Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
File:                     2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json)
Hash identifier:          fZrHcYYFiSNzZTCjDfFNmDwb/5fxPw3Q6tWDScuIGPg=
Subject key identifier:   A9:33:40:6D:02:CD:35:9D:30:08:BE:48:E3:6F:78:26:41:C7:72:64
Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77
Certificate issuer:       /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
Certificate serial:       04A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
Manifest number:          049F
Signing time:             Sun 01 Mar 2026 00:41:58 +0000
Manifest this update:     Sun 01 Mar 2026 00:41:57 +0000
Manifest next update:     Sun 08 Mar 2026 00:41:57 +0000
Files and hashes:         1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: xoHVwSRS8doRD2neN3cfGtdl+XXd9rZHe+I4mfmvqMk=)
                          2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: SNYL/0yUH4CA6Jxfm4XbQ0YP4afZ1ffZzRIZ8OGyDC0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:41:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877
        Validity
            Not Before: Mar  1 00:41:57 2026 GMT
            Not After : Mar  8 00:41:57 2026 GMT
        Subject: CN=69a38b55-c4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:72:77:52:e1:37:2b:50:3a:f8:5b:45:e9:
                    66:dd:69:a6:fa:fc:0f:46:58:78:ce:20:7d:35:89:
                    68:37:6d:14:9e:45:8a:c9:4d:b2:e3:dc:95:41:3f:
                    56:88:72:b3:56:4e:92:fe:b3:20:a1:99:7c:42:e4:
                    5f:bc:44:aa:dc:25:4e:f8:ec:86:62:1d:4f:ab:82:
                    a4:60:8f:53:33:f5:8d:3f:97:00:ba:0b:c8:78:db:
                    ff:33:c2:da:05:e2:12:dd:20:19:b5:f2:50:8c:43:
                    85:f9:eb:bb:f4:15:c2:b6:35:cd:fa:6e:67:5f:91:
                    a2:33:04:35:df:7d:71:a2:a2:b9:7b:c4:f2:dc:04:
                    07:d7:0c:f7:c0:62:31:a4:aa:2c:ec:89:0a:91:10:
                    f0:69:80:64:a8:9f:bb:4e:ff:0f:61:e3:5f:30:d8:
                    b2:d2:f2:d3:65:f1:c0:ca:b0:75:4b:d8:62:04:51:
                    6f:10:c8:61:c0:d3:98:d8:76:cb:fa:11:23:eb:fe:
                    d7:15:48:da:55:59:cd:fb:14:75:2e:42:e6:48:4e:
                    82:83:55:34:e3:7d:6c:5d:f4:ca:61:ea:ce:e1:6a:
                    0a:51:36:5b:ac:0c:ca:20:cb:d2:5b:fe:9e:16:1a:
                    bc:02:68:02:21:6b:d7:bb:16:8d:af:2c:e3:64:bb:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:33:40:6D:02:CD:35:9D:30:08:BE:48:E3:6F:78:26:41:C7:72:64
            X509v3 Authority Key Identifier:
                keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:91:e3:06:17:d6:a1:2f:9a:19:01:88:93:94:4e:f8:c1:
         44:99:40:f3:6e:f1:d5:88:4a:77:39:6c:aa:d4:a1:99:c5:e2:
         dd:e9:51:db:0f:d8:8b:7b:54:64:a5:c2:71:6d:c8:35:28:9b:
         93:8e:d3:61:39:16:7d:f1:b5:7f:86:a8:60:a2:ec:90:13:94:
         ba:34:15:1b:e8:da:9b:d7:fd:b0:7b:10:67:da:bd:f4:2d:73:
         56:00:8b:8c:91:97:1f:91:36:ef:bd:a4:60:dd:f6:c0:35:29:
         d2:98:da:dd:5a:4f:2a:e7:4a:98:75:08:40:1d:17:31:13:de:
         2f:23:94:c7:b1:cd:9a:26:53:b3:d3:59:63:39:4b:17:ad:11:
         d2:de:9d:52:3b:da:00:b3:b9:33:80:f0:af:ee:4d:3d:86:9c:
         f8:1f:c6:06:2a:4a:04:96:47:3b:c1:ca:ae:41:5d:3b:58:99:
         95:24:52:be:be:6a:7e:5e:d7:18:b5:f6:58:8c:a3:3c:66:a6:
         da:2c:b2:0e:1d:25:87:b3:86:5e:77:86:b6:a9:ea:f1:62:59:
         39:33:b0:a4:0b:a1:d9:a6:33:82:e0:95:39:f6:1c:26:2b:8b:
         c3:66:fd:72:39:01:91:30:38:66:93:2d:78:5e:57:d7:aa:8b:
         79:70:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:10:42 2026 by rpki-client