Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File:                     qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier:          CttWc4rZZz5M2ZF0x59ulze8QcD9LrvVxMxVOpkOOiI=
Subject key identifier:   EF:15:0A:6B:18:13:CE:C6:05:E1:AC:53:AC:97:B6:8F:8F:95:A5:49
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer:       /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number:          78
Signing time:             Sun 01 Mar 2026 09:09:14 +0000
Manifest this update:     Sun 01 Mar 2026 09:09:13 +0000
Manifest next update:     Sun 08 Mar 2026 09:09:13 +0000
Files and hashes:         1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: 5J2NFiewWGIcazWhH6WunmMEQN+/I2QCFpQv0AkiHJk=)
                          2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
                          rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
        Validity
            Not Before: Mar  1 09:09:13 2026 GMT
            Not After : Mar  8 09:09:13 2026 GMT
        Subject: CN=69a4023a-c908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:85:5c:04:80:d3:c2:cb:ae:5f:00:82:94:
                    33:dd:d1:96:02:f4:b8:84:a3:07:b8:61:65:86:2c:
                    ad:58:55:6b:1f:e0:52:c4:d1:20:51:49:dd:4b:e9:
                    2d:02:d6:a6:99:ce:79:91:d7:91:a8:ad:50:fa:62:
                    b9:44:26:bb:5d:58:7e:53:15:4e:95:7b:cd:12:7b:
                    eb:49:95:3a:a9:27:38:3d:23:93:4e:4e:21:84:0c:
                    06:b5:bd:9a:a9:4f:da:bd:25:ba:c6:40:7b:d9:28:
                    f7:d8:84:ea:fa:0f:b3:59:0b:dd:f8:24:84:5a:7c:
                    fa:4c:7e:c2:99:a7:ee:0e:8b:6f:cc:0d:32:28:2f:
                    ac:01:1c:24:f7:73:0f:b9:c3:cc:45:23:43:c9:e1:
                    ba:ba:6e:0a:e9:8c:79:9a:f8:ff:70:db:a9:a2:0b:
                    ff:c2:ed:44:77:bd:59:79:3e:35:27:3c:7b:6a:c7:
                    68:3e:78:23:53:d2:54:62:d6:bf:b1:6c:ac:d8:66:
                    a8:96:80:79:ee:59:f5:dc:d0:8b:91:f3:3e:85:91:
                    74:45:98:08:4d:b5:06:90:7d:12:57:cb:9e:46:1a:
                    b8:23:ad:ae:b8:b6:49:18:84:b2:b4:79:1c:4b:b1:
                    8f:7a:14:3e:fc:30:12:c7:89:63:ca:d9:40:94:6f:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:0A:6B:18:13:CE:C6:05:E1:AC:53:AC:97:B6:8F:8F:95:A5:49
            X509v3 Authority Key Identifier:
                keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:83:13:63:9b:13:ce:bb:41:5e:b5:ad:d7:53:b7:57:a0:
         f3:e3:0d:3a:75:41:44:7c:e3:d9:a5:54:bc:77:f5:46:81:4b:
         cf:f5:48:5f:04:86:58:e8:92:77:17:fe:6c:90:d8:05:91:48:
         2e:65:fb:7c:64:e7:bc:11:48:4a:4c:c2:e2:84:bc:e1:30:40:
         e2:63:7e:3e:ce:f6:2f:60:02:fb:35:ce:a8:62:ab:2e:ba:7c:
         ed:cf:86:2d:2b:b3:61:99:13:c2:1c:eb:21:4c:fa:c9:46:b0:
         93:06:b4:1d:e2:35:ef:34:a4:b9:41:a6:a5:10:26:58:c4:2c:
         7f:2d:34:d2:bc:35:12:1b:15:0e:56:4f:59:5a:87:db:51:24:
         f0:2b:09:7d:60:50:21:e3:0a:f0:15:12:47:66:79:25:09:0b:
         15:56:a7:4a:95:c6:34:62:c4:7c:d2:e0:51:26:48:c7:c4:b2:
         14:23:95:25:a7:a2:b1:11:83:23:4d:10:c1:d9:bf:ed:25:36:
         04:58:1c:18:de:1c:34:10:ac:f7:13:89:e3:87:9b:93:dd:ea:
         2c:1b:45:55:b9:0d:90:23:b7:09:db:ee:b5:0f:32:ac:14:6c:
         df:f8:9c:23:a3:98:c1:f9:c0:f2:95:f2:78:f7:59:7f:81:24:
         fd:fe:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:30 2026 by rpki-client