Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
File:                     MQjy14qQC-lzk3j4GKWpYcpRLEs.mft (raw, json)
Hash identifier:          bQIUBgFXlERNr9/tmticlMAaLDg2aEO143DCHyojO0k=
Subject key identifier:   86:47:73:54:55:32:54:F0:DD:AD:A9:29:E5:2A:6C:2F:3D:D9:70:9F
Authority key identifier: 31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B
Certificate issuer:       /CN=A91E04E1/serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
Manifest number:          14
Signing time:             Sun 01 Mar 2026 10:31:18 +0000
Manifest this update:     Sun 01 Mar 2026 10:31:17 +0000
Manifest next update:     Sun 08 Mar 2026 10:31:17 +0000
Files and hashes:         1: MQjy14qQC-lzk3j4GKWpYcpRLEs.crl (hash: n/d8zocRgo2qq4l/5FVa8d6vYq7sAVSlZPFIZZM4/Dw=)
                          2: B3695572FD9E11F087EE26735F6F56BC.roa (hash: rCPj89ZhrAuLJpKSrj2V9nyJ0NP4IwMB9Wn3wdAsanU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl
                          rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E04E1, serialNumber=3108F2D78A900BE9739378F818A5A961CA512C4B
        Validity
            Not Before: Mar  1 10:31:17 2026 GMT
            Not After : Mar  8 10:31:17 2026 GMT
        Subject: CN=69a41576-88aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:0a:c1:ee:61:30:83:9e:43:14:89:71:e7:
                    e7:c3:44:53:68:e7:51:69:bd:c5:70:0a:8b:99:ef:
                    07:91:cf:a7:af:4a:21:de:d7:91:5d:f7:98:8a:81:
                    c1:f5:2f:08:60:b4:a6:17:5e:d9:f8:92:6d:f7:35:
                    8a:6b:82:5a:24:8b:a5:6a:80:f6:f9:35:f1:28:1a:
                    ad:81:8f:62:1c:12:df:9e:b9:ed:c0:54:b5:c4:01:
                    fc:c7:72:3e:38:57:1c:eb:69:50:4b:aa:13:0c:ca:
                    60:f0:a5:f5:4c:16:65:b3:f2:bd:fa:fc:da:51:99:
                    58:2f:da:42:4f:1f:6a:5d:58:71:25:e2:91:da:fe:
                    36:64:c8:82:c6:30:3a:f6:77:37:0f:14:ef:45:ed:
                    56:16:66:7e:ff:fe:8c:5b:d4:e8:6f:88:78:c5:1f:
                    91:3b:b8:e7:b3:15:8c:65:ee:9a:49:ef:38:17:b9:
                    74:b6:c4:3b:44:89:55:57:78:da:ca:56:3a:6c:f1:
                    e2:cc:29:04:d2:ab:9e:7e:28:1d:5f:fc:37:e7:d6:
                    ea:fd:41:8b:34:f8:aa:c1:7c:12:4f:41:e2:87:43:
                    28:33:4d:e9:74:d1:bb:b0:1e:ad:32:6f:19:1a:af:
                    13:66:d3:e1:7b:fd:97:23:82:dd:6d:13:1f:b7:50:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:73:54:55:32:54:F0:DD:AD:A9:29:E5:2A:6C:2F:3D:D9:70:9F
            X509v3 Authority Key Identifier:
                keyid:31:08:F2:D7:8A:90:0B:E9:73:93:78:F8:18:A5:A9:61:CA:51:2C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MQjy14qQC-lzk3j4GKWpYcpRLEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04E1/1C48D8E8FD9E11F0BFC962715F6F56BC/MQjy14qQC-lzk3j4GKWpYcpRLEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:1e:58:83:17:77:55:22:94:22:ff:60:ba:81:b4:83:32:31:
         77:70:87:bd:d8:6a:d0:26:2d:48:a5:88:6e:9c:af:a9:9b:2b:
         e7:66:2a:2e:9b:df:4c:94:b2:21:bb:88:66:10:01:41:c6:99:
         75:7e:38:b0:2d:d6:aa:e9:51:d8:ae:ad:1a:9f:9c:62:91:9a:
         86:b2:bc:7d:75:90:64:5e:8c:80:11:ae:82:03:89:a5:e1:20:
         6a:b4:df:58:47:32:97:eb:6a:76:c0:97:c8:a8:ab:a4:7b:49:
         b2:db:3b:09:ff:61:82:fd:3a:69:7b:bb:85:33:bf:09:e5:25:
         93:90:c0:f0:fe:63:02:8b:7e:ee:15:6a:8e:26:3a:88:21:80:
         6c:18:ca:06:e8:55:55:bd:0f:d5:5c:dd:d3:90:30:9d:05:2c:
         ac:20:76:ca:48:73:77:37:99:0a:a9:4a:e2:bc:a3:3b:ed:c6:
         62:6b:e6:8a:a1:4e:19:bf:ea:4c:1b:7e:fe:c3:94:57:f1:5a:
         ea:0c:24:54:62:60:cc:d1:06:c9:ee:78:fc:9c:dd:26:ec:d2:
         2c:0d:79:51:a3:42:34:99:5f:7a:2e:50:68:fe:d6:e2:d1:17:
         fe:37:7e:eb:a4:86:3f:3d:dd:33:39:20:13:c4:18:6a:8a:4e:
         95:2f:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:33:00 2026 by rpki-client