Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File:                     kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier:          toxSvaSFG2wwK3g70u+fJBWxNPckZNrCmlnuFgIfjNI=
Subject key identifier:   42:AF:67:5C:2F:9D:46:98:49:F6:29:5E:C1:7E:6F:FD:9F:5D:10:70
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer:       /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial:       FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number:          F9
Signing time:             Sun 01 Mar 2026 23:09:41 +0000
Manifest this update:     Sun 01 Mar 2026 23:09:41 +0000
Manifest next update:     Sun 08 Mar 2026 23:09:41 +0000
Files and hashes:         1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: IZchVlcwtQ/6BREVpuqTP0ZXW/DJ3j9QJQm/Zfv5OQU=)
                          2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: YCpUxQ8dgkmMh3e5UHsZ7Ir2L2aOgpsDHkfqNgWqSFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
        Validity
            Not Before: Mar  1 23:09:41 2026 GMT
            Not After : Mar  8 23:09:41 2026 GMT
        Subject: CN=69a4c735-c2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:ce:ea:4e:91:92:a2:32:d7:33:95:47:a8:
                    42:b4:b2:98:02:01:67:a3:de:7d:9a:fa:7b:d6:8e:
                    a2:35:aa:08:a6:5e:09:c0:9e:a7:45:1b:60:fe:15:
                    21:b7:96:0c:47:b6:fd:ba:a8:3b:6b:c3:85:3c:85:
                    1f:0e:b0:b3:de:bc:90:f6:db:e9:c9:af:d2:e2:73:
                    89:64:58:01:1c:1d:b6:2b:af:1c:65:ff:f4:b1:25:
                    15:bb:4d:2f:bf:35:2b:fa:85:f9:de:9b:58:9c:45:
                    3b:e8:ac:aa:6c:52:18:4f:ae:43:7d:cc:44:78:36:
                    3c:99:6c:c4:01:2e:0f:87:41:15:9b:41:68:82:d8:
                    ed:c1:5a:4c:5d:c4:62:c4:c6:d2:29:e0:8b:1e:ab:
                    0b:4a:a2:cc:50:30:b7:9c:50:15:01:50:97:cf:e9:
                    f3:cf:5c:9a:70:10:01:6b:b9:eb:c6:9e:7b:67:5b:
                    bb:03:3c:a4:94:8e:21:27:d1:26:db:4c:3f:4d:bb:
                    4c:f6:ff:8b:3c:e1:46:0f:a2:52:b7:03:c9:bb:28:
                    02:06:a4:3b:ac:d2:2b:37:1b:66:10:da:39:43:1f:
                    b5:e8:08:26:3e:fb:a3:01:c5:e6:a7:b7:fc:ff:6e:
                    65:9e:54:18:e2:38:07:d2:e7:a8:ce:41:54:f4:07:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:67:5C:2F:9D:46:98:49:F6:29:5E:C1:7E:6F:FD:9F:5D:10:70
            X509v3 Authority Key Identifier:
                keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:bf:77:1b:a5:37:2d:b7:15:ad:86:94:59:cb:14:11:09:
         af:b5:11:bd:40:d1:ce:92:ba:db:1f:eb:96:6d:ea:b4:ac:36:
         79:7f:53:5e:8d:1f:14:fc:e7:c3:c4:f9:60:0d:b5:39:9b:51:
         52:89:fe:bf:cc:d3:26:d4:0f:2a:eb:f5:37:83:28:e6:d9:e1:
         d0:b0:67:89:35:22:ec:21:9f:e3:64:69:71:82:aa:05:c7:cb:
         b9:94:55:2a:c5:22:25:b7:22:cf:16:6a:1e:ec:a9:31:20:73:
         d3:ab:e6:3a:b7:73:1f:17:1d:49:85:0c:c1:2a:d0:c1:ea:25:
         81:fa:a5:7e:56:ee:bf:83:ba:9c:56:2b:2a:82:d0:53:0e:4d:
         74:ae:df:85:46:12:61:b0:f1:c1:db:e0:b1:20:c1:b4:6d:f5:
         06:06:a5:8e:cf:64:b8:69:70:c0:ea:2a:f8:cd:f4:55:e8:2c:
         70:c8:f8:3f:e9:f9:c7:db:cd:77:59:3c:61:7f:12:31:ff:f6:
         a6:ea:a5:f5:02:10:27:58:6a:3d:79:7a:c6:89:31:72:c2:e4:
         a8:da:e7:05:10:e0:be:b7:1c:cb:cd:f4:f7:b3:b9:a2:f6:e4:
         52:9f:40:17:bc:1b:c5:1c:0d:68:55:70:db:7c:20:4b:dd:84:
         67:cf:32:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:51:54 2026 by rpki-client