Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          0vVzfs26o2mvr+njNwd+j2mJnaKdrlX1m3JbFsG/cSE=
Subject key identifier:   63:84:65:F2:AB:9D:72:BB:1E:38:6A:7F:64:AD:B3:40:BB:89:07:D7
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       08AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          089C
Signing time:             Mon 02 Mar 2026 00:35:49 +0000
Manifest this update:     Mon 02 Mar 2026 00:35:47 +0000
Manifest next update:     Mon 09 Mar 2026 00:35:47 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: lSA9CHXqF3hpVlQleMIvTLrE0t4761RbJqHKLyLprZ8=)
                          2: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
                          3: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:35:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: Mar  2 00:35:47 2026 GMT
            Not After : Mar  9 00:35:47 2026 GMT
        Subject: CN=69a4db64-4dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:a6:39:ba:93:59:54:28:f2:fd:20:f4:0a:
                    77:cc:c7:7f:5d:77:33:69:f4:e7:f8:b4:2d:37:4d:
                    5b:b1:0b:d7:74:f7:8e:4b:98:2d:4d:3b:02:dc:5e:
                    7a:3b:b0:8d:7d:84:3c:ae:35:70:cd:8d:52:5c:7c:
                    cc:77:7a:6d:60:31:85:73:93:b3:99:81:93:a1:c8:
                    8e:47:8c:fe:ad:37:31:fa:8c:b0:a0:19:af:8e:ff:
                    01:68:1e:ca:72:2b:35:35:80:36:ea:66:d1:b6:af:
                    12:05:2b:31:6e:09:81:0d:a1:2a:a3:86:7c:9b:b8:
                    19:13:e1:3b:28:07:71:be:a4:f4:56:17:4f:4c:2d:
                    d9:38:2d:a2:b2:fe:28:aa:db:16:ab:c6:be:7b:fe:
                    8a:1e:25:38:fd:1e:e5:c1:9d:0a:06:4a:df:ab:39:
                    90:ad:da:96:e9:f8:1e:10:7a:55:d7:57:94:de:76:
                    b9:d8:16:57:92:a3:de:e0:ab:a9:8f:6e:cb:6d:9a:
                    7d:f5:29:bf:8a:38:5b:c9:bf:17:ef:96:e4:4d:48:
                    0d:12:ce:0d:f0:f2:10:84:d2:f3:a6:68:0d:12:88:
                    85:21:f3:47:29:a6:6e:e3:fc:93:e2:ce:d1:85:6b:
                    bc:bb:a5:54:de:1d:e0:91:bb:77:9a:c8:01:14:ca:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:84:65:F2:AB:9D:72:BB:1E:38:6A:7F:64:AD:B3:40:BB:89:07:D7
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:24:14:8f:1d:82:ec:d4:1e:60:36:e2:c4:03:e6:19:74:60:
         8c:fa:47:cd:16:7c:a6:cb:a6:c3:be:9b:cb:53:c6:71:a1:ed:
         30:1f:53:fe:44:ec:2b:05:b2:5e:ea:e3:8e:be:a4:14:ee:f7:
         d3:18:b2:4e:73:ac:2a:d7:18:cb:36:87:de:3f:3c:71:91:c1:
         ec:d3:ee:f2:c8:99:85:24:22:e2:46:dc:16:b2:dd:71:6a:fe:
         3b:49:1c:83:53:b4:10:43:1c:86:3b:81:05:34:33:ac:4a:c0:
         39:5a:77:e5:1e:a7:e0:39:bf:a8:33:e5:85:6b:65:81:01:5b:
         24:3b:9c:10:3d:9c:52:75:67:ec:69:a7:85:90:8c:55:e6:42:
         12:33:65:2c:39:87:e3:24:10:8d:4d:d2:88:17:06:1c:11:e7:
         90:84:cd:af:fe:88:0b:49:3b:4f:64:8c:cc:61:35:cc:86:02:
         6f:26:6a:d0:7d:ea:df:4c:f3:f7:07:03:35:80:b7:0b:da:8c:
         bd:15:5b:c5:f8:e9:98:76:b9:ec:39:0a:2a:62:f4:4f:0b:d6:
         86:0b:95:08:7d:7f:3c:90:83:a3:4a:fc:a7:ec:d7:46:e7:8e:
         15:26:fb:70:a6:43:73:76:b0:9e:e6:d4:6c:67:ac:8b:06:39:
         b2:12:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:08 2026 by rpki-client