Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
File:                     qz22NdhTYB5LpVUAZxIB2Jb-za0.mft (raw, json)
Hash identifier:          9Z9LDVoNqJTzcMBvZs/As4PbD0w4TSxOlpHrJDPAmAo=
Subject key identifier:   44:1E:44:A7:54:C7:11:8C:8C:6F:9F:35:5D:0E:20:64:8E:CD:A9:59
Authority key identifier: AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD
Certificate issuer:       /CN=A917FDF3/serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
Certificate serial:       094E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
Manifest number:          0946
Signing time:             Sat 28 Feb 2026 20:27:30 +0000
Manifest this update:     Sat 28 Feb 2026 20:27:29 +0000
Manifest next update:     Sat 07 Mar 2026 20:27:29 +0000
Files and hashes:         1: qz22NdhTYB5LpVUAZxIB2Jb-za0.crl (hash: EeD93sgLJA9P+/yG46GsUeu8zQvaSobp3RmYQMij6do=)
                          2: 0FE0AF42B5DB11EA9DA12556C4F9AE02.roa (hash: Fs5lIXhoeLDLVgaGXIOh275fjXBBfxZsCamTtOxAxUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl
                          rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382 (0x94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FDF3, serialNumber=AB3DB635D853601E4BA55500671201D896FECDAD
        Validity
            Not Before: Feb 28 20:27:29 2026 GMT
            Not After : Mar  7 20:27:29 2026 GMT
        Subject: CN=69a34fb1-ccae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:65:49:ee:2b:d4:c7:2a:91:a5:39:45:5f:
                    b0:3e:b3:1c:59:72:7f:6a:40:d8:59:cc:8f:e5:e5:
                    a5:b0:4e:c6:4b:25:f0:86:96:59:f2:4e:c8:75:92:
                    18:88:2c:11:b6:e2:07:36:9b:e5:47:e4:40:90:54:
                    d2:5b:02:c0:e3:4d:32:08:8e:52:d1:2c:84:85:80:
                    1b:ff:5a:3b:05:1f:fd:be:a6:d6:52:8b:80:b9:ee:
                    8e:83:9e:16:a9:a8:b0:a9:82:96:1c:e4:37:2c:0b:
                    07:fe:95:8e:95:56:a3:00:a5:b7:04:32:94:84:29:
                    f4:33:b1:40:ed:f4:08:18:f7:30:12:63:b0:44:cf:
                    16:e4:ef:ec:dc:bf:ea:69:aa:e9:03:9e:92:26:06:
                    ef:b2:e2:48:ad:82:c8:2b:a8:70:c5:13:31:1a:02:
                    a5:96:9e:77:1d:79:b8:bc:8f:e5:c1:4f:79:12:4f:
                    88:af:43:42:fc:f6:a6:bf:e5:cd:8f:d8:78:ef:03:
                    4b:56:05:37:61:9d:6b:ca:07:f2:16:15:a8:63:ef:
                    e7:c3:61:c4:8a:a6:3e:de:c6:bd:2e:60:bf:98:1e:
                    da:f6:dd:69:fd:ab:ba:c2:53:ac:64:f0:ec:a3:a4:
                    70:98:54:5d:d2:05:19:bf:ab:e5:29:f5:c1:cf:46:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1E:44:A7:54:C7:11:8C:8C:6F:9F:35:5D:0E:20:64:8E:CD:A9:59
            X509v3 Authority Key Identifier:
                keyid:AB:3D:B6:35:D8:53:60:1E:4B:A5:55:00:67:12:01:D8:96:FE:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qz22NdhTYB5LpVUAZxIB2Jb-za0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FDF3/B3A852B2B5D911EAA6B88754C4F9AE02/qz22NdhTYB5LpVUAZxIB2Jb-za0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:55:18:b1:89:ff:c6:81:55:52:39:6e:fc:98:7f:5f:8b:
         1c:0f:4f:0d:7b:46:14:36:0a:dc:8b:97:4f:62:ae:f6:d8:f8:
         fd:78:7c:4f:b8:a6:23:18:58:5b:63:15:00:51:b2:fd:02:90:
         0c:6f:37:19:92:6a:7e:4f:9f:2e:1f:5b:b3:0c:36:eb:b6:d1:
         36:f6:12:69:83:23:b1:8c:30:e4:81:d7:3a:32:9d:e0:45:76:
         ac:02:cb:00:b7:c5:92:af:df:10:93:4e:cb:4e:1a:e5:8a:98:
         76:08:4c:bc:0c:d4:02:ff:e5:1f:7e:11:84:7e:92:c8:19:9e:
         8e:de:2b:93:05:a7:6c:ee:5e:1f:fc:c5:34:50:85:04:2e:81:
         68:4a:b5:15:72:c9:4e:8d:12:05:aa:94:3a:33:93:1d:dd:77:
         e0:9d:85:fb:5d:4d:65:f3:e5:6b:d4:92:0c:4d:2a:d9:2b:53:
         8b:1e:57:4e:e8:4a:56:dc:7d:ad:37:6b:8f:3d:3f:ac:5c:e9:
         48:1e:59:85:51:68:8a:8d:01:04:83:73:6f:4b:4e:ff:5a:b2:
         19:b6:de:e6:b2:1e:0f:30:81:f4:4a:d0:da:a2:a0:50:7a:bf:
         cd:2d:0d:ed:08:22:e8:d0:47:fe:20:6b:de:e1:c4:44:16:0e:
         13:09:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:34 2026 by rpki-client