Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
File:                     qSFjXHST8hzSYJPVkDUQgC9ONYY.mft (raw, json)
Hash identifier:          xU1FwIQMmoqJcz9JastjUBnY0cxnLKhDd0diQFjkM+Y=
Subject key identifier:   4C:CD:EA:C1:82:CB:6F:F4:09:34:FC:0D:E9:68:53:42:0A:4C:12:88
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Certificate issuer:       /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial:       0C09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
Manifest number:          0BE9
Signing time:             Sun 01 Mar 2026 23:39:28 +0000
Manifest this update:     Sun 01 Mar 2026 23:39:26 +0000
Manifest next update:     Sun 08 Mar 2026 23:39:26 +0000
Files and hashes:         1: qSFjXHST8hzSYJPVkDUQgC9ONYY.crl (hash: PJhECMg1Xx8p0kAucNeQ1+fii3kEU43BCgSt8Gatp5Y=)
                          2: 8610B9DCF33F11EEB412F210C4F9AE02.roa (hash: FPfgp7Al/sAnJcpnbzxEl6750GjZ2NbI2QBuF/gjvuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3081 (0xc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586
        Validity
            Not Before: Mar  1 23:39:26 2026 GMT
            Not After : Mar  8 23:39:26 2026 GMT
        Subject: CN=69a4ce2f-ec6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:43:a2:17:07:d8:46:1f:ee:07:f7:c1:92:
                    fa:f2:01:77:9e:5d:1f:bc:9f:07:d3:97:4c:e2:42:
                    ab:5e:63:76:d5:c2:58:10:79:14:f2:09:26:dc:53:
                    41:1a:d0:c2:00:94:6e:e7:ab:84:0a:a7:44:23:c6:
                    91:56:3b:c7:65:83:5a:de:cf:7e:1c:39:b6:d2:fc:
                    55:d3:87:11:a0:45:9c:ee:0e:a6:ef:43:2e:1e:4e:
                    fd:36:85:1d:ab:12:e2:25:78:d6:1d:0a:1f:f1:68:
                    df:f9:95:c7:93:c7:18:a7:5d:76:45:2c:eb:d4:81:
                    36:4f:7a:89:be:35:7e:0b:30:8d:fa:7d:74:52:42:
                    c6:91:39:df:c1:4d:22:d0:d0:3f:85:36:8c:7e:dd:
                    7f:33:05:3f:d6:14:b5:a4:ad:fd:43:fa:81:a6:08:
                    27:50:c8:2b:12:88:3c:db:88:8c:e9:e7:f7:cc:7d:
                    fc:0e:00:1d:94:cd:96:65:1d:3a:12:75:dc:c1:ac:
                    c7:61:65:1e:1f:7e:b5:5a:df:12:1c:c7:93:bd:5b:
                    ec:5a:28:ab:55:1d:82:34:1f:fc:2f:15:11:63:c9:
                    9f:ac:80:35:54:40:0b:32:db:11:ac:81:a6:1c:75:
                    c3:39:c6:04:d8:0c:14:79:1e:e3:53:7b:a9:c4:3e:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CD:EA:C1:82:CB:6F:F4:09:34:FC:0D:E9:68:53:42:0A:4C:12:88
            X509v3 Authority Key Identifier:
                keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:6b:9d:eb:19:ae:d5:54:6a:60:ae:45:13:06:97:7e:69:2e:
         53:81:aa:08:8e:0e:85:12:96:79:20:3e:74:9c:13:c0:d7:e6:
         4a:e2:a7:9b:a2:d9:cd:dd:56:45:6c:15:d9:34:e2:31:45:74:
         c9:f5:aa:cd:d6:f5:e4:07:61:bf:20:18:ab:54:d9:7a:12:4e:
         df:eb:b2:27:7d:36:20:9a:88:bb:85:0f:2a:c8:76:5b:86:70:
         f8:05:88:ba:cd:29:f8:a6:52:24:3f:7d:6b:d3:05:63:29:3e:
         65:2a:42:4f:13:69:09:24:95:b0:3a:2e:98:1c:3e:4f:b1:29:
         63:a9:c6:fa:b0:15:7c:dc:11:3c:ab:0e:d6:bb:38:ef:4c:d9:
         33:1a:d0:33:f2:c2:0c:11:54:ef:11:62:58:c1:0f:aa:26:40:
         73:23:1c:b9:cd:67:7c:f6:63:3d:e9:12:c4:1c:02:22:f6:21:
         79:c1:6b:51:8f:e6:89:b9:8c:56:b1:6f:c1:6b:9b:76:d3:cf:
         fc:79:29:c1:12:0d:ca:5c:f6:8d:d0:ac:06:95:cb:1f:56:ac:
         a2:98:a8:db:e9:bb:e3:00:e0:ab:e4:c0:15:e8:47:3b:2b:17:
         b0:1a:c0:00:f4:dd:9d:7a:2e:99:12:ff:ef:2e:36:d9:ec:6d:
         8f:a4:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:31:11 2026 by rpki-client