Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File:                     Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier:          Y9naWglyXcDjmBfeoUb3pqrsDbifba7AiPxftHaZ3lU=
Subject key identifier:   45:46:86:2C:6A:25:FB:38:0C:73:10:B3:99:EE:C2:D4:90:C0:90:1A
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer:       /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial:       1BA1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number:          1B9C
Signing time:             Sat 28 Feb 2026 16:18:50 +0000
Manifest this update:     Sat 28 Feb 2026 16:18:50 +0000
Manifest next update:     Sat 07 Mar 2026 16:18:50 +0000
Files and hashes:         1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: yFarKqSAhIK5eVRID4wqqVgqbQUNORCdvKa3z/KnBkk=)
                          2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: f7v965g9bOSdEznd3YTHpzh8If/rvk4WHQj9sYnabU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7073 (0x1ba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Validity
            Not Before: Feb 28 16:18:50 2026 GMT
            Not After : Mar  7 16:18:50 2026 GMT
        Subject: CN=69a3156a-add5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:b2:81:f2:56:07:bf:b0:80:e0:3b:80:40:
                    56:ad:c6:40:60:b0:8a:64:10:0d:1b:13:a3:75:9e:
                    54:0f:b8:1a:f3:9f:e2:d2:ed:22:f0:2f:4e:7b:9f:
                    0f:57:fb:c5:08:33:e2:65:33:0c:51:3c:bd:3f:17:
                    7a:36:1c:99:9e:94:73:75:64:51:ca:18:75:cc:e9:
                    db:2f:e6:16:17:28:cd:77:3b:d4:9b:1f:a7:29:ad:
                    bd:45:23:04:e4:e2:df:4a:44:a3:9c:cd:2d:8b:59:
                    5e:df:c1:83:47:2a:ff:07:21:f7:83:92:a5:b9:3e:
                    07:d2:b4:1c:21:bc:31:72:0c:ac:1e:79:45:f9:e2:
                    6b:ba:e4:91:b0:e3:d3:e7:9e:57:ec:21:93:5c:fe:
                    6e:d6:08:06:05:ed:2c:cd:e6:45:72:12:5a:3e:80:
                    2f:06:8f:c7:e8:cd:bd:be:66:bf:10:8c:80:c3:bd:
                    2d:6e:d4:ec:95:d6:75:b2:5a:51:70:40:67:a6:b2:
                    65:1f:54:73:5a:f8:67:4c:48:9a:b6:bb:4e:68:55:
                    32:d4:47:5d:b6:f2:db:1f:0e:67:d7:95:50:03:5b:
                    95:1b:04:15:81:c0:28:72:21:1e:22:6c:96:23:b9:
                    f1:e9:95:81:0c:66:f9:26:d9:e3:0f:49:d0:9e:91:
                    80:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:86:2C:6A:25:FB:38:0C:73:10:B3:99:EE:C2:D4:90:C0:90:1A
            X509v3 Authority Key Identifier:
                keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:31:5c:52:1c:66:a9:9e:15:c4:27:f1:ec:b9:3f:3a:67:0f:
         b2:fa:ca:75:0f:e6:ac:c6:02:75:de:51:d8:03:0f:90:35:39:
         22:1d:51:39:83:75:02:92:4c:c1:c1:f3:0b:a9:1e:a9:13:ff:
         04:74:57:50:d8:89:a0:20:c4:c2:d2:3d:e7:6a:bb:45:f3:b0:
         64:4a:9c:07:a4:af:f6:e9:b6:34:1d:c8:7a:cc:4a:5e:f7:13:
         d2:76:92:e5:cb:a0:9b:5a:9f:63:95:54:55:19:e0:94:dc:93:
         f6:eb:a4:1f:92:94:a4:34:0b:0f:e2:31:d1:ad:11:f4:2d:e8:
         6c:1e:4b:89:81:ca:46:41:c4:f6:a9:c5:a8:f8:01:0a:1e:41:
         f8:a3:91:c2:f9:39:2e:4d:40:78:17:28:f7:48:75:e3:02:bd:
         37:69:14:80:bf:6c:7e:a4:68:2e:8c:20:fd:3e:e2:a1:70:b5:
         7d:e7:fb:a5:7f:e7:b9:9a:ad:e8:79:b2:33:94:05:00:e7:2f:
         e8:71:03:57:3c:b8:25:07:f6:91:0b:b0:5e:57:19:f0:9e:f0:
         84:9c:96:bb:4b:db:c3:f5:3d:1f:a5:7a:96:18:90:57:71:f5:
         ee:70:07:4b:ec:fe:8e:c0:78:84:81:7d:92:36:85:b3:bf:db:
         03:22:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:31 2026 by rpki-client