Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File:                     a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier:          Vtt8aZdETD6YuE8sOLh2t0qDUbotGu6PQbnKGU5TBAw=
Subject key identifier:   E9:AC:30:83:AE:7C:AA:2B:1D:B7:72:70:D1:73:9F:55:F9:81:5E:F1
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer:       /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial:       349B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number:          347B
Signing time:             Mon 02 Mar 2026 02:57:54 +0000
Manifest this update:     Mon 02 Mar 2026 02:57:53 +0000
Manifest next update:     Mon 09 Mar 2026 02:57:53 +0000
Files and hashes:         1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: GTY38WYASOvUQU36Io7qVrDiOURfqecWbvYJKmz+0TA=)
                          2: 56C3DC822B0B11EF97C4A74AC4F9AE02.roa (hash: BfM+WJCATCxDvSbNYj9etC2USnC2s+RFYfsw7w+QlP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13467 (0x349b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
        Validity
            Not Before: Mar  2 02:57:53 2026 GMT
            Not After : Mar  9 02:57:53 2026 GMT
        Subject: CN=69a4fcb2-4992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:40:14:52:18:98:86:75:50:ca:7d:c2:a7:
                    46:85:12:63:d4:3b:f5:7f:4b:fb:d7:d4:8f:5f:ba:
                    b0:68:1a:24:9e:4d:02:ab:54:a4:81:d1:9f:9c:a7:
                    3d:c0:5b:fa:99:18:44:1d:06:a5:59:73:01:5f:20:
                    15:66:40:7b:74:da:25:71:5a:08:3a:90:38:57:1d:
                    dc:e6:9f:e7:39:7e:9c:0a:02:a8:d9:4a:a0:ac:87:
                    fb:37:47:d4:8c:97:17:89:75:28:4d:89:67:92:00:
                    a9:82:1d:2c:49:fb:ea:29:b0:9b:2e:86:07:18:3b:
                    83:9a:f1:79:71:8a:e6:79:2b:50:b8:91:80:3d:3d:
                    f8:7d:99:7b:8f:56:4d:28:0c:5f:dc:6c:e5:27:89:
                    e3:de:be:33:5c:25:78:75:d2:9b:c9:2f:48:ee:d4:
                    38:b1:3e:fc:37:a9:49:97:3f:d9:9f:73:ed:fe:97:
                    cc:52:59:ad:77:56:07:a7:80:f8:ca:e9:0c:9e:bc:
                    88:bb:45:dc:cb:f2:de:1f:56:23:08:d5:ee:73:bc:
                    37:56:f7:57:fc:d2:14:24:75:47:eb:4d:7e:d9:a0:
                    87:45:dd:fe:38:fc:f4:ea:84:ec:92:ab:ac:2e:b0:
                    e5:f5:e0:5b:23:c7:1b:c4:e2:7c:25:dd:2a:06:80:
                    9a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:30:83:AE:7C:AA:2B:1D:B7:72:70:D1:73:9F:55:F9:81:5E:F1
            X509v3 Authority Key Identifier:
                keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:b4:69:b1:86:8b:3c:23:63:5b:5e:9f:6c:6d:c8:3a:92:
         0c:70:24:29:a4:36:1a:d3:5b:a6:6a:1f:a5:ec:4c:13:1d:ed:
         e7:bb:17:95:2e:ed:02:92:a1:f9:51:b4:19:e1:dc:07:fb:79:
         26:e3:85:41:b2:b3:52:98:f5:e1:e9:b0:cf:c2:53:06:6d:90:
         f7:9e:09:df:65:08:b6:da:75:a7:c3:3f:38:36:b0:dc:78:0c:
         61:23:57:14:dd:77:eb:8f:ca:bf:62:67:6b:b4:85:66:74:eb:
         57:46:51:89:d8:bb:02:cf:86:49:ad:c8:98:40:a2:15:e7:f8:
         74:8a:24:2b:18:bc:25:a6:6d:fb:70:ba:37:a2:62:d6:1d:3a:
         aa:27:21:52:ef:96:98:61:1e:7d:af:0c:63:4b:3c:cc:29:01:
         73:9f:d3:16:b2:2a:ea:be:0d:e8:ec:80:38:d9:d3:58:88:63:
         7b:dc:0b:d3:b7:62:97:63:45:54:26:cb:04:5d:dd:d0:94:98:
         bb:41:08:64:0e:be:d5:0e:1d:d1:93:61:f5:bd:2f:c1:eb:ec:
         ea:c9:11:e6:c0:d0:31:6d:5a:ef:54:49:79:95:b9:78:62:c6:
         37:23:c9:9d:03:b4:40:db:00:b7:fe:f6:0d:0c:a1:25:cb:44:
         04:d6:ed:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:23 2026 by rpki-client