1:27:db:a2:63:49:e6:
         5c:9e:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:15:33 2026 by rpki-client