Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
File:                     Q7wDqZcxeefuI0ayjnTeET9jNWw.mft (raw, json)
Hash identifier:          m/ODN7AsuoEYWDWTtKGNfkklq4fbeuIgMs80wmW4h/w=
Subject key identifier:   E4:09:B4:AE:BD:95:12:43:E5:0C:24:99:59:AB:8C:FE:8A:EA:29:ED
Authority key identifier: 43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C
Certificate issuer:       /CN=A91A15B3/serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
Manifest number:          60
Signing time:             Sun 01 Mar 2026 09:29:10 +0000
Manifest this update:     Sun 01 Mar 2026 09:29:09 +0000
Manifest next update:     Sun 08 Mar 2026 09:29:09 +0000
Files and hashes:         1: Q7wDqZcxeefuI0ayjnTeET9jNWw.crl (hash: 2/JMkIxuYZgA+lqg9nYAFZvJymAqsc6WmNQoO01on3A=)
                          2: A95853C684AE11F0BC9BFE85C4F9AE02.roa (hash: 8lwPcwX3ypUW1BowkvlrmGvN2ERm4f7W2A+JS3SOd2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl
                          rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15B3, serialNumber=43BC03A9973179E7EE2346B28E74DE113F63356C
        Validity
            Not Before: Mar  1 09:29:09 2026 GMT
            Not After : Mar  8 09:29:09 2026 GMT
        Subject: CN=69a406e6-1d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:96:d7:66:02:1b:1b:82:76:de:5d:2b:e4:
                    3b:ee:e0:5a:3b:a9:2b:7d:46:3a:39:1a:84:19:cf:
                    77:19:61:98:f5:d5:65:8c:a3:cd:65:bb:0c:e7:dd:
                    bb:c6:6b:cd:3c:aa:5e:91:00:3c:50:dc:b7:54:f4:
                    9a:c2:71:2f:ea:32:e9:65:0f:fa:c9:3d:0f:19:cc:
                    f8:eb:1b:95:fb:ce:19:db:c0:8b:e0:f9:a1:bf:79:
                    73:91:da:15:26:f9:95:fc:e5:a6:56:0f:a5:8c:4e:
                    78:c7:79:c0:83:32:3a:13:f7:ff:11:5f:ee:c9:90:
                    70:e2:2c:34:bf:7f:b3:2f:9f:47:3d:7d:63:72:c4:
                    13:ea:31:27:a8:22:07:9c:90:9c:1e:0c:bf:28:38:
                    24:e7:d3:45:26:90:88:14:23:4d:02:11:63:0e:2c:
                    90:c7:25:8e:39:59:4d:52:af:d9:2b:77:35:13:a7:
                    58:50:f6:58:08:ee:12:f7:78:73:c1:b5:d8:ba:04:
                    d1:38:23:07:01:95:cd:92:36:39:d1:db:f1:8f:d4:
                    a0:44:04:49:ba:69:f0:25:51:ab:07:1c:e1:b7:c9:
                    ea:a3:af:c0:ec:bf:8d:6b:7e:a5:1f:eb:16:fe:34:
                    c5:c3:d8:b4:4b:25:31:1f:a0:e8:cf:54:3d:55:f2:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:09:B4:AE:BD:95:12:43:E5:0C:24:99:59:AB:8C:FE:8A:EA:29:ED
            X509v3 Authority Key Identifier:
                keyid:43:BC:03:A9:97:31:79:E7:EE:23:46:B2:8E:74:DE:11:3F:63:35:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7wDqZcxeefuI0ayjnTeET9jNWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15B3/F7B2488E84AD11F0AFE89780C4F9AE02/Q7wDqZcxeefuI0ayjnTeET9jNWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:96:a2:05:84:23:b5:fc:c8:53:c0:33:7a:b6:c0:ab:5e:
         6b:f0:64:c2:61:6c:92:f8:b3:6b:2b:8b:b6:86:92:2b:41:37:
         7f:31:49:99:c2:68:50:39:c2:5e:40:31:65:dd:b7:eb:27:92:
         78:08:c9:7c:6d:1d:9a:fb:c8:5c:04:d7:2f:9a:4a:e5:4c:83:
         e5:5b:13:73:d3:a7:09:79:68:51:7b:58:e7:b0:b3:f0:d2:34:
         f3:02:95:e0:80:01:ff:9f:dc:bf:07:40:7e:fb:07:98:6d:5c:
         05:fd:9c:c3:06:8a:47:a1:e5:7e:d1:53:c0:22:f5:16:f5:51:
         b6:62:8f:5c:aa:b2:8f:f2:7f:e5:4a:25:22:d9:2c:e6:ee:43:
         bf:6b:a0:4a:ef:5e:67:ea:68:7e:77:25:a0:0a:33:63:3f:3d:
         9c:11:bf:18:0a:c8:62:07:43:8c:46:26:07:c2:75:66:a0:c6:
         37:e0:ac:a7:f2:a3:ee:c3:ab:6e:09:78:48:5a:68:8a:5c:5d:
         ab:db:60:75:d9:59:45:ee:f7:dc:f9:1b:c4:bc:13:94:22:48:
         54:d4:60:63:45:1f:41:b6:eb:9a:c3:aa:f6:f5:5c:d7:76:08:
         95:3c:1c:f1:d5:a3:dc:9b:02:5f:5f:a3:4d:83:78:97:30:6e:
         eb:d0:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:16 2026 by rpki-client