Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
File:                     1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft (raw, json)
Hash identifier:          hITinE72IDrzDNatCM2ZfTPXt8D3XgZJ3OUP6nfJH3I=
Subject key identifier:   9B:E6:45:43:E8:32:02:7E:10:29:66:24:A3:23:D6:28:20:B5:3F:E2
Authority key identifier: D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18
Certificate issuer:       /CN=A91FDD4D/serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
Certificate serial:       0231
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
Manifest number:          022E
Signing time:             Sat 28 Feb 2026 15:55:52 +0000
Manifest this update:     Sat 28 Feb 2026 15:55:51 +0000
Manifest next update:     Sat 07 Mar 2026 15:55:51 +0000
Files and hashes:         1: 1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl (hash: ntqU6Mm4oGAkvtsLrswsY/evivT6gqZ9JFaC3ka7k04=)
                          2: 1046CB98D28311EDB1655152C4F9AE02.roa (hash: Kqt9mEj0giKftuB2DBO692CGsOF5kZIoQznyePkJFyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD4D, serialNumber=D50C2957DFA840A9430FB9EE25D4DCFA17129C18
        Validity
            Not Before: Feb 28 15:55:51 2026 GMT
            Not After : Mar  7 15:55:51 2026 GMT
        Subject: CN=69a31008-a9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:5d:7d:f4:7e:40:4c:98:49:9f:2d:86:19:
                    a8:89:0d:ec:a9:91:ce:ca:73:a2:e0:21:9a:32:89:
                    6e:a9:3e:3a:b2:6c:3f:b7:59:66:df:28:fb:2a:9c:
                    b8:36:94:2f:7e:59:0e:66:b3:e0:3e:35:7c:ac:30:
                    44:13:27:73:b4:11:f2:ca:f1:6e:fe:53:16:bd:d4:
                    57:a3:2d:1a:39:6d:47:1a:5a:8c:b1:95:fe:71:10:
                    78:83:73:91:4b:e0:aa:c2:bf:83:00:7a:43:49:94:
                    3a:d2:75:e7:f0:0f:62:0b:3f:a7:44:e2:5b:dc:30:
                    f1:04:95:18:23:46:43:20:23:57:2a:21:3b:dc:fe:
                    59:a6:9a:23:80:94:c7:98:c6:5b:c7:19:dd:37:65:
                    7f:c3:e1:66:0a:ca:68:3b:30:4d:a0:4d:2f:d4:08:
                    76:12:fc:75:5a:8f:0a:16:a7:69:0a:d5:75:f9:99:
                    25:ff:6b:7f:a6:21:cf:01:6b:08:37:34:ae:eb:60:
                    5f:87:b4:5c:c5:84:02:cd:6e:24:6d:9a:c9:53:76:
                    8a:ad:57:f4:0a:a7:7a:bc:5e:bb:d6:50:14:18:28:
                    e3:0f:56:bb:70:72:3c:6f:3e:13:3a:10:41:e6:26:
                    4f:12:71:e3:1e:6b:20:5c:23:37:94:d8:d8:29:09:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:45:43:E8:32:02:7E:10:29:66:24:A3:23:D6:28:20:B5:3F:E2
            X509v3 Authority Key Identifier:
