Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft
File:                     QRWv_nCd92SgzMk062huh7fv3zc.mft (raw, json)
Hash identifier:          GfvliAT3fqyUuqDczRYo2aE1cFLP+kd0rPdTbL2P1jU=
Subject key identifier:   0D:D8:DE:3C:B8:43:F4:BE:EF:FE:03:C5:D1:2C:3E:3F:98:22:82:E7
Authority key identifier: 41:15:AF:FE:70:9D:F7:64:A0:CC:C9:34:EB:68:6E:87:B7:EF:DF:37
Certificate issuer:       /CN=A914354F/serialNumber=4115AFFE709DF764A0CCC934EB686E87B7EFDF37
Certificate serial:       34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft
Manifest number:          34
Signing time:             Sun 01 Mar 2026 10:04:47 +0000
Manifest this update:     Sun 01 Mar 2026 10:04:47 +0000
Manifest next update:     Sun 08 Mar 2026 10:04:47 +0000
Files and hashes:         1: QRWv_nCd92SgzMk062huh7fv3zc.crl (hash: NwA5iBuZWcNwEBGy6MC8SO6qLQc4ONPu+PCMDG+SrcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.crl
                          rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914354F, serialNumber=4115AFFE709DF764A0CCC934EB686E87B7EFDF37
        Validity
            Not Before: Mar  1 10:04:47 2026 GMT
            Not After : Mar  8 10:04:47 2026 GMT
        Subject: CN=69a40f3f-eb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:64:5d:6e:3f:ef:27:13:1a:37:2b:02:a4:
                    5a:cd:72:10:2f:f2:d6:72:b1:2f:04:e3:ea:4d:82:
                    1f:bf:8b:26:ab:5f:c1:af:f8:e8:e8:74:c2:47:26:
                    0c:0a:ab:d3:f4:2c:7f:c5:cf:31:24:87:5d:c0:45:
                    ff:87:db:fd:2f:19:97:22:e6:ac:33:34:3f:7b:79:
                    4d:82:4c:d7:88:a0:e4:8a:f8:81:6e:54:7d:5c:76:
                    9b:09:95:17:f6:b2:9b:c2:58:59:42:30:cb:0c:6a:
                    63:31:b7:ad:2d:75:99:2c:81:77:72:96:49:59:b7:
                    f5:93:bb:e6:39:87:a5:16:5e:68:b8:78:4b:84:ed:
                    fd:7f:d3:3c:1f:1a:d1:a5:5d:07:ca:67:79:d8:08:
                    cf:f0:05:50:a2:6f:72:a9:d0:39:8a:44:55:17:77:
                    50:a5:6c:03:19:b2:9f:f3:12:ab:b2:c2:4b:c8:0f:
                    6f:e2:be:9a:c5:31:ab:74:3a:87:44:f9:00:ec:16:
                    98:98:98:c3:34:17:5e:fa:39:33:94:fb:7e:77:36:
                    27:db:da:f3:3a:5d:c8:ea:1a:55:ff:d0:33:b4:ae:
                    11:60:6b:7c:58:39:a8:cc:a7:3e:1f:ff:d5:64:ad:
                    bb:bd:7a:33:9c:9f:bd:b5:6b:dd:6a:86:fc:6d:ee:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D8:DE:3C:B8:43:F4:BE:EF:FE:03:C5:D1:2C:3E:3F:98:22:82:E7
            X509v3 Authority Key Identifier:
