Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
File:                     qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json)
Hash identifier:          lXKBDdvNNvm8aprbaldrRrRgjhk4GFtB1mzPPyoXOR0=
Subject key identifier:   CB:F7:83:86:3B:17:58:02:B5:C7:32:2E:8D:9E:29:EF:3F:F1:A0:14
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
Manifest number:          0285
Signing time:             Sun 01 Mar 2026 23:42:35 +0000
Manifest this update:     Sun 01 Mar 2026 23:42:33 +0000
Manifest next update:     Sun 08 Mar 2026 23:42:33 +0000
Files and hashes:         1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: 9qY5RpQ7v6aRTNg0sPychoWLkt8OmwC+uGla2n/Us2M=)
                          2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: G7jsBk4fvcjh37nS5qZqNh5Tij0qnfSlco4ujTa7Y4Y=)
                          3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: 5GcZNiQopX8Mo16CBA648+0uWjV9xMYra66zDK9RZXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Mar  1 23:42:33 2026 GMT
            Not After : Mar  8 23:42:33 2026 GMT
        Subject: CN=69a4ceea-f46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:ec:1d:0f:7b:3c:5a:c2:1e:b6:0d:9e:63:
                    b8:0e:1a:04:3d:78:26:72:23:5f:9d:c3:a2:5a:e9:
                    18:89:e5:ef:12:08:2e:50:93:d9:9c:d3:69:c5:f4:
                    0c:93:7e:be:a5:d0:99:86:11:df:9d:56:50:ba:d9:
                    47:f3:4a:ae:b2:22:62:9e:60:50:f9:2a:2d:2a:8e:
                    71:60:a4:21:6a:8a:9b:53:c3:8e:80:4e:b9:06:fe:
                    a8:fb:24:ad:de:36:4b:82:e9:f4:2a:24:3b:38:55:
                    63:41:03:95:49:92:57:f7:e6:ac:1f:c0:39:d7:3d:
                    33:8d:23:0c:c3:a3:9d:bb:86:73:d7:84:e9:23:12:
                    51:f7:f7:77:18:21:c1:a3:ec:57:55:ca:28:07:f7:
                    98:3d:0b:5d:73:76:d7:05:14:55:9d:d8:8b:c8:2c:
                    16:8a:ed:0b:27:2a:db:63:1b:e0:a8:5d:f5:25:10:
                    35:33:03:0e:8a:fe:c5:5e:72:5b:36:fe:e8:5f:e5:
                    e6:d1:08:6b:18:55:68:4e:1f:53:34:5a:be:52:42:
                    8c:6f:5c:04:45:87:75:b9:96:69:e0:29:73:2c:8d:
                    67:bd:4f:2a:04:17:fa:86:45:b7:f8:ec:ba:d6:89:
                    d4:ce:e9:c4:4c:0c:86:94:5e:53:b8:36:1a:7a:1c:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F7:83:86:3B:17:58:02:B5:C7:32:2E:8D:9E:29:EF:3F:F1:A0:14
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a1:d0:32:65:2f:05:72:ad:fa:11:7e:8b:32:ff:98:ae:44:
         8e:14:bf:3b:be:cc:a0:e3:b5:58:d6:c8:ca:f9:5d:97:7a:76:
         88:e9:a6:24:9a:df:ba:bd:c2:af:b8:48:7e:7a:2b:87:53:a3:
         8a:e2:37:8d:3a:5e:db:16:00:35:45:23:c9:72:de:a5:8c:a4:
         1f:61:21:9b:f6:6c:96:f9:e5:d1:91:64:16:62:59:d3:72:8c:
         8a:6f:74:1b:6c:c9:e5:a9:51:24:07:8c:f9:14:7d:de:79:9b:
         91:f2:9b:fb:6b:9c:9d:88:a3:39:ff:a4:a3:72:6a:74:64:a5:
         a1:ff:96:27:95:d2:42:a6:6b:af:eb:d2:f1:8b:98:2a:77:29:
         93:89:fc:eb:8a:fb:ac:22:06:5c:9a:81:8d:66:0c:7a:f0:ba:
         69:cc:b2:bd:fc:9b:fd:c5:5e:77:92:5f:b4:1a:30:ba:f4:60:
         97:50:ca:64:38:ec:22:30:4f:15:71:d3:79:17:f0:89:47:a2:
         2e:c0:2b:8f:25:04:9e:e1:1f:2f:9e:ba:f1:c3:4c:ad:0f:71:
         6c:5c:a6:7e:56:e1:34:cc:e4:29:3d:b0:94:40:d4:5e:4a:c9:
         f4:14:02:dc:b7:83:5d:3e:69:6c:90:5c:9b:ff:a4:23:46:6b:
         47:0a:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:42 2026 by rpki-client