Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
File:                     QNueLLrezam5cjUQIVB63NGlYn8.mft (raw, json)
Hash identifier:          6Tl5aEb8up16s1n3aafKlDvxlJidff2aSX8d9DZEWs8=
Subject key identifier:   AF:53:03:5D:D3:74:2D:CE:62:9A:C5:15:CC:00:1B:C3:F6:68:8C:5E
Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F
Certificate issuer:       /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
Certificate serial:       04BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
Manifest number:          04AF
Signing time:             Mon 02 Mar 2026 00:57:55 +0000
Manifest this update:     Mon 02 Mar 2026 00:57:55 +0000
Manifest next update:     Mon 09 Mar 2026 00:57:55 +0000
Files and hashes:         1: QNueLLrezam5cjUQIVB63NGlYn8.crl (hash: uDRZIvXnIN++BCLl59L94st3Rodgg92k4fW+Cjf/XeM=)
                          2: 18E79956BAA811ECB07DA44BC4F9AE02.roa (hash: PxYeKpHZULDnwcoAfBRm9losZrnlvlbzKphy5txaKD0=)
                          3: 43540B7A0EE311EF9E24862BC4F9AE02.roa (hash: 136+5Mqj8LsH3BeiE2xVedpLET3+SzJNeO37YmXz3rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl
                          rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214 (0x4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F
        Validity
            Not Before: Mar  2 00:57:55 2026 GMT
            Not After : Mar  9 00:57:55 2026 GMT
        Subject: CN=69a4e093-d7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:e4:8e:4c:21:27:93:66:e2:c3:32:a3:ce:
                    db:1f:85:5c:88:c5:7d:19:3f:00:64:53:86:75:61:
                    9c:92:c2:11:bf:7d:5d:33:ce:e0:f3:ef:86:b4:0f:
                    71:a5:ec:e0:28:39:7f:75:63:13:1f:d5:ed:85:69:
                    59:90:38:a7:a8:8a:b3:ad:1e:82:d5:dd:84:8d:aa:
                    62:00:57:12:a6:ca:24:0b:1f:bc:c4:27:d0:af:ff:
                    5e:c4:ca:0b:a1:af:c6:99:82:87:fc:ff:d3:27:06:
                    66:7f:59:aa:06:0e:ee:04:46:de:46:06:ab:b9:da:
                    87:06:94:3c:7a:70:cc:ac:4b:1a:2e:c4:c6:e2:53:
                    e6:6f:ad:f0:3c:0f:92:c1:6f:6a:03:a7:c5:6d:bb:
                    3b:b9:ef:d0:1b:ce:1b:19:57:80:df:eb:84:6e:01:
                    35:86:1b:15:f8:4f:5d:c8:2c:71:cb:d5:af:34:98:
                    d5:78:2b:c8:f3:cd:4c:f5:3a:31:bb:a8:4d:77:3d:
                    10:d3:6a:ca:db:d5:56:d3:a2:4a:81:46:d6:ef:95:
                    80:0e:86:ff:6e:5d:2f:dd:75:57:15:3b:d4:6f:d7:
                    05:e4:cb:33:39:7c:b1:8f:85:49:e3:4d:fa:33:1e:
                    17:b8:32:ab:8b:d2:6a:63:7c:64:64:ce:00:a6:c0:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:53:03:5D:D3:74:2D:CE:62:9A:C5:15:CC:00:1B:C3:F6:68:8C:5E
            X509v3 Authority Key Identifier:
                keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:42:9a:48:86:b8:56:ea:8e:f3:c0:79:5d:58:48:6b:47:
         c7:c1:be:67:10:21:ba:63:f5:6f:d1:23:24:96:70:28:9f:8f:
         dc:c3:1f:7d:80:96:40:79:a3:93:c5:aa:d2:87:3c:9d:77:68:
         a6:e2:23:a6:09:a3:26:13:ec:bf:91:b6:cd:fa:df:1e:ba:a3:
         bb:96:cd:d2:6c:cd:24:a3:7a:71:39:7a:09:8d:fc:02:31:4e:
         21:dc:8d:7a:cb:38:d7:e6:2d:fe:ae:35:5b:78:0e:7f:26:2a:
         e0:06:22:13:ed:69:d7:0b:a0:a9:d3:0f:2f:51:6d:3b:90:df:
         ea:44:99:ca:81:05:b1:50:38:26:6b:02:72:22:09:83:53:a7:
         51:bc:c9:56:c9:e6:3f:de:b3:fd:b1:b2:76:89:dc:0e:7d:b9:
         2c:58:40:5f:9f:6e:f4:5f:cc:48:5a:c4:7b:cf:8c:16:4c:a7:
         17:c4:28:89:f6:6b:56:48:54:fe:c6:9a:57:b2:95:d0:2e:95:
         6a:26:1f:8e:d2:0c:d8:38:d6:16:7c:bd:17:8a:95:f5:10:f3:
         c1:05:4a:14:33:ca:21:97:99:e6:20:aa:e9:04:e4:d2:d3:5f:
         32:ca:d7:0d:d1:39:d9:4c:f1:93:ab:22:cd:f3:ae:75:90:94:
         3c:d2:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:00 2026 by rpki-client