Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
File:                     qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft (raw, json)
Hash identifier:          yqPjj/XlcjwYdgdUjfHHvVg9ZrqKpcvjAJ4xmKkFP2g=
Subject key identifier:   DD:94:E5:E3:DC:22:36:D2:46:29:F0:6F:18:F1:2F:53:1B:D9:E7:7B
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Certificate issuer:       /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
Manifest number:          55
Signing time:             Sun 01 Mar 2026 09:33:21 +0000
Manifest this update:     Sun 01 Mar 2026 09:33:21 +0000
Manifest next update:     Sun 08 Mar 2026 09:33:21 +0000
Files and hashes:         1: qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl (hash: rOLL2oT+RG+uvWrcCgDnYfWn4jDeG5THmme1C411+yc=)
                          2: E811884091F511F0AF44B33CC4F9AE02.roa (hash: B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
        Validity
            Not Before: Mar  1 09:33:21 2026 GMT
            Not After : Mar  8 09:33:21 2026 GMT
        Subject: CN=69a407e1-6cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:fd:2b:6f:28:31:f1:2e:27:ac:19:78:23:
                    8e:04:ed:7a:4c:cc:b8:9c:94:ef:bf:13:21:44:9b:
                    f7:87:b0:a2:e5:b5:1c:71:f2:79:48:10:c7:ab:cd:
                    6f:68:f3:da:29:22:f9:e6:6f:d6:20:60:b6:5a:38:
                    bc:8b:48:04:03:51:ae:9b:97:16:09:58:ad:4e:a7:
                    98:16:59:f8:15:ee:07:6a:85:ec:36:d7:cb:e9:f9:
                    5e:82:cd:3e:c1:f7:6d:dd:26:4f:79:17:82:8f:e8:
                    23:4a:b2:03:2c:fa:d7:1a:05:10:9b:e8:58:ad:b6:
                    f6:0b:38:36:1a:a6:c2:f5:fb:68:38:49:82:d9:36:
                    4f:63:43:66:81:78:bd:68:fc:6a:9e:4e:60:71:8a:
                    e1:ea:c7:fb:7b:52:b5:6f:f7:d8:6d:9a:0b:ae:1b:
                    35:dc:12:1e:10:45:18:7c:c9:e4:f1:10:92:61:cc:
                    cf:16:a2:f8:80:5b:fe:33:b4:71:b8:f4:af:ca:ae:
                    07:b9:38:cb:be:e9:b7:a4:9c:67:a1:04:04:d5:f7:
                    a6:bc:11:36:fa:45:e5:70:65:99:33:cc:b0:74:1e:
                    93:97:e4:b6:20:ec:36:39:fd:06:20:b9:58:e2:b9:
                    a2:6a:09:2d:4c:97:27:f3:b4:cf:8d:77:b9:18:48:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:E5:E3:DC:22:36:D2:46:29:F0:6F:18:F1:2F:53:1B:D9:E7:7B
            X509v3 Authority Key Identifier:
                keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:18:f4:5a:59:1e:d0:af:8f:47:e5:41:cf:a1:09:9e:f4:5b:
         2d:b3:ec:0a:b1:a6:82:b6:0d:61:3e:38:a5:28:13:ed:00:a0:
         51:b2:21:65:03:53:f2:2f:a9:71:ae:e8:f6:fa:07:61:dc:92:
         d8:34:f9:db:d1:65:b1:df:2f:52:dd:a2:e3:05:36:a9:3f:68:
         f3:02:1e:b3:63:9f:75:ef:94:68:d3:a8:d6:68:d1:9f:d0:f0:
         6b:37:ef:a8:9e:b7:7b:83:2c:d4:e9:ab:bd:ef:c9:b2:6a:99:
         52:1b:f9:b4:75:74:25:ac:40:bd:64:7c:a6:5b:8f:b1:23:58:
         cb:4d:a2:af:a3:30:d6:cf:e4:2c:5f:6b:df:f1:c1:af:1b:f2:
         62:38:94:d9:84:c9:89:50:3f:91:51:8e:7f:35:b4:66:a1:a9:
         df:e3:a7:77:14:3a:bf:0f:c2:6f:c3:c2:32:da:b2:e6:26:35:
         29:b8:61:ad:73:2f:4f:26:06:e8:04:74:04:52:6d:63:62:f0:
         0f:7f:ca:ea:ef:3a:57:c6:dd:fa:91:99:72:31:c1:08:eb:d0:
         42:77:47:c8:85:c7:da:b3:ab:be:70:09:aa:80:7e:eb:db:ab:
         7d:e0:66:ca:6b:32:5f:bc:62:86:1c:ff:00:f7:da:27:01:9c:
         e7:7f:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:02 2026 by rpki-client