                keyid:41:15:AF:FE:70:9D:F7:64:A0:CC:C9:34:EB:68:6E:87:B7:EF:DF:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRWv_nCd92SgzMk062huh7fv3zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/766ECED4CC6311F0A6C1DF37C4F9AE02/QRWv_nCd92SgzMk062huh7fv3zc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:69:c7:31:39:48:66:91:e6:4f:1d:07:1e:aa:16:89:38:0c:
         66:a8:71:f2:9c:86:06:75:b2:6d:3e:09:80:d7:c7:85:26:b0:
         1a:4f:cf:49:41:9e:13:15:4f:1f:c9:84:00:bd:39:68:83:e8:
         f9:75:16:47:4f:5b:df:c6:5b:b4:ca:0d:b4:79:5b:71:e2:50:
         16:74:bc:a5:74:62:28:ad:87:15:42:13:df:2e:15:50:e8:50:
         ba:92:fe:34:32:f8:63:17:3b:c1:e6:66:22:3e:55:e5:99:30:
         ae:c5:d7:6b:06:cf:8c:4e:4c:3a:07:44:e4:2e:ed:d0:ae:c9:
         7c:08:fb:3b:1e:46:fa:2a:3f:fe:45:8e:74:2d:d6:89:ac:43:
         35:f0:7a:53:a9:01:c3:0a:54:c2:65:04:55:52:d1:e6:41:bb:
         b4:98:92:e2:52:c2:d5:59:6b:3a:e7:99:1e:00:40:2d:09:75:
         1c:15:87:1b:98:57:9e:3a:c0:21:29:34:86:b0:7e:db:dd:5f:
         c4:fe:cc:96:90:b8:fb:33:c4:33:aa:2b:a0:f4:35:87:1f:70:
         4e:de:bc:b2:2c:30:9d:da:0c:82:bd:71:80:09:54:3e:99:6d:
         2e:6b:4d:e6:ab:ce:17:1c:66:fa:8e:01:c9:28:11:b2:e5:88:
         9c:75:42:62
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MzU0RjExMC8GA1UEBRMoNDExNUFGRkU3MDlERjc2NEEwQ0NDOTM0RUI2ODZFODdC
N0VGREYzNzAeFw0yNjAzMDExMDA0NDdaFw0yNjAzMDgxMDA0NDdaMBgxFjAUBgNV
BAMTDTY5YTQwZjNmLWViN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCp1GRdbj/vJxMaNysCpFrNchAv8tZysS8E4+pNgh+/iyarX8Gv+OjodMJHJgwK
q9P0LH/FzzEkh13ARf+H2/0vGZci5qwzND97eU2CTNeIoOSK+IFuVH1cdpsJlRf2
spvCWFlCMMsMamMxt60tdZksgXdylklZt/WTu+Y5h6UWXmi4eEuE7f1/0zwfGtGl
XQfKZ3nYCM/wBVCib3Kp0DmKRFUXd1ClbAMZsp/zEquywkvID2/ivprFMat0OodE
+QDsFpiYmMM0F176OTOU+353Nifb2vM6XcjqGlX/0DO0rhFga3xYOajMpz4f/9Vk
rbu9ejOcn721a91qhvxt7oE1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDdjePLhD
9L7v/gPF0Sw+P5gigucwHwYDVR0jBBgwFoAUQRWv/nCd92SgzMk062huh7fv3zcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzNTRGLzc2NkVDRUQ0Q0M2
MzExRjBBNkMxREYzN0M0RjlBRTAyL1FSV3ZfbkNkOTJTZ3pNazA2Mmh1aDdmdjN6
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUVJXdl9uQ2Q5MlNnek1rMDYyaHVoN2Z2M3pjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQz
NTRGLzc2NkVDRUQ0Q0M2MzExRjBBNkMxREYzN0M0RjlBRTAyL1FSV3ZfbkNkOTJT
Z3pNazA2Mmh1aDdmdjN6Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBQaccxOUhmkeZPHQceqhaJOAxmqHHynIYGdbJtPgmA18eFJrAaT89JQZ4TFU8f
yYQAvTlog+j5dRZHT1vfxlu0yg20eVtx4lAWdLyldGIorYcVQhPfLhVQ6FC6kv40
MvhjFzvB5mYiPlXlmTCuxddrBs+MTkw6B0TkLu3Qrsl8CPs7Hkb6Kj/+RY50LdaJ
rEM18HpTqQHDClTCZQRVUtHmQbu0mJLiUsLVWWs655keAEAtCXUcFYcbmFeeOsAh
KTSGsH7b3V/E/syWkLj7M8Qzqiug9DWHH3BO3ryyLDCd2gyCvXGACVQ+mW0ua03m
q84XHGb6jgHJKBGy5YicdUJi
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:28:41 2026 by rpki-client