Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
File:                     sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json)
Hash identifier:          9JZalkKGTgp96oyruIgZFG4RKEOoKzwCoPn6uSOVC8g=
Subject key identifier:   EA:03:D0:AB:BA:7F:BC:82:1F:10:28:93:57:F4:D5:A6:32:4D:DB:F3
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Certificate issuer:       /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial:       0CB4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
Manifest number:          0C85
Signing time:             Sat 28 Feb 2026 18:50:51 +0000
Manifest this update:     Sat 28 Feb 2026 18:50:51 +0000
Manifest next update:     Sat 07 Mar 2026 18:50:51 +0000
Files and hashes:         1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: FtLfviD6lH/Wj6Ib0mEGze8gKwQtHYcyY1oNuo0aPOY=)
                          2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: I+esccoiwzdgHNsyPoOxcDay6S6R3DAFla0i6sby9pU=)
                          3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: M6pucHFMXfG0koXLLg4E/7INSEC19wV7hM909Gs8BUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
                          rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3252 (0xcb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
        Validity
            Not Before: Feb 28 18:50:51 2026 GMT
            Not After : Mar  7 18:50:51 2026 GMT
        Subject: CN=69a3390b-7bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:c8:90:eb:70:5b:18:a3:c4:97:73:7d:3c:
                    ec:f3:8e:45:92:e7:93:71:33:e4:c4:59:e9:57:df:
                    f0:f2:f6:25:de:94:fe:17:62:12:ed:6a:f6:bc:1d:
                    c4:cd:b7:0f:f0:4d:eb:ed:5b:ac:d1:ed:e3:9a:dd:
                    22:4e:34:b5:6d:6c:d5:39:c2:72:62:91:6c:22:b2:
                    0a:a4:38:bd:58:96:1e:e7:ce:ab:16:ab:45:81:29:
                    be:1e:58:0c:1d:38:54:f7:ae:29:2d:e4:61:53:a0:
                    23:e3:4a:d9:28:2c:63:31:50:92:fd:a1:7e:01:96:
                    15:07:a0:b4:8c:9a:0a:22:7c:30:cc:9c:27:27:85:
                    43:b0:6f:03:8f:30:c7:1a:8f:ef:53:a7:20:6e:f5:
                    a2:bb:ea:04:fb:e6:cc:0e:47:5a:f9:00:36:da:3b:
                    dd:a5:7c:ed:73:18:f3:94:4a:9c:67:f3:54:b1:f0:
                    8a:99:6c:78:74:38:51:55:a8:f2:9e:53:d8:1e:c7:
                    df:9c:26:3e:1a:57:73:86:15:b9:1c:80:f2:21:e5:
                    cc:2c:ba:e1:07:2b:27:a4:8b:e3:68:94:91:42:b8:
                    a9:cf:da:b0:f4:b8:78:03:4a:5e:40:90:34:a9:44:
                    8e:cc:84:9b:47:5d:af:98:45:5f:33:34:bc:3b:64:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:D0:AB:BA:7F:BC:82:1F:10:28:93:57:F4:D5:A6:32:4D:DB:F3
            X509v3 Authority Key Identifier:
                keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:21:b9:ee:81:1f:a7:29:08:f4:ff:6f:eb:5a:38:ec:ab:
         d5:cc:48:5b:47:ec:5f:9f:f4:03:25:8f:a2:5a:6f:53:c5:9a:
         5c:81:6e:8d:4a:3f:d4:6d:2f:8f:20:97:bf:be:91:8e:4a:ec:
         f7:2c:df:04:91:77:14:4f:ec:7b:ba:07:e1:9d:ec:1c:b1:0d:
         38:46:cc:02:dd:81:12:c0:83:cf:a4:04:89:df:64:c3:3c:a6:
         f1:56:76:21:35:55:57:58:51:07:88:c9:e6:f4:7e:a9:b4:40:
         ef:e6:71:bf:ba:12:a4:74:d4:b3:29:c0:f7:46:24:b9:9f:d3:
         7b:1e:58:bc:95:a7:ba:19:14:32:61:e4:68:89:de:0d:d9:2b:
         46:ee:1c:69:d3:d9:e8:00:49:16:cd:29:75:9d:0d:05:81:c7:
         b3:15:56:d9:87:08:ed:9a:ae:5c:f2:17:08:d3:74:0f:28:80:
         15:3c:e7:ee:8e:e5:3e:d8:8a:4a:02:e8:b8:a8:93:a0:16:e5:
         66:77:1b:47:b6:a5:9c:57:72:61:ab:2e:d2:cb:39:4b:f3:46:
         f9:3b:99:0b:2f:ca:0b:e9:0f:59:7d:50:7a:91:ee:5d:c2:f0:
         06:ea:1b:10:e6:ff:10:0b:5a:d9:08:97:88:cc:f0:5c:76:d2:
         94:3b:db:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0
MzYxODMyNDgwHhcNMjYwMjI4MTg1MDUxWhcNMjYwMzA3MTg1MDUxWjAYMRYwFAYD
VQQDDA02OWEzMzkwYi03YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiVvIkOtwWxijxJdzfTzs845FkueTcTPkxFnpV9/w8vYl3pT+F2IS7Wr2vB3E
zbcP8E3r7Vus0e3jmt0iTjS1bWzVOcJyYpFsIrIKpDi9WJYe586rFqtFgSm+HlgM
HThU964pLeRhU6Aj40rZKCxjMVCS/aF+AZYVB6C0jJoKInwwzJwnJ4VDsG8DjzDH
Go/vU6cgbvWiu+oE++bMDkda+QA22jvdpXztcxjzlEqcZ/NUsfCKmWx4dDhRVajy
nlPYHsffnCY+GldzhhW5HIDyIeXMLLrhBysnpIvjaJSRQripz9qw9Lh4A0peQJA0
qUSOzISbR12vmEVfMzS8O2RBvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOoD0Ku6
f7yCHxAok1f01aYyTdvzMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD
MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS
dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdzohue6BH6cpCPT/b+taOOyr1cxIW0fsX5/0AyWPolpvU8WaXIFujUo/1G0v
jyCXv76Rjkrs9yzfBJF3FE/se7oH4Z3sHLENOEbMAt2BEsCDz6QEid9kwzym8VZ2
ITVVV1hRB4jJ5vR+qbRA7+Zxv7oSpHTUsynA90YkuZ/Tex5YvJWnuhkUMmHkaIne
DdkrRu4cadPZ6ABJFs0pdZ0NBYHHsxVW2YcI7ZquXPIXCNN0DyiAFTzn7o7lPtiK
SgLouKiToBblZncbR7alnFdyYasu0ss5S/NG+TuZCy/KC+kPWX1QepHuXcLwBuob
EOb/EAta2QiXiMzwXHbSlDvbug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:26 2026 by rpki-client