Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
File:                     qQILYm9QRkjk2_akIHbomXPEq8A.mft (raw, json)
Hash identifier:          4qm2wJZMclpKdxsbY87aYINI7RWLI0OZrEhYry4+MA4=
Subject key identifier:   76:52:7D:EB:82:8F:CB:20:77:6B:03:05:76:99:7C:47:19:28:0D:37
Authority key identifier: A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0
Certificate issuer:       /CN=A9198D6B/serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
Certificate serial:       08BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
Manifest number:          08B0
Signing time:             Mon 02 Mar 2026 02:59:14 +0000
Manifest this update:     Mon 02 Mar 2026 02:59:13 +0000
Manifest next update:     Mon 09 Mar 2026 02:59:13 +0000
Files and hashes:         1: qQILYm9QRkjk2_akIHbomXPEq8A.crl (hash: rC8pXf3ZgN6wScHky9/aq8fhDVM7angURvzfrSM0s5k=)
                          2: 0446C8B2945911EB83AC5363C4F9AE02.roa (hash: P9sNvR/Bcqt0bM7h111r4ZkTzU2KfMVGnEEXn/iTvs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl
                          rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198D6B, serialNumber=A9020B626F504648E4DBF6A42076E89973C4ABC0
        Validity
            Not Before: Mar  2 02:59:13 2026 GMT
            Not After : Mar  9 02:59:13 2026 GMT
        Subject: CN=69a4fd02-117a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:02:8e:fc:59:3b:c6:0b:cf:8a:0b:f1:cf:
                    2b:e4:0e:9d:dc:ee:00:53:a1:bc:95:a0:46:2a:d5:
                    ba:08:35:f9:34:6d:eb:db:d7:3c:7b:90:0c:f5:e2:
                    8e:45:55:41:5e:6b:c9:c6:a2:d6:7d:9a:fe:c4:9d:
                    fe:76:86:a6:3e:55:f4:ad:d2:33:fc:88:05:b5:26:
                    9b:f1:33:59:e1:73:c4:a1:e2:0a:cd:c4:12:15:6d:
                    d8:8f:21:17:24:ee:3e:2a:01:33:6f:92:73:74:a7:
                    74:2b:c8:75:06:04:fc:83:a5:22:de:32:04:91:ba:
                    2d:b1:2d:17:ab:6a:03:f1:ee:29:97:1d:cd:57:3a:
                    60:63:90:7b:75:e7:57:11:37:e8:0f:80:2a:5e:f2:
                    82:04:e5:04:68:70:c1:8d:78:5e:1c:51:1d:12:2d:
                    31:cd:c0:2a:1b:94:72:47:a5:ac:e6:b1:86:db:6c:
                    cf:d9:ce:b9:9f:27:8c:dd:01:ef:b9:6a:0c:ed:bf:
                    3a:f5:55:00:63:02:32:eb:be:be:28:6d:9b:17:07:
                    eb:31:bb:cc:2a:89:5f:73:24:4f:8f:f6:30:a0:65:
                    f6:86:76:b3:42:5a:7a:bc:f2:76:fa:32:e9:b5:a6:
                    12:04:a7:9b:dd:6d:45:8e:d1:d7:4a:fc:65:b7:50:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:52:7D:EB:82:8F:CB:20:77:6B:03:05:76:99:7C:47:19:28:0D:37
            X509v3 Authority Key Identifier:
                keyid:A9:02:0B:62:6F:50:46:48:E4:DB:F6:A4:20:76:E8:99:73:C4:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qQILYm9QRkjk2_akIHbomXPEq8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D6B/81E83F62D64A11EAB6A66410C4F9AE02/qQILYm9QRkjk2_akIHbomXPEq8A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:cc:fe:e4:17:e4:b1:3a:30:57:c7:1c:25:be:f2:a8:20:ba:
         f3:16:0d:08:df:0b:77:a2:96:9d:65:e4:6a:cb:4c:61:ae:97:
         b5:a5:e1:6a:c4:7b:bc:a0:4d:a0:d0:28:76:ce:d5:f1:31:7e:
         2a:63:5a:66:7e:3c:ec:6e:75:6a:ec:c6:cf:19:f9:74:90:3b:
         cf:19:29:74:f6:6a:83:be:1f:60:cd:da:c8:98:33:38:82:a2:
         d4:12:6e:5b:e5:78:7e:29:2f:4d:34:1a:42:d3:0b:c6:73:7c:
         48:54:bb:ac:a1:9f:7b:b8:e0:56:34:ec:8a:a0:2f:ba:2d:89:
         92:de:4c:f0:16:e3:fc:d4:2d:c8:51:e7:56:c9:91:52:9b:83:
         8f:92:07:ec:87:6e:78:9d:a8:af:e9:d8:9a:41:7e:59:b7:a1:
         f4:8b:e5:60:ae:90:34:c5:45:c7:b9:91:b6:a9:eb:1a:80:13:
         1a:8d:48:c6:03:3b:32:c6:0d:8e:1a:bc:a0:f3:ab:f6:57:9e:
         9a:fc:b7:40:53:34:79:15:71:c3:dd:64:6c:db:38:75:d5:25:
         58:82:58:00:ff:61:74:47:a3:1b:cb:32:7a:c3:8e:af:a1:54:
         3d:3d:d9:99:43:28:1d:1d:3c:a1:cb:eb:e1:19:8f:8f:d6:18:
         9f:ad:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:37 2026 by rpki-client