Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
File:                     1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft (raw, json)
Hash identifier:          OgbhOkrrngxn/xJaJyZyI897uaxHim49P07YzLbnoXs=
Subject key identifier:   2B:09:69:C2:7E:B6:C1:45:2F:DE:28:A2:05:DA:8C:5F:25:86:8D:4F
Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
Certificate issuer:       /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
Manifest number:          015D
Signing time:             Sun 01 Mar 2026 05:59:42 +0000
Manifest this update:     Sun 01 Mar 2026 05:59:42 +0000
Manifest next update:     Sun 08 Mar 2026 05:59:42 +0000
Files and hashes:         1: 1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl (hash: Bnu/RaxRQWyXP+5coE3/eRuqmZVf6MxDX/rWa7kYiBo=)
                          2: 2907520205DA11EF974A6A0BC4F9AE02.roa (hash: ewrjscJpS/Xz/iKI0GqdO+oPSijzuVXsC0vnRwXLRmM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl
                          rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
        Validity
            Not Before: Mar  1 05:59:42 2026 GMT
            Not After : Mar  8 05:59:42 2026 GMT
        Subject: CN=69a3d5ce-00c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:49:32:a9:2a:2a:47:86:b4:23:af:d0:92:
                    2d:3b:3a:94:fe:34:14:da:d9:63:b2:88:a5:42:fc:
                    59:f6:28:89:f3:b5:3d:cc:ad:4d:a8:8d:e1:05:e9:
                    6a:b1:4d:9e:ad:38:5d:9e:92:02:56:03:31:3c:cd:
                    d6:e7:23:dc:47:e4:11:00:93:f0:7f:1a:7e:d5:9c:
                    17:bb:b4:56:15:f5:71:25:a3:ba:55:b9:96:e0:82:
                    51:19:3b:5c:d6:e1:b9:e5:57:c8:65:ff:a5:97:30:
                    f2:d5:39:c6:2b:f5:04:47:df:e5:ea:6d:78:59:3c:
                    6d:27:02:15:d5:b2:57:fb:06:82:65:8f:17:79:e6:
                    82:42:a7:04:87:96:61:48:32:d0:92:89:e6:5a:32:
                    7a:28:a7:62:07:89:85:27:39:ac:90:b6:4b:d7:39:
                    01:5f:42:67:6d:af:cc:25:58:f8:f7:0c:a6:80:a3:
                    42:87:64:e4:1d:0a:64:13:d5:23:fa:13:f3:86:fb:
                    a3:c1:af:79:0b:d0:07:d6:99:36:23:bd:b4:e8:24:
                    d3:0e:49:bc:ab:34:39:e3:fa:59:51:30:f0:9e:d0:
                    ee:ab:6b:e1:0d:de:2c:a0:ce:61:c4:2b:f6:91:cf:
                    fb:91:e1:82:b7:b0:12:43:67:9a:6b:91:7c:8b:e2:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:69:C2:7E:B6:C1:45:2F:DE:28:A2:05:DA:8C:5F:25:86:8D:4F
            X509v3 Authority Key Identifier:
                keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:f0:ac:12:32:e4:60:cc:19:06:13:8a:ef:d1:74:35:ea:
         83:df:2d:83:a2:24:dd:97:ad:da:f7:b1:2d:27:85:9d:13:a3:
         b0:02:31:83:96:bf:1a:88:bf:45:3d:9b:9f:70:48:3d:b2:dc:
         50:9c:ad:4f:28:7c:06:4c:64:38:6a:80:9b:44:46:e5:eb:f8:
         6a:a7:2e:af:33:30:64:7d:ad:48:c2:19:cf:10:9f:72:1c:f9:
         73:9e:ea:3d:e6:b2:ed:a5:1e:e2:2d:a3:5f:7e:38:d4:05:05:
         d2:51:a6:d7:3b:70:18:1c:f5:f3:93:a2:c2:1f:8d:a9:be:5e:
         7d:c5:98:97:b0:a8:f0:06:50:6d:f3:33:a3:77:bd:52:81:e9:
         f1:da:13:16:f7:1b:c0:95:0f:ea:90:4f:a5:40:5e:cb:de:ce:
         d6:85:0d:44:f8:48:a4:46:96:8c:a4:a4:c3:d6:22:f1:e4:6e:
         fd:26:90:45:4c:aa:f0:46:f2:c2:ed:0e:cf:3c:ef:87:4d:8e:
         3a:1f:95:3d:70:e3:09:88:fd:e0:0f:f7:c0:4d:36:a8:10:cc:
         ae:5e:48:c3:ec:24:f0:90:4c:db:e5:8a:2a:1d:e9:ad:be:ed:
         2b:54:64:15:72:13:ee:04:bb:14:cc:16:84:93:e1:5a:38:70:
         f1:24:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:29:59 2026 by rpki-client