Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
File:                     QF5asHUAe6PYUmLWiyUZhsbp3V0.mft (raw, json)
Hash identifier:          vbL20HJPBxwQ14mIsLCVa+BkV4DKEfRh7RHvdKJoCPY=
Subject key identifier:   C1:4D:4A:66:67:60:93:36:C5:97:81:B6:0B:8A:D0:C1:55:4D:9A:67
Authority key identifier: 40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D
Certificate issuer:       /CN=A9134639/serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
Manifest number:          32
Signing time:             Sun 01 Mar 2026 10:09:36 +0000
Manifest this update:     Sun 01 Mar 2026 10:09:36 +0000
Manifest next update:     Sun 08 Mar 2026 10:09:36 +0000
Files and hashes:         1: QF5asHUAe6PYUmLWiyUZhsbp3V0.crl (hash: 8Wm1Hmt7NNR9Dumgx+WKuE8j6FvtQcaXthLbUE9jvag=)
                          2: E7C4738EF69011F0944A82D5396F56BC.roa (hash: tF/131xYyHzc8gJFmhoa0rwUFdP5Jq9YjbacChX+Fa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl
                          rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134639, serialNumber=405E5AB075007BA3D85262D68B251986C6E9DD5D
        Validity
            Not Before: Mar  1 10:09:36 2026 GMT
            Not After : Mar  8 10:09:36 2026 GMT
        Subject: CN=69a41060-27fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:47:f3:7e:c8:36:d6:8a:fd:ef:80:cc:73:
                    ce:5c:d7:18:6f:74:1c:bb:6e:b6:f1:77:76:93:64:
                    6b:0e:f7:dc:dd:35:cc:34:37:41:47:ca:92:81:34:
                    d5:8e:a4:a5:cb:0c:66:72:ba:80:fb:a4:f4:91:ac:
                    43:cd:7a:4d:bf:47:ed:d1:80:14:6c:08:be:76:22:
                    5a:21:a9:db:62:50:75:fc:69:64:e0:12:ff:02:fb:
                    f7:d8:c7:d1:52:64:37:ba:a9:5a:03:72:92:73:fa:
                    8a:24:00:04:72:bd:5d:b2:c1:92:e8:6d:22:75:97:
                    db:08:a6:37:a0:45:51:82:b0:bd:c1:1f:16:ec:95:
                    ad:81:82:fa:f8:60:f3:b5:89:11:a6:dc:15:1c:1a:
                    e6:e7:51:e2:32:03:13:66:77:30:a3:62:39:8b:4d:
                    eb:cc:66:57:7c:c2:a0:3e:42:5f:26:8e:89:58:c0:
                    20:91:35:c5:9c:43:80:30:72:67:31:1f:4f:e3:6e:
                    45:17:12:df:ca:ba:1e:a0:a2:31:c2:a4:48:8f:f0:
                    3e:14:5d:d6:5f:a8:5d:13:2f:97:0e:5e:aa:bc:1a:
                    5c:9f:69:8d:80:0f:38:f2:76:da:05:0f:ad:5f:a7:
                    3d:ff:fd:32:52:e9:3b:90:1b:5a:54:8a:ea:84:37:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4D:4A:66:67:60:93:36:C5:97:81:B6:0B:8A:D0:C1:55:4D:9A:67
            X509v3 Authority Key Identifier:
                keyid:40:5E:5A:B0:75:00:7B:A3:D8:52:62:D6:8B:25:19:86:C6:E9:DD:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QF5asHUAe6PYUmLWiyUZhsbp3V0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134639/2BA23C8CD5BF11F08DBC7C31C4F9AE02/QF5asHUAe6PYUmLWiyUZhsbp3V0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:0e:d2:55:1a:e2:84:90:c1:5f:d9:90:48:a2:8b:69:aa:
         5e:e4:73:81:c1:40:70:f4:a2:a7:d7:be:61:01:1d:69:71:d6:
         c5:83:0d:18:05:e6:fe:83:a5:53:c3:52:bf:e4:d5:5a:6f:c0:
         80:cb:35:4c:b2:f0:35:53:a9:23:06:96:7b:e7:60:73:ba:72:
         82:54:e1:3d:51:bd:11:03:ca:6a:a7:11:4b:2e:53:b0:1a:ba:
         74:f6:42:d9:57:97:c9:bd:95:77:32:c7:1f:73:dc:17:f8:99:
         8a:cf:b4:c4:31:61:24:6f:ae:2c:cd:1e:d6:a2:81:b3:87:02:
         c2:f9:d8:ac:c1:70:0f:ee:36:ff:15:17:75:77:e5:f4:c4:1a:
         d6:77:aa:4a:92:b7:65:70:41:74:2d:b3:cb:13:cf:39:79:dd:
         7d:d4:bf:f1:3c:bb:31:e7:b2:ca:4a:35:08:c9:d7:03:5b:d6:
         c9:05:4a:36:64:da:bc:8f:2c:99:f8:a9:5d:8a:dd:7c:a2:7c:
         1b:d9:45:2a:5a:10:6a:93:64:5e:f1:b4:18:09:e5:3c:d1:c3:
         76:34:55:c6:84:83:57:e7:36:b1:58:a7:6d:49:de:f7:a2:46:
         c6:b6:2a:c5:3b:53:5e:8e:5b:60:4c:4b:78:dc:ae:1b:46:21:
         eb:37:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:27 2026 by rpki-client