Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File:                     qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier:          +KbsrrNbNTuOAzYswBmUHIpvDdMQCTfYbU8ig6UCuRk=
Subject key identifier:   03:D2:8A:34:20:68:4F:40:06:ED:D3:37:B7:64:1B:E7:47:D3:13:69
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer:       /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial:       0E65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number:          0E41
Signing time:             Sun 01 Mar 2026 22:32:50 +0000
Manifest this update:     Sun 01 Mar 2026 22:32:49 +0000
Manifest next update:     Sun 08 Mar 2026 22:32:49 +0000
Files and hashes:         1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: bBWL/db/4clsYvTUiE8mkeISBgTFhuw7iwcEh8wcl6A=)
                          2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: MrF9jFzo1gQmp52DvTXmMON/OH1U7O3zoCb/eA1OYLI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3685 (0xe65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
        Validity
            Not Before: Mar  1 22:32:49 2026 GMT
            Not After : Mar  8 22:32:49 2026 GMT
        Subject: CN=69a4be92-f40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:a2:ff:5d:c6:97:c1:23:f4:80:2e:9f:2c:
                    23:f0:cb:94:77:c3:2f:1d:2a:96:60:18:b7:da:60:
                    51:6f:9d:63:e7:02:b9:0f:64:38:b9:15:e9:51:a8:
                    c1:13:a3:a2:b0:40:d4:df:b1:f8:95:13:14:04:9c:
                    8c:78:26:44:64:97:03:d4:a8:f8:d7:8e:49:d3:0c:
                    ae:c5:78:38:33:63:c2:96:62:79:84:ac:10:92:49:
                    43:17:d3:c6:35:a6:2c:e4:ee:7d:18:14:57:2b:76:
                    ec:79:0a:94:2b:f2:67:9a:92:d3:0b:e1:5d:09:31:
                    d0:10:e2:61:03:79:7f:d5:88:38:42:5d:91:ba:16:
                    92:95:95:bf:6a:63:b8:d1:85:3f:d5:07:30:82:5b:
                    2c:d8:68:14:59:0d:2b:29:67:d8:da:40:41:0d:a0:
                    4b:b1:45:9a:c2:d0:70:18:ff:8f:67:d7:41:cf:24:
                    4f:07:41:3d:12:c3:4a:e2:a1:56:9d:f6:3b:1a:eb:
                    ee:ac:2f:1a:86:50:ec:95:9a:34:21:8f:65:84:9d:
                    e2:e2:f7:b6:2c:14:82:c3:b3:bb:b3:03:19:62:91:
                    8f:c2:0f:1f:43:85:78:f5:11:73:3c:40:2e:cc:d6:
                    b4:40:17:6e:36:68:01:88:cf:b9:81:b1:c8:99:3e:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:8A:34:20:68:4F:40:06:ED:D3:37:B7:64:1B:E7:47:D3:13:69
            X509v3 Authority Key Identifier:
                keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:99:1d:b3:60:58:35:7a:95:73:b3:01:ea:a0:dd:78:79:
         99:fb:2c:4d:cf:7c:45:49:f2:e9:6d:60:1a:0b:4f:96:f8:0e:
         fc:4a:6e:57:4f:89:17:f0:ab:01:fd:60:63:56:9b:e7:4a:34:
         ff:1f:5a:6c:76:40:05:2f:99:d3:cc:ed:dd:38:e5:f9:3c:a1:
         cd:80:19:bb:6a:77:1e:ba:3c:be:f0:51:03:de:6d:da:17:54:
         8d:69:59:0b:c2:03:a9:ec:16:01:e9:0f:f8:72:da:c6:52:ae:
         ec:0c:eb:f2:d7:eb:14:01:0e:36:c8:6d:2c:a3:16:3a:e1:bb:
         03:ef:a4:d6:48:8a:14:b0:cd:d6:3f:2c:8b:1b:0f:e8:13:ed:
         6d:eb:f0:d3:73:a5:8c:cb:8a:7a:9e:79:68:57:56:e8:d8:18:
         49:d8:3e:21:b0:5a:b3:26:56:91:17:ec:d9:0e:21:ec:ac:ae:
         de:24:a4:a4:a7:1a:83:a8:b2:9d:33:05:4f:2c:66:6d:5f:39:
         22:c4:58:9b:57:ab:f0:18:fe:26:a2:27:95:ba:5f:81:26:77:
         6b:f0:31:5a:6f:81:e7:0d:50:41:53:c9:87:af:9a:a7:67:f2:
         d4:45:e2:fb:a8:19:35:3d:d4:c5:36:22:24:a1:56:38:03:f4:
         98:fd:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:10 2026 by rpki-client