Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File:                     qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier:          kM/QbgGvNdg21+CLpV5KpHLZskIX5XhS+O4fkMelAWc=
Subject key identifier:   A1:80:FE:87:FA:AA:41:70:4B:14:A2:2D:45:1B:C4:7A:42:F9:CB:99
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number:          01C1
Signing time:             Sun 01 Mar 2026 22:31:10 +0000
Manifest this update:     Sun 01 Mar 2026 22:31:09 +0000
Manifest next update:     Sun 08 Mar 2026 22:31:09 +0000
Files and hashes:         1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: wKiVSnfrMD59Xe7FYVLpfLBN9RDx4JXl8n9EtTlSsmU=)
                          2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: 4G73HCE8g8pIr00a6pISVi9GuOkrooKElm9yIwS+mCs=)
                          3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 52J+v1k8tWgHY+HhlcSMLxR4J+xohtBlTQq3KKgwtyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Mar  1 22:31:09 2026 GMT
            Not After : Mar  8 22:31:09 2026 GMT
        Subject: CN=69a4be2d-3d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:89:3d:da:6c:ba:f1:b5:a9:2b:d4:75:2d:
                    ce:bc:d8:7d:bc:89:03:b6:32:25:6b:be:0b:6f:44:
                    57:7e:16:d4:ff:14:c2:8c:69:56:fa:3f:4d:d5:de:
                    68:0f:e7:75:cc:bc:44:d7:7b:29:7b:96:ac:6a:69:
                    68:97:91:82:d0:9f:b6:c9:d4:1f:f4:9f:b7:c8:68:
                    fb:37:c8:b9:42:83:28:ce:4c:99:3b:7a:c7:99:9d:
                    6f:41:52:e3:72:f1:c7:e7:b7:13:25:ff:77:a0:0a:
                    dd:a9:f5:18:62:e0:f1:6d:6d:11:2c:8c:10:ed:8d:
                    90:0e:d7:81:56:3e:58:40:28:16:ce:a6:8c:1c:7f:
                    27:a1:2c:c0:47:9b:da:f9:a4:af:f3:9e:6b:48:9b:
                    d8:c7:ec:c8:dc:33:fe:8f:5e:db:04:bd:08:07:0a:
                    da:0c:b2:07:b6:e4:7c:be:8a:f6:db:36:00:ba:b1:
                    63:14:d0:48:53:40:1f:67:7d:03:74:b4:65:df:6a:
                    76:d5:65:fe:38:82:59:a7:b4:8a:4e:ec:a5:84:75:
                    b7:01:b0:0a:a6:98:e3:0b:71:b4:97:c8:58:78:c6:
                    c4:da:90:f1:83:a5:25:18:d5:08:b1:ab:d1:38:e6:
                    92:2d:d6:8f:4c:27:c4:c4:93:b2:cc:60:90:eb:71:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:FE:87:FA:AA:41:70:4B:14:A2:2D:45:1B:C4:7A:42:F9:CB:99
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:07:eb:d1:24:04:ce:11:a5:47:64:99:fb:59:7c:9a:f3:
         f1:cf:c9:29:75:ae:5e:35:0f:03:64:a7:7b:af:6d:8e:16:94:
         0c:ab:4c:d9:48:4b:48:76:bd:d4:d2:4e:9e:ce:9e:08:4b:9e:
         49:e0:87:5c:2e:4d:53:e3:fd:6f:38:d2:e7:07:95:c8:f4:20:
         a8:44:cc:af:03:9e:b0:86:7d:05:4c:be:da:a3:24:da:14:d5:
         4d:8f:49:73:e7:62:0e:5c:79:1c:83:17:25:7c:ed:bd:44:f8:
         44:f5:7a:70:1b:48:52:68:30:16:cb:41:3b:1f:a5:6c:59:97:
         53:bb:5f:ed:19:0b:35:08:1f:61:c4:0e:cf:49:fa:48:0e:58:
         5b:a3:63:66:cd:aa:9b:b6:0a:f1:88:a7:bb:35:5e:5d:4b:4b:
         53:69:22:0c:65:7d:d5:73:68:b5:25:ad:6a:3a:1a:6a:0f:cd:
         f8:39:7f:9d:2a:aa:9b:28:09:80:b8:86:18:94:d6:18:ec:1d:
         6f:4b:6b:ec:bd:c6:09:07:e1:f3:67:37:6a:0b:89:95:03:40:
         3d:26:7c:a3:bf:91:fb:cd:e2:38:7d:ae:c7:6f:7c:d0:56:24:
         4a:f5:c8:67:c8:23:f8:4c:08:2e:95:8b:79:74:68:46:b9:bc:
         9e:27:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:08 2026 by rpki-client