                keyid:D5:0C:29:57:DF:A8:40:A9:43:0F:B9:EE:25:D4:DC:FA:17:12:9C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1QwpV9-oQKlDD7nuJdTc-hcSnBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/660E0588D27D11ED8E9A2580C4F9AE02/1QwpV9-oQKlDD7nuJdTc-hcSnBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:1a:bf:99:8f:fb:28:20:b8:78:fa:6f:13:5c:2f:fd:3b:
         05:5b:89:f0:eb:0e:13:a6:4d:09:0c:0f:bc:8c:0c:50:29:b3:
         e6:40:5d:8a:23:1f:49:51:b1:b4:b0:0a:e0:74:35:ac:f5:54:
         ab:9d:02:5d:ee:a5:14:42:c7:f9:05:cc:79:48:48:4b:3c:d8:
         a9:d2:da:0a:46:bf:71:34:b3:6a:dc:b9:af:35:eb:46:68:27:
         b2:66:59:74:1b:a5:4b:21:8c:61:d5:bf:6a:dc:24:e7:1e:e8:
         3f:3f:1c:6f:97:31:e6:46:d4:ed:e6:ea:b2:ad:b8:b3:af:b8:
         25:a3:dc:2b:ef:ce:c9:e6:1e:2d:54:ec:31:df:d4:6e:e2:c4:
         fb:b6:1d:b0:6e:21:05:9c:dd:27:5d:05:27:00:a6:30:41:4a:
         1d:fb:ac:13:84:0e:21:65:55:67:ed:8c:1b:cf:ad:e4:bf:d7:
         2e:a4:20:27:a3:03:fc:81:4f:3e:6f:e9:f8:10:53:16:5a:57:
         d7:e1:89:00:d2:b3:fa:f1:24:72:89:d6:8b:d5:a3:2f:9a:d4:
         61:b3:d8:47:4e:70:c2:23:22:55:75:91:7c:d9:c8:bb:98:7c:
         b7:1e:bf:f7:35:45:13:6d:be:68:47:02:f9:a6:ce:1f:44:e4:
         ea:a2:4b:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRENEQxMTAvBgNVBAUTKEQ1MEMyOTU3REZBODQwQTk0MzBGQjlFRTI1RDREQ0ZB
MTcxMjlDMTgwHhcNMjYwMjI4MTU1NTUxWhcNMjYwMzA3MTU1NTUxWjAYMRYwFAYD
VQQDDA02OWEzMTAwOC1hOWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ltdffR+QEyYSZ8thhmoiQ3sqZHOynOi4CGaMoluqT46smw/t1lm3yj7Kpy4
NpQvflkOZrPgPjV8rDBEEydztBHyyvFu/lMWvdRXoy0aOW1HGlqMsZX+cRB4g3OR
S+Cqwr+DAHpDSZQ60nXn8A9iCz+nROJb3DDxBJUYI0ZDICNXKiE73P5ZppojgJTH
mMZbxxndN2V/w+FmCspoOzBNoE0v1Ah2Evx1Wo8KFqdpCtV1+Zkl/2t/piHPAWsI
NzSu62Bfh7RcxYQCzW4kbZrJU3aKrVf0Cqd6vF671lAUGCjjD1a7cHI8bz4TOhBB
5iZPEnHjHmsgXCM3lNjYKQk23wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJvmRUPo
MgJ+EClmJKMj1iggtT/iMB8GA1UdIwQYMBaAFNUMKVffqECpQw+57iXU3PoXEpwY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC82NjBFMDU4OEQy
N0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FLbEREN251SmRUYy1oY1Nu
QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzFRd3BWOS1vUUtsREQ3bnVKZFRjLWhjU25CZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
REQ0RC82NjBFMDU4OEQyN0QxMUVEOEU5QTI1ODBDNEY5QUUwMi8xUXdwVjktb1FL
bEREN251SmRUYy1oY1NuQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKC8av5mP+ygguHj6bxNcL/07BVuJ8OsOE6ZNCQwPvIwMUCmz5kBdiiMfSVGx
tLAK4HQ1rPVUq50CXe6lFELH+QXMeUhISzzYqdLaCka/cTSzaty5rzXrRmgnsmZZ
dBulSyGMYdW/atwk5x7oPz8cb5cx5kbU7ebqsq24s6+4JaPcK+/OyeYeLVTsMd/U
buLE+7YdsG4hBZzdJ10FJwCmMEFKHfusE4QOIWVVZ+2MG8+t5L/XLqQgJ6MD/IFP
Pm/p+BBTFlpX1+GJANKz+vEkconWi9WjL5rUYbPYR05wwiMiVXWRfNnIu5h8tx6/
9zVFE22+aEcC+abOH0Tk6qJLUw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:50 2026 by rpki-client