Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
File:                     QG4t-6oOoAfdxmmT8sezCNoKGlc.mft (raw, json)
Hash identifier:          CtpHyqVsWgftXVuBWkNs4n4mQ0BDzQslK0VLbHiQF1k=
Subject key identifier:   79:05:16:7A:FE:2C:E7:8C:51:ED:C1:36:CF:57:3A:8E:7E:62:19:8B
Authority key identifier: 40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57
Certificate issuer:       /CN=A91315C1/serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
Certificate serial:       0C63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
Manifest number:          0C59
Signing time:             Mon 02 Mar 2026 01:41:20 +0000
Manifest this update:     Mon 02 Mar 2026 01:41:18 +0000
Manifest next update:     Mon 09 Mar 2026 01:41:18 +0000
Files and hashes:         1: QG4t-6oOoAfdxmmT8sezCNoKGlc.crl (hash: R0Y7HjqK8pphs4vjp+FnZHTv/KmpQUYVrv64dlZFX/0=)
                          2: 9D6DB59E1C5211EA8C6AAE37C4F9AE02.roa (hash: QXJTF3gmhRVuHKyE6dyB12JyGZ8t4LbfInOa4El4Hps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl
                          rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91315C1, serialNumber=406E2DFBAA0EA007DDC66993F2C7B308DA0A1A57
        Validity
            Not Before: Mar  2 01:41:18 2026 GMT
            Not After : Mar  9 01:41:18 2026 GMT
        Subject: CN=69a4eabf-5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:f5:fb:5a:25:b4:0f:0a:89:62:db:85:e4:
                    82:55:0a:d1:b4:85:39:0b:36:44:f4:2f:ba:5a:38:
                    b4:2a:3c:66:3c:b2:9a:7e:d2:ce:8a:ca:80:3e:c3:
                    63:22:ab:fa:cd:c9:d6:b0:2c:e2:61:63:aa:da:9c:
                    57:7f:6f:c9:6a:41:14:af:ad:bd:34:3d:67:68:01:
                    53:fe:e9:d0:dc:81:54:83:3c:26:02:6c:03:b3:d4:
                    db:56:b4:04:0b:87:3f:4f:2f:72:54:dc:b6:cd:66:
                    4d:31:76:28:f0:af:65:c9:48:b1:55:95:bb:8f:b9:
                    df:ec:39:74:14:b4:68:b7:15:30:58:b8:4d:4c:fe:
                    65:3d:ed:27:ca:17:e1:ed:ae:72:08:8e:45:00:a3:
                    d7:a4:e0:17:76:1b:e8:b0:ec:4d:08:b7:81:68:da:
                    0e:ae:0c:dc:66:2c:ef:e1:5e:10:ce:a3:be:a5:88:
                    cd:fc:41:92:40:df:9b:53:21:02:96:06:76:aa:d5:
                    ff:d8:0d:22:0e:d7:f9:d4:41:27:42:3b:34:05:09:
                    66:72:27:cb:44:42:4d:69:5e:f5:5f:6c:0a:06:81:
                    55:20:f6:8f:a7:e8:45:24:0f:23:13:32:74:5c:a8:
                    2e:ba:5e:8c:ff:5a:f2:c0:6d:98:90:0f:c7:d7:8b:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:16:7A:FE:2C:E7:8C:51:ED:C1:36:CF:57:3A:8E:7E:62:19:8B
            X509v3 Authority Key Identifier:
                keyid:40:6E:2D:FB:AA:0E:A0:07:DD:C6:69:93:F2:C7:B3:08:DA:0A:1A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QG4t-6oOoAfdxmmT8sezCNoKGlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91315C1/3009A8AA1C5211EA84D19937C4F9AE02/QG4t-6oOoAfdxmmT8sezCNoKGlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:47:98:f2:0e:f3:54:42:9e:94:e4:4e:29:ff:b5:f7:f4:76:
         d6:55:d5:d4:b0:2f:06:b6:80:30:07:f9:f4:73:6d:7d:a0:fc:
         f9:fe:e4:60:e9:e7:60:a1:19:a3:c7:2d:1c:89:c3:7f:11:56:
         97:8d:fb:55:b3:9f:14:a8:3c:d9:74:f5:7c:95:3c:8c:49:c9:
         f7:db:75:b9:8d:20:d6:b1:41:64:26:28:e5:93:ef:fb:43:3f:
         2c:94:df:cc:3f:08:4b:19:10:30:af:7b:1c:16:85:06:39:29:
         8a:83:e3:8d:2f:df:73:b6:1a:12:bc:35:22:bd:00:2c:72:f5:
         5d:aa:83:2f:7d:65:97:a8:28:93:f7:ae:37:65:eb:8d:28:50:
         68:80:94:bd:f1:42:64:3c:e2:ea:96:3c:ee:20:e1:d9:37:8b:
         3e:0c:0f:7b:ce:fe:0b:33:82:a9:7e:91:d8:b3:e5:11:5c:11:
         c9:ef:ca:3c:34:98:c0:50:bf:5f:f9:76:d6:b8:01:bf:15:2c:
         c9:f5:ca:fc:ff:74:43:e6:41:a7:81:53:26:d5:f4:54:a8:7b:
         5a:9f:4c:a9:49:ba:09:d1:66:f5:d8:62:e7:63:c8:5d:8c:09:
         83:52:f0:3e:8f:4f:76:ea:3f:17:a9:e2:c1:4e:80:91:17:85:
         e2:2f:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:43 2026 by rpki-client