Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
File:                     QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json)
Hash identifier:          OxRYzfn58JBtMdoId4Yweh2DpoD3OSG132L9jzxl8qk=
Subject key identifier:   6E:F4:88:E6:1B:7A:9F:12:15:28:4D:1C:7A:3C:0C:14:FA:24:C4:1D
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Certificate issuer:       /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial:       0B66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
Manifest number:          0B5E
Signing time:             Sun 01 Mar 2026 23:41:45 +0000
Manifest this update:     Sun 01 Mar 2026 23:41:42 +0000
Manifest next update:     Sun 08 Mar 2026 23:41:42 +0000
Files and hashes:         1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: uFaXk9efBpcBC8cFDQiXBhYqWRtmdUUwURIOyndEXKE=)
                          2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: gGOBRkWJQFEn3Ide6JWEEBoMC/t51zFgYubDAzKamCs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
                          rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2918 (0xb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
        Validity
            Not Before: Mar  1 23:41:42 2026 GMT
            Not After : Mar  8 23:41:42 2026 GMT
        Subject: CN=69a4ceb8-9b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:5d:45:1a:31:ac:f8:e8:a0:e4:f7:a0:08:
                    8a:95:36:a2:41:97:a7:7e:29:e3:66:5a:64:0c:75:
                    4f:3a:08:43:df:fe:97:87:af:00:0d:3b:06:fa:bb:
                    8b:91:36:b0:85:4d:a5:d7:47:1b:14:89:de:d4:38:
                    c3:ae:4f:82:7c:3d:b4:7d:f2:9e:4d:8b:cc:ed:30:
                    25:ac:f1:1c:18:0d:7a:6e:61:b5:cc:6f:4a:2e:05:
                    31:b5:1f:62:ea:d0:a0:3c:86:30:53:e3:af:4b:e0:
                    4a:13:c1:6f:6e:10:16:46:01:f1:7a:91:a5:75:8b:
                    a0:2d:95:fc:6b:7b:16:69:84:31:4a:9e:0e:34:bb:
                    85:8a:df:21:6a:c4:e2:3f:8e:cb:18:63:e8:88:4f:
                    38:8a:a4:1c:a0:df:b1:b2:95:16:d4:a5:37:4d:b4:
                    85:c5:25:3e:56:85:d6:df:6f:18:fa:b3:be:75:1a:
                    5f:d2:f8:f7:15:26:3f:c7:31:aa:2c:4a:cb:17:83:
                    1b:dd:00:79:d3:8a:f6:e8:49:b8:1f:19:74:67:ff:
                    b2:a9:c7:12:db:e0:8f:b3:37:0f:a9:f9:4c:9b:c4:
                    21:43:b2:01:86:c0:a6:80:b0:e3:6a:de:bd:f3:b4:
                    b0:ec:2d:b5:9d:f8:5c:8c:8e:02:a2:47:aa:54:9f:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:88:E6:1B:7A:9F:12:15:28:4D:1C:7A:3C:0C:14:FA:24:C4:1D
            X509v3 Authority Key Identifier:
                keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ad:b4:00:d2:d5:69:4d:51:aa:87:b2:6e:92:b8:61:7d:03:
         36:6e:e3:9b:af:64:02:f3:4f:41:00:88:4d:71:ca:09:88:45:
         69:1c:08:e2:64:24:fd:62:42:5e:3c:42:c5:03:14:e4:03:23:
         83:5d:82:d8:4a:e9:84:f9:83:22:b9:ee:ce:42:0f:1a:c4:e6:
         d1:bf:ea:1d:94:c9:91:03:e9:7b:73:f9:81:f4:a9:58:57:68:
         2d:dc:90:7b:93:6b:b0:3f:2e:57:d2:15:0c:07:7b:2c:2d:93:
         7b:7e:da:de:30:cb:2a:10:79:d0:7f:67:22:fa:86:a4:a6:89:
         cf:37:c5:f0:48:94:98:d7:88:95:61:ab:d9:6e:ec:2a:a4:ba:
         c6:eb:d9:eb:f1:d7:09:6b:f9:00:fd:ab:c3:8d:31:99:58:91:
         59:04:08:d5:88:a6:50:f4:d6:3a:3d:11:24:58:1e:ef:62:f4:
         73:a6:3d:1b:4d:d7:6b:8e:8f:ac:f1:10:5a:a3:f9:fc:eb:ef:
         f4:e2:21:13:c9:ff:b7:0b:cd:7a:50:69:6a:eb:8b:f7:ba:d3:
         14:19:7d:79:c5:b9:5f:86:85:79:98:d4:98:72:8b:27:6b:d2:
         20:bc:87:eb:e3:5d:e2:04:e8:3e:ae:ab:a2:97:a4:4f:f9:71:
         43:b7:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:29 2026 by rpki-client