Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
File:                     QN1mK29ul7NNO3WoAH3lOI2SclM.mft (raw, json)
Hash identifier:          /R5oAdkdCsgbpOcP/axcJOTdb7P75I2L6SJ9M9r8QNk=
Subject key identifier:   CA:46:10:8E:C4:8E:0A:92:47:5A:55:30:D0:BB:3E:65:6D:80:E7:C4
Authority key identifier: 40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53
Certificate issuer:       /CN=A911CF44/serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
Certificate serial:       06DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
Manifest number:          06D5
Signing time:             Sat 28 Feb 2026 22:41:13 +0000
Manifest this update:     Sat 28 Feb 2026 22:41:13 +0000
Manifest next update:     Sat 07 Mar 2026 22:41:13 +0000
Files and hashes:         1: QN1mK29ul7NNO3WoAH3lOI2SclM.crl (hash: 83aLkQ5nsa9zKXdetISxgnCoUD5fsqho/nuhB97n3qY=)
                          2: 85613B4E8C8411EBB68DD829C4F9AE02.roa (hash: JUDELwHgPtKuVC+Zxi+8ziVhRWeVBos3PiAym1dLOsg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl
                          rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CF44, serialNumber=40DD662B6F6E97B34D3B75A8007DE5388D927253
        Validity
            Not Before: Feb 28 22:41:13 2026 GMT
            Not After : Mar  7 22:41:13 2026 GMT
        Subject: CN=69a36f09-3e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:3c:15:18:d7:06:86:16:23:52:87:59:98:
                    0e:6b:44:7b:59:aa:e6:3d:54:de:e0:74:e4:8c:ea:
                    d1:10:00:8d:e0:20:68:ab:81:e0:86:0e:e4:43:3e:
                    c4:15:09:10:11:76:50:ee:27:74:4c:94:ca:1c:a0:
                    01:9a:16:db:5b:67:34:f4:8e:2b:2d:e5:30:f1:af:
                    36:83:10:f1:9d:21:7f:76:87:0a:7a:b1:fc:87:d4:
                    b5:a1:3f:4b:a9:2e:e3:6d:f6:be:0d:14:4e:cb:39:
                    fb:63:2c:1f:b4:aa:5b:20:30:a6:ae:4a:60:ab:26:
                    95:bb:98:53:37:dd:d8:71:fa:93:1d:bf:94:da:b5:
                    6d:57:ac:2e:33:57:05:e0:7e:a5:28:34:f1:88:b9:
                    49:f0:15:64:9c:39:fe:43:09:2a:09:8a:47:72:4b:
                    91:f1:57:f1:44:cb:db:05:d6:7e:8b:5e:6e:37:48:
                    a6:3c:86:56:87:12:3e:ac:10:11:aa:5f:94:6a:24:
                    db:7a:dc:06:a8:c8:49:84:55:f4:c8:12:53:5c:a7:
                    71:ac:24:df:b1:46:31:66:4d:ba:8e:b6:55:5d:bd:
                    0a:2a:5a:24:35:5a:7e:83:53:e8:6f:56:64:69:1c:
                    ce:54:9f:f0:96:61:87:86:e5:76:28:58:94:90:8b:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:46:10:8E:C4:8E:0A:92:47:5A:55:30:D0:BB:3E:65:6D:80:E7:C4
            X509v3 Authority Key Identifier:
                keyid:40:DD:66:2B:6F:6E:97:B3:4D:3B:75:A8:00:7D:E5:38:8D:92:72:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QN1mK29ul7NNO3WoAH3lOI2SclM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CF44/6677BEB68C8311EB849E6129C4F9AE02/QN1mK29ul7NNO3WoAH3lOI2SclM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:76:bb:ef:90:90:bf:1d:a8:29:6d:98:36:1a:a5:36:62:
         19:ff:5a:91:09:8b:bc:d8:bf:58:4e:24:40:7b:6d:f9:77:6e:
         fc:ec:c4:aa:26:12:85:e1:d7:54:95:9e:49:5f:2a:43:4e:06:
         fd:bd:a3:03:6e:2e:63:a4:ca:02:5c:4f:b4:e8:3b:0e:a7:5c:
         42:7e:97:ff:e6:c6:15:66:0c:c1:44:e8:90:4d:f1:76:bb:ff:
         70:75:5e:f9:4f:33:eb:44:4e:dc:b1:68:c6:2b:2e:e5:6f:2b:
         c6:ea:60:91:e2:ec:04:23:b2:f8:c0:32:02:aa:01:15:b3:71:
         ad:1a:a1:56:8f:d9:8d:e6:15:43:e8:03:e0:45:81:99:1c:82:
         05:e6:15:60:83:2f:0d:f5:b0:b9:23:fa:c0:1c:28:e8:bd:3c:
         1b:94:6a:7d:4d:5a:41:65:f2:59:e1:a4:92:2e:62:a7:ab:0e:
         7c:ef:bd:99:42:b4:af:c8:26:f7:71:ed:fe:7f:7a:60:a2:76:
         ac:d0:67:21:6c:6d:15:1e:5e:e1:df:da:96:7d:15:04:2d:af:
         f2:4c:37:a9:5c:6c:45:b9:c4:19:3c:49:35:b9:07:9e:6d:57:
         10:3c:97:b7:37:9b:86:15:ef:80:13:7d:b3:07:da:1f:34:a5:
         06:f6:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:39 2026 by rpki-client