Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
File:                     Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft (raw, json)
Hash identifier:          MdOs121bU+m1O2ZR3cK0lh8Fon0SGv/KX7wL0fxxtJY=
Subject key identifier:   A1:B3:EF:11:D8:70:90:4B:32:96:43:19:A4:55:21:B6:CB:DB:48:49
Authority key identifier: 43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4
Certificate issuer:       /CN=A91978DD/serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
Certificate serial:       17C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
Manifest number:          17B9
Signing time:             Sat 28 Feb 2026 16:37:28 +0000
Manifest this update:     Sat 28 Feb 2026 16:37:27 +0000
Manifest next update:     Sat 07 Mar 2026 16:37:27 +0000
Files and hashes:         1: Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl (hash: mzK/900zxhYvMtKTP4QOTwoiHBEESO+uxc5OLtaRYIk=)
                          2: 16ABD910E0C111E7BA64DE22C4F9AE02.roa (hash: lHKNLWfYNI9WQcRtKzmUJBeHs5miXzhGVpBtJH3ux+Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl
                          rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6083 (0x17c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91978DD, serialNumber=43D250D5C1F609ED174DFF264301DB45BE25B1B4
        Validity
            Not Before: Feb 28 16:37:27 2026 GMT
            Not After : Mar  7 16:37:27 2026 GMT
        Subject: CN=69a319c8-4a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:e8:bb:09:21:d3:d8:bc:c7:2b:64:58:d7:
                    dd:a9:7a:1e:79:c2:a8:db:1c:8e:c3:f2:5f:33:0e:
                    5e:03:24:81:6f:0e:f5:d8:b9:f9:a2:88:98:57:cc:
                    8b:1d:ca:91:35:72:f9:67:e7:b7:e8:a5:99:0f:33:
                    b0:d0:6e:04:a7:f2:42:b8:9b:ef:b1:4d:14:58:21:
                    fa:a3:17:87:ba:61:74:9b:3f:6a:21:97:a5:9a:71:
                    8f:85:27:70:df:5d:73:62:87:ad:cb:d8:c1:ed:bb:
                    a9:85:e9:71:21:3b:ba:4a:5c:cb:97:df:5d:fc:0a:
                    d4:6e:d6:04:27:ea:0b:78:45:be:b4:c5:42:5a:23:
                    3c:4e:84:8d:8d:ba:f9:24:e1:91:c0:46:d3:9d:ea:
                    81:d3:89:65:8c:8b:b3:3a:1c:3c:f4:75:cc:95:3d:
                    95:37:76:2a:57:83:cb:89:d5:39:0d:15:f5:2a:58:
                    28:d6:ee:23:63:bc:b3:52:15:c0:65:09:62:d1:cb:
                    2c:79:32:07:4a:2e:cd:6f:fd:25:48:8e:fc:60:75:
                    c1:d6:05:61:8f:69:aa:ad:47:07:32:bf:16:12:55:
                    28:f6:2e:06:2b:85:86:52:c9:d4:cd:f1:90:ad:06:
                    09:cb:ef:17:33:f5:31:3e:d9:00:23:cc:97:06:51:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B3:EF:11:D8:70:90:4B:32:96:43:19:A4:55:21:B6:CB:DB:48:49
            X509v3 Authority Key Identifier:
                keyid:43:D2:50:D5:C1:F6:09:ED:17:4D:FF:26:43:01:DB:45:BE:25:B1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91978DD/CC18D9D4E0B611E799A2B682C4F9AE02/Q9JQ1cH2Ce0XTf8mQwHbRb4lsbQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:54:38:8c:53:66:d8:34:01:44:a9:96:c7:8f:4f:d8:36:43:
         9b:e3:5d:d8:a8:a9:37:e8:96:9b:90:5d:b2:5f:72:24:ee:ce:
         bd:87:50:b3:48:09:ec:78:4e:54:88:19:8b:df:9d:e0:22:04:
         25:d3:c9:0d:96:89:24:84:27:f6:c3:df:14:89:a1:db:93:02:
         91:5d:64:f7:ad:17:91:39:45:00:fb:2e:eb:e6:2f:14:a9:f3:
         bd:e5:05:67:5b:7c:39:cd:c6:3c:0a:c4:2f:29:04:0a:74:bc:
         e4:70:93:f5:bc:9b:7c:08:a1:9a:c0:51:56:ef:3d:2d:ee:f5:
         3f:99:bb:3c:c4:d5:70:5c:36:f8:49:bf:ea:1e:36:01:52:be:
         9c:00:1e:d4:f7:a2:92:d3:4c:aa:16:82:3a:32:fa:f9:c1:53:
         98:a2:5e:aa:55:92:7d:90:41:50:26:8b:3a:50:78:51:00:d2:
         3d:3c:d7:1c:c8:3d:b9:ff:18:36:a0:a2:fc:f8:db:fb:93:78:
         54:c2:17:b2:b3:bd:ed:77:e5:b5:ad:57:1c:b2:35:7f:0b:c1:
         f8:f3:cc:f1:4c:ab:5d:7d:52:85:be:67:fe:6d:12:ba:1e:da:
         19:5f:89:51:ed:c0:0c:11:8c:0e:12:f5:da:94:ed:d1:36:28:
         c3:f0:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:38 2026 by rpki-client