Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
File:                     QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft (raw, json)
Hash identifier:          PQiu7gK904NxWi56LEVcIGnY8C4rThYa8XDyfPPzA94=
Subject key identifier:   C9:A1:2A:D7:63:AA:47:73:71:BA:34:4E:86:79:AA:89:15:F1:7F:0D
Authority key identifier: 42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE
Certificate issuer:       /CN=A912087D/serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
Certificate serial:       02C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
Manifest number:          02BE
Signing time:             Mon 02 Mar 2026 00:24:23 +0000
Manifest this update:     Mon 02 Mar 2026 00:24:21 +0000
Manifest next update:     Mon 09 Mar 2026 00:24:21 +0000
Files and hashes:         1: QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl (hash: mjYtvCpXySjUJ6Z2JzPIppnzZ3CrS1cwR4E8PRzdRHU=)
                          2: 07E789A228F011ED94BE9345C4F9AE02.roa (hash: UjqlRAwfwNLo2LEBYwVtNQxCTDJqJ6taRgiSuyPlUdk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl
                          rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912087D, serialNumber=42A84D8C0889ADC55860663993BCCA8361271BFE
        Validity
            Not Before: Mar  2 00:24:21 2026 GMT
            Not After : Mar  9 00:24:21 2026 GMT
        Subject: CN=69a4d8b6-b11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:bc:4c:f6:5f:5f:62:ad:ea:0a:15:27:e8:13:
                    74:75:58:bc:53:4d:98:00:58:f7:c4:fa:f0:47:e4:
                    fa:e5:e8:81:af:ab:1e:e7:d0:b9:46:45:b6:dd:21:
                    d5:02:2f:cd:e8:44:5d:0b:2a:67:4d:9a:b5:57:24:
                    66:f0:d5:0d:94:ad:4e:27:81:01:33:2c:0a:5b:80:
                    e0:d4:24:67:0b:bf:d5:5f:ab:c9:8a:e3:0e:a8:58:
                    b3:80:db:0f:ec:11:35:17:4c:de:c0:90:d6:ac:03:
                    12:2d:b0:61:3b:6b:be:f0:dc:2c:9f:2d:ae:b5:a6:
                    bb:bd:dd:63:6f:65:26:60:73:12:e3:34:05:ac:08:
                    09:bf:ed:60:4a:b4:1d:55:e7:a4:d7:b5:84:73:6a:
                    c1:ea:a2:be:b8:7e:e6:fc:fc:ee:ef:c5:cc:70:a6:
                    47:5b:e3:47:67:10:b8:47:ae:fc:ae:6d:90:3b:dd:
                    f9:f5:d6:2a:77:10:84:cc:a8:9e:65:23:16:e7:3e:
                    12:4a:95:21:89:e6:36:43:6e:2a:83:9c:c5:47:5b:
                    e3:57:76:20:69:52:a4:88:b1:86:aa:b6:b0:09:fc:
                    e6:be:06:a3:fc:fe:30:75:ed:f5:9d:52:b4:53:73:
                    40:4f:7d:ba:c9:ec:a1:19:c6:c8:cf:1d:c5:94:ba:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:2A:D7:63:AA:47:73:71:BA:34:4E:86:79:AA:89:15:F1:7F:0D
            X509v3 Authority Key Identifier:
                keyid:42:A8:4D:8C:08:89:AD:C5:58:60:66:39:93:BC:CA:83:61:27:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqhNjAiJrcVYYGY5k7zKg2EnG_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912087D/4C15858C28ED11ED8B597B40C4F9AE02/QqhNjAiJrcVYYGY5k7zKg2EnG_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:21:97:5e:af:ca:79:ee:97:cd:dd:3c:54:49:47:6f:6a:7a:
         fb:03:80:7c:01:1b:75:ff:ef:ac:92:d3:dd:1b:bc:58:5e:f9:
         7b:2a:64:01:27:0b:46:d2:40:bd:04:d2:f0:ed:b5:19:59:ec:
         f2:98:19:c5:8a:f1:08:90:9c:6f:b4:41:fc:e4:72:ed:38:65:
         42:12:e8:da:6e:2e:f7:20:8a:b9:3d:77:df:ba:ed:db:fb:ae:
         51:7b:24:9a:0c:8c:a3:98:69:37:54:50:4e:5b:a6:a9:da:de:
         d0:97:50:9f:7e:88:e0:26:bf:cd:72:94:47:4e:74:e8:a0:03:
         8d:56:19:62:a4:57:a8:8c:8d:01:66:e9:5e:0c:ef:f1:17:5e:
         30:33:45:38:e2:45:f3:7a:f6:d9:fb:94:48:51:f9:9c:75:20:
         a1:97:97:79:86:f8:76:09:58:92:c3:1a:1f:c0:88:52:23:82:
         f5:7b:29:0b:f3:52:c4:0e:ce:e3:f9:39:11:8d:7a:4b:d9:82:
         79:cb:e6:69:01:eb:0f:80:f6:6e:b0:fc:5c:d4:2a:ad:c2:6d:
         2f:98:47:e7:7f:34:7a:72:b5:56:24:67:12:3e:f2:e1:9b:54:
         a2:86:ba:e7:a8:81:f8:17:2d:4e:ec:09:c8:86:f3:39:f2:51:
         09:13:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:10 2026 by rpki-client