Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
File:                     qB0VXKQErkFFeBrwXrU6Ehni4GU.mft (raw, json)
Hash identifier:          MZznNmzjLdlIUfTzhKbCzwawfjZnx8JtNOubJmDjihY=
Subject key identifier:   FC:90:33:1E:37:49:D2:51:A4:17:86:8A:D3:C2:2D:B4:A5:15:7F:3A
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Certificate issuer:       /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
Manifest number:          014B
Signing time:             Sun 01 Mar 2026 06:11:34 +0000
Manifest this update:     Sun 01 Mar 2026 06:11:34 +0000
Manifest next update:     Sun 08 Mar 2026 06:11:34 +0000
Files and hashes:         1: qB0VXKQErkFFeBrwXrU6Ehni4GU.crl (hash: umhbCNV5Ho/+8sSBHdTx5nLXtj+MjSA/3iiJkSfHcvQ=)
                          2: 42C6F6041E6F11EF898C1E38C4F9AE02.roa (hash: WVfFVr8nZrz60GI+g0Deoi4qcsL8XuNjzkTeXFJeRz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
        Validity
            Not Before: Mar  1 06:11:34 2026 GMT
            Not After : Mar  8 06:11:34 2026 GMT
        Subject: CN=69a3d896-19a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:39:4c:cf:47:e5:91:b1:b2:4a:a4:8e:ba:
                    5b:79:53:ec:e9:29:83:09:7d:a6:dd:24:6d:13:e8:
                    ea:a6:8f:b1:8e:04:4a:14:af:78:e2:ed:ee:98:65:
                    96:60:ec:31:f5:f1:51:d9:1d:d6:3c:94:e5:0d:57:
                    18:8d:fe:fb:fe:b4:a1:a7:c4:b4:1b:08:44:fc:a7:
                    6d:1f:de:35:8d:e0:86:28:eb:d9:1e:6e:b8:2d:a5:
                    7c:36:59:05:db:b6:ea:a1:2e:f0:b7:65:6b:2a:c4:
                    9e:fb:8e:05:d3:c1:a5:5c:ee:99:47:82:56:5c:02:
                    85:75:87:4c:3d:bc:c8:fe:11:0b:41:fc:16:cf:35:
                    43:a8:0a:f0:7c:c9:c5:bd:0e:e7:80:5e:ff:f2:9a:
                    8b:a4:e0:d9:8e:e4:44:fb:1c:46:55:3f:ec:77:c1:
                    77:cd:c5:99:4d:ff:f9:e6:ba:83:d2:43:52:1f:37:
                    d1:43:16:8e:ab:e0:c2:2e:ee:40:74:7e:34:6b:a7:
                    01:16:e8:dc:d1:36:e7:dd:a9:e3:24:31:75:28:a3:
                    cf:ce:aa:1b:7f:60:33:c0:29:8b:e0:53:b2:67:fc:
                    db:ed:c0:b6:10:87:75:6d:da:61:d9:49:33:21:90:
                    c1:72:79:26:3c:b7:35:65:a1:20:63:84:2f:7d:a5:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:33:1E:37:49:D2:51:A4:17:86:8A:D3:C2:2D:B4:A5:15:7F:3A
            X509v3 Authority Key Identifier:
                keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:07:88:e1:c7:ab:c3:5d:31:25:78:3c:4d:cd:fe:9a:2e:48:
         2a:fb:5e:65:89:3f:b1:be:96:7a:38:15:e4:9d:b5:dc:d2:14:
         61:2c:26:97:74:22:26:6d:04:ce:ca:08:bf:3e:34:08:f4:5d:
         56:b4:14:87:8d:05:7d:21:f8:a2:9b:15:00:50:06:9e:00:cb:
         4f:5e:90:c9:53:e4:af:dc:11:ed:f7:9a:ad:84:77:03:c3:58:
         76:9c:1d:af:68:dc:53:47:5a:4c:3a:d3:26:f7:a6:50:4c:14:
         02:a8:54:18:d0:60:1c:bf:62:93:64:53:56:f6:12:d2:65:ef:
         11:88:41:ca:45:d8:31:4b:4d:36:54:a0:41:d2:f1:66:92:74:
         17:02:67:2e:29:76:d1:ae:e8:03:8c:c9:5a:cf:7c:ea:ad:9d:
         1d:37:91:97:66:14:5c:a3:f2:77:16:eb:93:94:b6:4d:fd:2d:
         36:cb:96:e3:84:d0:69:41:d8:67:18:59:2e:42:49:0c:0b:9a:
         af:32:c0:97:51:10:48:08:b6:a0:e3:72:26:06:af:46:b5:82:
         af:31:ca:e7:7c:56:25:b3:05:3a:1c:84:8d:b0:33:66:de:9d:
         57:7f:14:8a:7b:3c:9c:1b:65:ed:1e:82:59:46:ce:6c:7a:84:
         fb:66:90:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:56 2026 by rpki-client