Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
File:                     Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft (raw, json)
Hash identifier:          aeH3o13bqIUO6UJxd3ko+w+mFR16aydVvWReinvt+Mg=
Subject key identifier:   32:C9:77:DC:56:73:9D:C5:97:55:45:07:8F:34:3B:70:9F:FC:00:A2
Authority key identifier: 42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0
Certificate issuer:       /CN=A9113B62/serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
Manifest number:          DF
Signing time:             Sun 01 Mar 2026 22:59:10 +0000
Manifest this update:     Sun 01 Mar 2026 22:59:09 +0000
Manifest next update:     Sun 08 Mar 2026 22:59:09 +0000
Files and hashes:         1: Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl (hash: 7U8E1zD/puWljV3OpkowHHdtRnY1E7/hnOsngG+/580=)
                          2: 01238706C86211EFBDCCC22AC4F9AE02.roa (hash: 8tYgQgRp4d2ZPoYvXeSoALvp6R7P/24619a0Wb2QQ3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl
                          rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113B62, serialNumber=42FEF331741A54D5A0AE7553108D4D2D32B057B0
        Validity
            Not Before: Mar  1 22:59:09 2026 GMT
            Not After : Mar  8 22:59:09 2026 GMT
        Subject: CN=69a4c4be-a208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:9a:92:c6:ca:86:c4:b2:5c:af:ca:f8:8c:
                    de:71:6c:97:89:79:ce:32:5e:8d:13:19:b6:17:3b:
                    75:89:27:45:d2:b1:19:4e:62:89:77:30:7c:c5:91:
                    34:8c:4d:a3:15:1e:44:6f:b8:18:f8:06:bc:60:9d:
                    b7:0d:58:a3:54:c4:89:0b:57:27:0a:68:10:03:70:
                    16:0b:a4:9c:a8:08:8e:f8:55:23:8c:d4:93:34:50:
                    fc:18:f5:b0:11:e3:27:6d:61:9c:76:af:1d:62:b8:
                    b9:0c:59:b2:3c:fd:79:3f:d4:92:19:ed:d5:a4:18:
                    a7:e0:5b:9a:f1:39:22:bb:e8:f4:4e:35:13:72:5f:
                    f0:c2:01:4f:e2:36:2b:4e:7a:b9:96:1d:b7:1e:be:
                    a9:c1:02:c0:73:ba:13:87:d1:d7:06:22:6f:57:74:
                    ab:9e:e4:9a:4e:9d:90:b9:57:a3:35:f7:d9:c9:f0:
                    b3:69:67:22:e6:b2:4c:51:82:b8:53:ab:ac:0b:3f:
                    c0:72:56:e3:db:f3:59:20:00:c4:e1:3d:5e:f8:12:
                    b3:31:5e:91:8e:df:01:a1:58:da:27:e9:f3:db:92:
                    cf:01:78:a0:00:b5:9f:6e:cc:a4:65:c3:be:61:6a:
                    49:58:37:35:11:64:16:c1:c5:01:1b:8e:d3:48:64:
                    17:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C9:77:DC:56:73:9D:C5:97:55:45:07:8F:34:3B:70:9F:FC:00:A2
            X509v3 Authority Key Identifier:
                keyid:42:FE:F3:31:74:1A:54:D5:A0:AE:75:53:10:8D:4D:2D:32:B0:57:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B62/26619D44C6E811EFBB520B0DC4F9AE02/Qv7zMXQaVNWgrnVTEI1NLTKwV7A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2d:ea:e7:3f:b3:93:99:3e:41:46:0a:78:b3:f8:17:18:d3:
         3a:c8:a4:f6:2f:3c:63:31:e0:db:dc:ab:d5:eb:1a:10:6b:36:
         71:72:e5:f9:c5:c6:6c:73:96:1b:da:96:ec:7b:27:99:2c:b6:
         69:c7:49:6d:cb:ab:a4:ee:97:0c:e4:27:e7:a8:ce:4d:8f:66:
         f8:cd:ba:f9:72:de:ba:37:c1:45:08:26:56:3a:2a:cf:bb:c6:
         a8:33:8d:d3:81:ce:35:f8:63:3f:dd:2a:57:f1:2d:98:21:18:
         1c:e1:e8:34:88:36:62:24:49:a7:52:43:81:28:e8:2e:6f:3a:
         86:e6:64:ee:24:30:52:d8:ce:14:a0:b1:e8:d8:62:59:93:09:
         10:24:1e:95:d7:39:33:d2:b8:83:21:80:9d:d3:36:01:3e:25:
         7a:47:82:ef:3d:3c:91:6e:d8:df:eb:a6:42:54:35:dc:e2:f3:
         de:9d:13:eb:48:06:48:21:af:47:75:38:8e:a0:6f:fb:61:3b:
         06:ca:df:5c:d8:22:f2:83:e4:03:39:0d:ab:3b:42:85:38:3d:
         9c:7d:9c:21:9b:f2:e9:54:28:d3:a2:69:22:e2:b7:ca:18:05:
         03:d9:3a:f4:88:b8:5c:7a:ec:ae:bf:0a:ee:51:22:50:38:25:
         8c:2f:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:52 2026 by rpki-client