Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          8WwkGvwQe1g31yKHOmqg8+eV2i+kErdkJgeKF1v3oI4=
Subject key identifier:   D0:8F:00:5E:DB:EC:1F:CA:BA:06:08:C5:42:99:11:0F:A7:14:0D:17
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       3511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          3511
Signing time:             Sat 28 Feb 2026 15:14:02 +0000
Manifest this update:     Sat 28 Feb 2026 15:14:01 +0000
Manifest next update:     Sat 07 Mar 2026 15:14:01 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: tTdapEqBTG15hAR2tAgi5YRAcSs9oGoqd2QlOGetNzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13585 (0x3511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: Feb 28 15:14:01 2026 GMT
            Not After : Mar  7 15:14:01 2026 GMT
        Subject: CN=69a30639-57cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:40:bb:12:f4:21:15:3b:9d:66:59:38:75:
                    9b:54:94:eb:26:11:8a:87:f0:34:e5:47:c9:17:b0:
                    5d:17:a5:a3:03:9c:b3:ec:62:95:94:d8:b5:30:b8:
                    3b:17:8f:45:e9:11:b3:8a:85:64:68:3e:3b:9f:40:
                    d9:00:48:ea:9b:c3:4d:b5:60:84:e5:89:53:51:cf:
                    03:25:33:0e:1b:ca:51:8a:75:fe:7d:a0:73:cf:e4:
                    e1:3d:20:6a:cd:fd:9d:23:ab:82:25:e3:7d:76:4d:
                    e7:5c:48:ba:0d:84:0b:70:06:83:17:bc:ef:7a:f4:
                    4d:ba:64:98:c9:2a:6d:a0:36:b1:46:d9:95:6a:56:
                    dd:29:8f:27:67:fe:17:6d:c1:14:b6:e4:0c:76:e1:
                    be:e0:0a:1f:df:5e:34:73:b0:87:7a:9b:e5:08:04:
                    23:b0:3b:b2:7c:a1:40:70:10:54:ac:de:20:41:50:
                    0c:91:60:a4:3e:3d:c5:17:9b:d5:1a:7d:49:e7:1b:
                    9e:f6:ad:23:65:33:e2:35:56:6d:90:7c:17:42:35:
                    a4:72:c2:9c:0b:f4:ae:37:9c:8f:4e:26:a4:64:b0:
                    96:2e:f1:af:6c:4f:36:88:52:91:6b:b4:d9:c9:dd:
                    65:90:38:8a:a0:7c:90:3b:a8:a0:c1:b5:83:86:02:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8F:00:5E:DB:EC:1F:CA:BA:06:08:C5:42:99:11:0F:A7:14:0D:17
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bb:6b:ef:44:2a:84:6f:bf:a5:45:87:79:86:3a:10:b7:da:
         a9:64:54:d4:d5:fe:97:b6:35:61:10:da:ee:99:ca:38:0b:5b:
         4e:8d:51:aa:d4:3c:2e:bc:82:34:b6:ab:4f:24:47:78:30:b5:
         43:4a:f0:f7:02:5f:b5:b4:4e:0e:43:a6:29:2b:1e:b0:c4:d4:
         19:1c:5e:4e:5e:2f:4d:ef:24:85:70:f6:d9:61:9f:7f:ce:46:
         2b:96:02:81:87:3e:cf:f3:22:14:60:77:b8:a5:7c:f0:66:b6:
         fa:86:b6:1e:a4:9a:bb:d0:40:5e:90:62:24:ff:57:b2:c8:2d:
         d0:f8:99:9c:5a:bc:e2:a3:8a:83:ea:77:b9:16:fb:84:5f:06:
         69:43:8e:60:8e:fa:d8:8b:93:7c:e5:e3:4b:d7:7a:26:14:6d:
         29:a7:8f:57:fc:0b:2c:c4:f7:b0:fa:77:ab:7f:ba:9f:9f:a1:
         0c:e8:b6:bb:f6:84:38:c1:87:01:8d:2a:5e:24:7c:2a:64:70:
         32:b7:3f:58:2d:be:90:86:50:9d:02:60:47:fe:c4:68:ed:12:
         80:ab:df:64:45:01:8b:b5:46:1b:5e:97:9e:ff:44:da:ff:a0:
         0d:b4:18:84:1a:49:3e:75:f6:8b:9c:80:60:08:4e:5c:70:ea:
         4a:dc:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:58 2026 by rpki-client