Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
File:                     qmMtxAKnAveanDaT6cxGxZge6Ow.mft (raw, json)
Hash identifier:          ldJnpPld+b8Gq35oko7noA8Kxv8TF+iXGob+iWzUmkE=
Subject key identifier:   8B:E9:29:90:63:4D:D8:FE:C0:D4:FA:30:67:01:C2:94:DF:B8:31:A1
Authority key identifier: AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC
Certificate issuer:       /CN=A91ADBA2/serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
Certificate serial:       1A84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
Manifest number:          1A7C
Signing time:             Sat 28 Feb 2026 16:23:00 +0000
Manifest this update:     Sat 28 Feb 2026 16:22:59 +0000
Manifest next update:     Sat 07 Mar 2026 16:22:59 +0000
Files and hashes:         1: qmMtxAKnAveanDaT6cxGxZge6Ow.crl (hash: WYe9nb6Mbff3ccNnRRvzExH1C7gJvR2FZSRGKaDWq7Y=)
                          2: 6C30EF68D9AD11EBA5CFBB17C4F9AE02.roa (hash: SrIrerALKHF8fg3qYryOHHoKKtapwkqh8dUDO5O36dQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl
                          rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 16:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6788 (0x1a84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADBA2, serialNumber=AA632DC402A702F79A9C3693E9CC46C5981EE8EC
        Validity
            Not Before: Feb 28 16:22:59 2026 GMT
            Not After : Mar  7 16:22:59 2026 GMT
        Subject: CN=69a31663-548e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9b:70:2c:38:7d:8e:55:62:52:a8:8e:80:77:
                    76:40:e9:05:ff:2b:a2:dd:98:21:9a:94:f6:5d:77:
                    8b:86:29:83:b7:6f:97:80:f2:a0:f5:3b:b8:18:6f:
                    3d:06:b7:b5:14:28:8e:d6:f2:83:21:8d:b6:a4:f0:
                    44:2d:56:f0:7c:ae:70:aa:51:99:5e:ea:0d:c2:83:
                    48:10:7b:9c:76:dc:28:1b:c8:1a:1c:bd:b8:02:bb:
                    6e:c0:c8:0d:1d:7c:45:91:12:f0:08:2e:8a:0c:0a:
                    9d:72:7d:45:cb:65:43:09:0a:b7:74:bb:2e:a9:12:
                    73:4d:24:56:20:1a:46:d8:13:87:a4:c2:41:07:c9:
                    68:9c:f0:18:63:eb:0e:ff:44:21:a0:65:a0:e5:06:
                    5d:42:b2:d1:71:80:eb:6f:5f:c2:ab:e7:6b:46:cc:
                    8c:ed:a5:8b:b4:cc:b4:95:26:44:fc:59:ff:dd:02:
                    8e:f8:92:a8:61:a8:e3:3a:1a:db:27:98:02:97:54:
                    76:05:b3:0c:fd:b6:87:64:35:17:94:1c:d9:6e:ed:
                    3d:07:fa:c1:07:a9:1d:85:b5:fc:0b:4e:31:f3:21:
                    37:71:a0:39:2a:d1:0d:ea:8b:03:3f:c8:2f:b9:35:
                    66:8f:96:1b:b5:d0:30:94:23:ba:f1:3a:40:32:bf:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E9:29:90:63:4D:D8:FE:C0:D4:FA:30:67:01:C2:94:DF:B8:31:A1
            X509v3 Authority Key Identifier:
                keyid:AA:63:2D:C4:02:A7:02:F7:9A:9C:36:93:E9:CC:46:C5:98:1E:E8:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmMtxAKnAveanDaT6cxGxZge6Ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADBA2/D6954412553B11E7AA0EDE2AC4F9AE02/qmMtxAKnAveanDaT6cxGxZge6Ow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c7:58:e9:0d:0d:98:46:77:0b:45:65:58:af:92:44:bc:0d:
         0c:a7:e5:2e:88:27:92:5b:61:84:36:30:d6:fb:e4:44:11:d6:
         84:a9:bd:13:03:1d:46:c5:83:5a:59:8f:17:ed:8c:ff:e3:7d:
         37:ba:80:06:5f:0b:31:54:11:98:ef:8c:4d:7c:c9:f4:36:c8:
         ec:16:8d:7a:4b:1a:09:78:00:07:14:19:2f:c9:2b:12:55:1a:
         9a:4b:d9:92:8a:b9:c0:3e:c2:1f:5c:e2:0c:35:f4:35:72:96:
         c4:2e:2e:77:63:52:20:39:99:fe:48:fe:39:50:f8:72:0f:87:
         b3:52:c3:bb:df:6b:65:87:3e:42:51:74:1b:d9:8a:28:af:59:
         7b:6d:1d:bb:a0:9c:9e:cb:6b:6a:a9:b5:d1:43:1f:34:fd:dd:
         1c:a0:8a:ca:4d:45:90:9b:94:ac:c5:44:85:f6:6b:61:30:9f:
         0e:24:1d:ff:c4:d5:39:01:79:4c:99:22:f1:14:dc:ea:fd:cd:
         e5:c7:9f:04:be:af:72:97:b2:71:e0:5d:e1:0c:c7:fe:e2:af:
         d4:99:c9:1e:2b:96:d2:a2:46:a8:22:e4:9d:83:a0:4c:e7:1f:
         5b:68:5a:9f:27:4d:0c:61:55:04:20:08:31:c7:c2:e4:c6:94:
         d1:d7:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:25 2026 by rpki-client