Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File:                     QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier:          lfW33RtMaH98MwIwhtn8Z7gUvdVllwJpGzYcWeCc+LQ=
Subject key identifier:   A6:7A:C9:27:21:20:ED:EC:01:64:C2:51:11:20:55:A2:EA:D9:AE:33
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer:       /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial:       04D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number:          04D1
Signing time:             Sun 01 Mar 2026 00:28:22 +0000
Manifest this update:     Sun 01 Mar 2026 00:28:22 +0000
Manifest next update:     Sun 08 Mar 2026 00:28:22 +0000
Files and hashes:         1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: nVQGXMLBDwOySD6f+oOek6QWYdnxYXnFoDwowoUJsGc=)
                          2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: p+J79GzKxldX7yAyLksNWjFs41wwGXOLgTyuIVmZY2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
                          rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:28:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
        Validity
            Not Before: Mar  1 00:28:22 2026 GMT
            Not After : Mar  8 00:28:22 2026 GMT
        Subject: CN=69a38826-923c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ef:97:04:6c:fc:a3:c5:2a:01:2b:49:3f:6a:
                    2d:6d:e0:f5:d7:58:c3:b6:72:02:6a:1d:79:c6:97:
                    b7:ce:39:12:f1:33:bf:9d:68:e9:75:9e:4a:d9:bb:
                    66:31:9f:bf:cc:19:93:d9:9d:6f:92:18:e8:01:f6:
                    cb:f5:03:6d:69:15:14:2b:12:79:d7:9b:78:b8:78:
                    79:43:f8:a6:cf:3d:94:3f:9b:06:c7:e4:85:d9:8c:
                    b5:d2:34:46:2d:b3:19:f3:52:ca:9c:5e:9a:d0:b0:
                    b2:c6:22:02:e4:5c:4f:91:fe:73:62:61:a0:82:69:
                    4a:9a:fe:78:90:f7:52:53:ab:d0:47:1b:5f:e5:c9:
                    ef:04:b0:f2:bc:15:92:03:a5:37:a9:f0:d1:ad:43:
                    4e:e5:6e:ef:c0:3c:45:b1:f8:df:fe:e7:f1:7f:22:
                    b3:6c:75:b0:01:d0:1b:04:80:1e:b8:87:dc:bd:38:
                    09:a6:1e:8b:b4:85:7a:08:5d:d3:40:d5:ff:1d:26:
                    48:1b:67:1b:d3:56:5a:0b:fb:c7:e6:c3:00:71:92:
                    85:21:6f:ec:05:92:bc:ab:f4:cc:c3:78:6b:85:44:
                    95:f1:a6:d7:ad:30:b9:38:8c:fc:f3:f4:83:d1:c0:
                    bf:c6:15:e4:9a:a0:3c:b1:d5:ab:85:07:e3:9d:eb:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7A:C9:27:21:20:ED:EC:01:64:C2:51:11:20:55:A2:EA:D9:AE:33
            X509v3 Authority Key Identifier:
                keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:fe:f4:7a:e6:66:47:f4:eb:f1:9f:3a:2c:57:7f:4c:3f:
         b3:8e:22:89:92:31:b3:c8:3b:07:ff:32:e3:36:6a:79:77:20:
         ce:14:2b:62:25:12:0c:26:55:92:7d:d0:70:f3:fc:ea:1e:79:
         73:22:57:5f:51:b6:42:1c:c6:6c:c0:76:8c:32:0d:22:09:25:
         81:6f:67:e3:86:ee:25:81:da:5f:9c:d7:4e:76:ef:69:dc:41:
         0b:67:d3:58:7b:25:72:28:39:2c:d9:1a:e1:3f:a7:0d:1d:66:
         a9:60:e4:70:4f:a4:6c:45:f4:23:1c:8c:4a:e3:c8:06:95:ac:
         82:77:6a:d8:11:bb:48:1e:cf:25:2a:8d:b0:44:95:35:5f:c7:
         09:80:26:73:f6:e2:34:83:e9:c0:34:64:b6:5b:a2:b4:81:13:
         9c:94:8b:88:23:37:04:e3:18:84:dd:95:1d:3e:98:fc:e1:ab:
         f7:31:c2:aa:b2:dc:31:0f:49:fb:4e:4d:db:3c:f6:7a:aa:41:
         12:4e:77:dd:53:73:ee:f1:b0:93:5a:8d:a4:ea:47:04:7c:98:
         63:b5:a8:d3:de:12:b6:79:b2:0c:b5:65:04:28:8a:23:3e:50:
         8c:d9:57:de:51:95:a4:f6:58:59:48:ef:08:53:f0:b6:b6:04:
         88:04:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:16:55 2026 by rpki-client