Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
File:                     QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft (raw, json)
Hash identifier:          OCPhC0gEEaAdHCTGYPkerT4LU/mNzDix1chvFjR7wc8=
Subject key identifier:   ED:6A:0B:59:09:D6:CA:C6:68:1E:4D:79:AA:F5:42:0C:E3:FE:E7:50
Authority key identifier: 41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58
Certificate issuer:       /CN=A91E5D61/serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
Certificate serial:       132C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
Manifest number:          486A
Signing time:             Sun 01 Mar 2026 23:52:57 +0000
Manifest this update:     Sun 01 Mar 2026 23:52:55 +0000
Manifest next update:     Sun 08 Mar 2026 23:52:55 +0000
Files and hashes:         1: QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl (hash: L3UdyVqD+BbsgYSMuzofkDbfh3/QA5EQZgqLC4ZGI0A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:52:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4908 (0x132c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=416D6CD60390FB7C96ED79D78CE76F54AFCF4458
        Validity
            Not Before: Mar  1 23:52:55 2026 GMT
            Not After : Mar  8 23:52:55 2026 GMT
        Subject: CN=69a4d159-a8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:3b:ed:96:28:ee:1a:1a:3f:d8:c8:12:8e:
                    e2:f0:19:34:a9:d8:f1:6e:ff:c6:1f:3a:a1:be:cd:
                    d3:2a:17:de:7c:be:2d:46:b9:63:ef:f6:38:a0:06:
                    01:c8:64:31:a5:4b:7e:35:b7:44:e1:7d:fd:f6:bd:
                    50:b3:82:a1:27:ae:d4:a4:c1:a9:0e:30:db:be:4c:
                    14:eb:19:ca:c0:b5:20:8c:78:b8:b9:4d:59:52:02:
                    08:d9:ab:3a:20:47:c5:00:fb:b3:a1:ed:16:00:80:
                    71:87:7e:b7:da:4c:eb:59:62:19:82:b9:8a:33:8c:
                    9c:8b:6c:0d:84:51:4d:fb:84:67:70:9b:bb:4f:ec:
                    67:7a:58:b9:43:eb:75:89:46:ef:f0:69:b1:59:00:
                    11:4d:90:7b:05:d7:38:74:ff:8b:ad:0e:91:f4:f3:
                    97:e8:c2:c7:d2:6d:83:c3:3d:41:a1:7a:7c:5f:c5:
                    ae:f6:15:ee:ed:69:b9:d9:6a:54:6c:8c:48:64:4a:
                    ea:fe:b7:b7:00:be:07:25:40:f9:9f:16:4a:f0:b3:
                    ba:64:be:70:be:7c:d1:28:f2:37:f9:1f:b7:3a:27:
                    91:19:d0:76:3b:45:9c:6e:8b:13:5e:af:91:37:b2:
                    20:ad:87:31:71:d1:a9:c4:af:a7:4e:15:68:b4:93:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:0B:59:09:D6:CA:C6:68:1E:4D:79:AA:F5:42:0C:E3:FE:E7:50
            X509v3 Authority Key Identifier:
                keyid:41:6D:6C:D6:03:90:FB:7C:96:ED:79:D7:8C:E7:6F:54:AF:CF:44:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/QW1s1gOQ-3yW7XnXjOdvVK_PRFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:52:72:64:f5:46:67:c2:47:09:dc:c5:4e:09:cf:5e:6d:
         bc:55:c4:75:7f:a7:ff:b2:18:9a:04:b3:6c:89:37:2b:f2:7b:
         c6:34:e6:3e:f1:cb:f0:db:95:ab:75:95:d2:c3:8f:e5:14:9a:
         f2:05:37:26:c3:b5:bb:bc:cb:71:08:1a:20:11:db:f1:15:8b:
         8a:a4:62:47:88:63:73:80:d3:de:45:b2:14:1b:3c:3d:ff:e3:
         f5:f5:c9:c7:50:e0:c5:a9:f2:9e:bc:f9:3c:3f:23:81:bd:77:
         94:df:9c:0d:7e:1a:ff:ae:cb:61:49:c7:26:e5:9b:e7:1b:80:
         91:e3:3a:99:ae:a9:60:2a:af:12:f8:97:b7:83:6f:06:e8:04:
         3c:3e:d9:06:e6:51:5d:2d:47:27:6d:5d:5e:81:4a:7b:16:fc:
         09:6c:49:88:fd:86:a4:da:ee:96:5f:0f:30:01:aa:7f:9f:32:
         3d:70:aa:d6:72:ef:bf:ba:a4:47:32:61:d8:61:c6:6f:96:02:
         c6:63:e9:bc:0b:39:63:aa:13:be:f1:7e:58:eb:e6:91:33:5e:
         8b:68:cc:84:a1:2a:68:1d:e4:83:ea:a3:cc:18:fc:b1:7a:61:
         2c:26:b2:c6:a2:fd:d5:b6:6b:eb:23:ab:c9:47:e7:17:5e:9b:
         f8:d9:03:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDQxNkQ2Q0Q2MDM5MEZCN0M5NkVENzlENzhDRTc2RjU0
QUZDRjQ0NTgwHhcNMjYwMzAxMjM1MjU1WhcNMjYwMzA4MjM1MjU1WjAYMRYwFAYD
VQQDEw02OWE0ZDE1OS1hOGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1M77ZYo7hoaP9jIEo7i8Bk0qdjxbv/GHzqhvs3TKhfefL4tRrlj7/Y4oAYB
yGQxpUt+NbdE4X399r1Qs4KhJ67UpMGpDjDbvkwU6xnKwLUgjHi4uU1ZUgII2as6
IEfFAPuzoe0WAIBxh3632kzrWWIZgrmKM4yci2wNhFFN+4RncJu7T+xneli5Q+t1
iUbv8GmxWQARTZB7Bdc4dP+LrQ6R9POX6MLH0m2Dwz1BoXp8X8Wu9hXu7Wm52WpU
bIxIZErq/re3AL4HJUD5nxZK8LO6ZL5wvnzRKPI3+R+3OieRGdB2O0WcbosTXq+R
N7IgrYcxcdGpxK+nThVotJMq2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO1qC1kJ
1srGaB5Near1Qgzj/udQMB8GA1UdIwQYMBaAFEFtbNYDkPt8lu1514znb1Svz0RY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0zeVc3WG5Yak9kdlZLX1BS
RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1FXMXMxZ09RLTN5VzdYblhqT2R2VktfUFJGZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9RVzFzMWdPUS0z
eVc3WG5Yak9kdlZLX1BSRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOfZScmT1RmfCRwncxU4Jz15tvFXEdX+n/7IYmgSzbIk3K/J7xjTmPvHL8NuV
q3WV0sOP5RSa8gU3JsO1u7zLcQgaIBHb8RWLiqRiR4hjc4DT3kWyFBs8Pf/j9fXJ
x1Dgxanynrz5PD8jgb13lN+cDX4a/67LYUnHJuWb5xuAkeM6ma6pYCqvEviXt4Nv
BugEPD7ZBuZRXS1HJ21dXoFKexb8CWxJiP2GpNrull8PMAGqf58yPXCq1nLvv7qk
RzJh2GHGb5YCxmPpvAs5Y6oTvvF+WOvmkTNei2jMhKEqaB3kg+qjzBj8sXphLCay
xqL91bZr6yOryUfnF16b+NkDAQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:19 2026 by rpki-client