Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
File:                     qCkvYgTIIT15H6bMqvV4UZTvgaA.mft (raw, json)
Hash identifier:          NYjd7wwTuPFCXcn0iuRt9NJdJPsg+h6ZdUIXZUkM6Tw=
Subject key identifier:   D6:E4:B8:13:7B:BB:3B:A7:39:8F:FB:6A:D0:EF:0F:57:1E:35:95:A3
Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Certificate issuer:       /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
Manifest number:          F7
Signing time:             Mon 02 Mar 2026 11:37:56 +0000
Manifest this update:     Mon 02 Mar 2026 11:37:55 +0000
Manifest next update:     Mon 09 Mar 2026 11:37:55 +0000
Files and hashes:         1: qCkvYgTIIT15H6bMqvV4UZTvgaA.crl (hash: o2Zn2XBD/vVOAhrItZpi1SDutS+4cUWTTijcchp2K6c=)
                          2: E7695EC6A53411EFB98AFE51C4F9AE02.roa (hash: P5+kdRcpYE+yFLD64Qimw3RoARkVgaUfcrwZcF1uiC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
                          rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 11:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
        Validity
            Not Before: Mar  2 11:37:55 2026 GMT
            Not After : Mar  9 11:37:55 2026 GMT
        Subject: CN=69a57694-205d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:4c:88:c5:a4:fe:af:bf:25:2b:22:ab:99:
                    79:8e:b4:0f:ac:1c:b4:31:c5:af:47:49:88:f9:97:
                    87:5c:75:8e:c1:cf:ce:27:eb:15:54:7d:d5:77:79:
                    45:8c:ce:a5:ca:19:28:34:0b:af:e4:8a:a9:64:77:
                    6e:4e:51:5c:89:3b:4c:45:c0:60:ae:ab:65:f1:c6:
                    37:17:3f:c7:5b:da:70:98:9a:9a:69:d9:c9:9c:92:
                    b3:08:19:2a:03:ab:b8:95:29:ff:25:96:11:1f:a7:
                    20:a0:2d:1a:42:a5:f0:94:b4:a2:7d:d6:0d:d8:c9:
                    b2:60:6a:e0:46:1c:6b:52:31:0b:df:9b:75:a9:de:
                    0d:77:8d:c7:3b:61:be:be:87:ee:9b:29:7d:8d:bc:
                    41:95:c7:92:a8:02:c3:e3:e8:d3:a7:fe:0f:30:08:
                    d7:58:0d:fd:be:37:04:c1:e3:ef:51:cd:70:a9:cb:
                    67:80:b2:f7:a9:82:10:6a:45:74:cf:0c:f0:db:cf:
                    62:f0:04:03:63:40:24:88:ba:92:17:8d:6b:7f:cc:
                    18:f6:8a:ac:c0:55:01:1f:10:e4:99:97:37:af:0f:
                    53:93:64:bf:e2:f8:fc:c4:4f:fb:c8:46:d9:f4:0e:
                    33:ab:1a:99:38:80:8a:d1:f4:48:7c:af:4c:7a:de:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E4:B8:13:7B:BB:3B:A7:39:8F:FB:6A:D0:EF:0F:57:1E:35:95:A3
            X509v3 Authority Key Identifier:
                keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ab:77:b1:b0:1e:02:8c:dd:4d:16:97:25:f3:5b:dc:a5:0d:
         13:87:69:8b:03:db:2a:27:8c:fd:5b:7b:81:f0:af:ef:a5:60:
         d3:4a:39:17:3a:3f:8b:0a:fe:56:8f:90:52:42:c7:5e:55:7e:
         d8:79:8f:e1:9a:61:bd:fa:21:ce:dd:cb:7b:28:ed:f4:6c:63:
         2e:8b:13:a4:a6:c0:75:a5:24:4e:94:d9:5d:3f:20:e3:da:22:
         3d:9c:a3:01:1b:76:ef:a1:c4:70:84:cf:0e:8e:dd:65:2b:d4:
         02:93:e0:bd:16:25:ce:0d:6e:74:89:7f:d7:0c:67:9b:19:a7:
         82:21:6d:2a:ef:76:3e:d1:8a:7a:3c:32:59:76:d5:02:c2:31:
         3a:a1:d6:c5:9f:bb:c0:3a:d8:69:b6:ec:45:cf:a9:97:0d:1f:
         e7:99:99:39:5d:8e:4a:f5:58:a8:ad:0b:ff:8e:ea:da:f6:f9:
         cb:16:8a:83:66:30:09:33:69:ff:b3:89:f5:c5:2a:21:c9:04:
         50:de:e2:4d:26:00:fe:31:77:78:03:8a:01:0f:88:cc:39:a3:
         e5:3c:4a:28:b5:e8:a1:8c:2b:f7:f0:2f:f9:3d:f3:a3:66:1c:
         6d:bf:b6:28:fd:20:4e:1f:69:07:64:ab:d8:ad:62:2a:bc:50:
         69:86:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:19 2026 by rpki-client