Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
File:                     Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft (raw, json)
Hash identifier:          gTdv45v9iMrfcS4fjYe9fgwt7dIjB2KoFwm5yT0Ykvc=
Subject key identifier:   B8:61:DE:74:9C:22:BF:AC:1A:1F:78:45:79:D6:DD:41:F8:75:88:63
Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22
Certificate issuer:       /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
Manifest number:          01E6
Signing time:             Sun 01 Mar 2026 04:10:28 +0000
Manifest this update:     Sun 01 Mar 2026 04:10:27 +0000
Manifest next update:     Sun 08 Mar 2026 04:10:27 +0000
Files and hashes:         1: Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl (hash: +g8XlbAp3gecTtuKXwnDfnjjvy858WuihzmSCjJmLfY=)
                          2: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (hash: quzgA63SpLjcb7xHGEjv3O11w0qxKCOwrlK8xFLHM54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl
                          rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22
        Validity
            Not Before: Mar  1 04:10:27 2026 GMT
            Not After : Mar  8 04:10:27 2026 GMT
        Subject: CN=69a3bc34-e4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:5d:2d:d9:d7:16:cf:1f:a2:66:66:02:e8:
                    e6:1d:91:90:64:25:49:01:4b:7d:81:77:6e:a3:2a:
                    df:97:4b:8d:6c:34:74:c1:0a:0e:f8:85:7f:70:09:
                    67:03:1b:69:fe:72:81:14:fb:d9:4c:84:54:28:9d:
                    ca:93:69:64:4c:ea:92:2b:57:63:ee:3c:07:73:01:
                    e6:cb:52:e5:50:63:bd:7d:a6:ff:fc:b1:05:3b:1e:
                    31:72:81:78:71:a9:39:30:60:c2:42:98:a0:c0:16:
                    15:c3:1b:37:e0:26:80:a6:23:8b:5a:7e:0b:ee:9a:
                    09:3c:c4:42:30:db:cc:29:4e:07:2f:c9:6f:01:ad:
                    e4:e7:d8:45:2c:f2:35:95:99:11:0a:31:27:8f:6e:
                    bd:8c:98:cd:ad:0a:1e:95:32:4c:24:86:69:d3:97:
                    84:d9:b5:29:cf:82:b8:73:22:58:df:98:34:1d:35:
                    be:48:11:cc:10:94:d3:3c:c9:a1:7e:5d:2c:3d:38:
                    af:8f:da:b0:d9:74:db:79:51:c1:86:b1:d8:d8:d3:
                    d3:19:3b:63:88:d0:e4:cd:cd:e5:0f:4b:a3:40:af:
                    49:04:88:0a:68:9e:03:e4:35:c8:3e:12:65:cd:f7:
                    96:14:c1:62:ed:51:97:af:99:e2:71:eb:d4:3f:12:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:DE:74:9C:22:BF:AC:1A:1F:78:45:79:D6:DD:41:F8:75:88:63
            X509v3 Authority Key Identifier:
                keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:fd:6c:4b:0b:77:38:c3:2c:7d:65:7e:da:8c:d9:7f:63:
         7d:48:56:6e:6a:96:e7:cf:69:e0:75:bb:c6:34:df:99:c8:55:
         7d:f6:c8:c3:b7:bd:12:ae:f4:c8:d8:26:d5:3b:56:90:9f:82:
         37:b8:e4:90:fe:0d:17:f7:5f:f4:1d:21:72:14:ac:83:34:9f:
         73:be:3c:ce:ed:21:ab:d4:77:7b:30:07:62:9b:76:17:94:d9:
         8b:e4:6b:b7:7f:05:ba:af:1e:36:42:bc:ef:e9:85:5e:4c:c3:
         04:df:de:90:22:8c:f9:3f:3f:e1:2e:96:49:bc:8e:09:42:23:
         38:06:ad:1e:3c:d2:50:e7:93:9f:8e:5c:49:55:1b:00:da:2c:
         31:46:ea:ff:29:bc:83:eb:ff:34:8e:7a:eb:39:6c:d1:af:db:
         a9:94:25:f7:ed:bf:76:47:15:98:65:07:bb:e9:1e:43:c1:38:
         a3:77:c0:ef:20:ef:c8:a4:96:0f:ae:b0:8c:21:c1:1c:95:4a:
         22:3b:82:81:73:d6:6f:15:44:02:4c:fb:65:d6:6d:38:bf:b1:
         20:23:8c:4a:1a:c8:89:85:29:1d:3d:b6:f0:ba:d3:83:c0:49:
         72:91:67:b1:96:a2:d4:c5:aa:7b:9f:63:18:80:c0:9d:90:97:
         a7:92:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:27 2026 by rpki-client