Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          UL/SCXSmzHhrJxLuGHxOWyu+R7dLDIv8/6Z61OwZMPU=
Subject key identifier:   EF:70:B0:66:C9:2D:5C:E5:F0:FE:22:9D:BF:A1:9C:E3:2E:90:8C:16
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          016B
Signing time:             Sun 01 Mar 2026 05:53:43 +0000
Manifest this update:     Sun 01 Mar 2026 05:53:42 +0000
Manifest next update:     Sun 08 Mar 2026 05:53:42 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: AF6rac54iy0d7nnC10FyHOp90gBqX8pU+M3T/4LUpMg=)
                          2: 47142068221311EFB680F113C4F9AE02.roa (hash: eOIRibnSZ7zb8zXpiC5OYpXytGwFP6zwa+/fbeAxOO4=)
                          3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: k3OjV98AN2SowkZ89FdDV3rmcUlNd8FyOaF8PHB5wqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Mar  1 05:53:42 2026 GMT
            Not After : Mar  8 05:53:42 2026 GMT
        Subject: CN=69a3d467-12f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:f0:dd:72:cb:a8:82:bc:ef:6e:fe:1e:1e:
                    b2:bb:67:95:69:f6:33:22:dd:1d:11:dd:00:65:d8:
                    8e:6e:27:5b:e6:fb:e8:80:ad:38:a9:7f:1e:4d:59:
                    e2:fc:18:51:44:33:53:43:ed:7b:36:55:e9:d4:b3:
                    2f:79:24:bd:e3:66:ea:db:f4:87:2d:56:cf:7a:4a:
                    ad:74:16:b8:42:fc:78:36:bb:44:a6:8d:24:3f:b7:
                    80:ba:44:c1:61:4d:9e:6c:ec:4b:d7:dd:be:8a:e0:
                    83:5a:a3:82:20:ce:cc:ac:2d:05:cc:d3:ed:b4:c7:
                    12:e6:ad:ec:3e:cc:f3:42:8f:07:1a:5b:fb:dc:52:
                    88:18:d0:e1:08:d8:f1:f8:76:75:e6:aa:c0:49:13:
                    26:dc:73:0b:00:e4:47:0a:88:2c:53:1b:b2:2e:64:
                    e8:20:21:74:f6:70:04:e0:fd:91:d3:b3:51:58:08:
                    8f:22:48:e0:9e:21:18:54:73:93:9e:5d:9e:36:ab:
                    4c:25:a9:9c:b9:ef:01:60:37:72:c8:e0:7e:73:6b:
                    69:58:e1:e1:95:bc:6f:72:e2:74:6e:5c:a9:64:17:
                    30:c9:ef:bb:9c:74:05:b0:dd:34:52:ba:08:0b:44:
                    dd:84:8f:b5:b7:05:c2:b1:85:3c:af:f0:82:1a:2a:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:B0:66:C9:2D:5C:E5:F0:FE:22:9D:BF:A1:9C:E3:2E:90:8C:16
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:76:38:c5:6a:d5:fc:8b:04:4b:38:87:c6:70:d9:49:9a:
         89:d4:b3:e4:33:3b:b2:71:db:b9:51:a9:53:97:6a:60:83:a0:
         4f:cb:b1:b9:63:8e:16:f1:a1:cc:4b:26:b6:4d:52:21:24:98:
         c5:fa:22:15:31:99:f3:ad:2d:79:4e:ff:50:db:0d:99:b9:1a:
         61:17:67:18:55:fc:a7:7b:c1:19:54:5c:cc:c0:44:94:52:dd:
         36:c2:34:fa:7e:fc:0d:8d:a4:e5:9c:df:3e:ba:57:07:d0:bc:
         92:ec:2b:49:91:46:6c:e4:2b:ad:eb:45:07:a5:f3:96:55:e7:
         44:2d:d9:a3:09:48:0f:cc:c3:f6:7b:eb:2c:64:86:bb:29:f7:
         a4:0f:31:b0:cd:ad:91:6d:2d:6c:e8:96:f3:4c:b8:26:d0:db:
         ec:9d:77:47:0d:84:23:31:14:da:c9:58:d1:28:fe:f6:a9:2e:
         32:4f:46:eb:71:03:62:d1:6f:3f:cf:4f:14:62:00:d7:9e:41:
         1a:db:ab:3f:19:98:15:48:f9:13:61:96:90:93:37:61:06:07:
         6d:7e:34:ae:9d:e3:a5:cc:b5:85:63:b4:2f:9e:fe:27:b4:68:
         30:c1:b3:da:fd:af:aa:cb:1d:76:b5:de:6f:29:25:0b:52:21:
         0b:35:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:52 2026 by rpki-client