Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File:                     qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier:          vSRN5sd8Svq/aOVSOfLUkPZVIyF2WhYLR/UXgRzzOHE=
Subject key identifier:   5B:1A:13:23:B2:75:55:3D:47:30:AD:71:94:63:7D:53:73:FF:2C:47
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer:       /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial:       3514
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number:          3514
Signing time:             Sat 28 Feb 2026 15:16:03 +0000
Manifest this update:     Sat 28 Feb 2026 15:16:02 +0000
Manifest next update:     Sat 07 Mar 2026 15:16:02 +0000
Files and hashes:         1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: ETyWopbck97L1NzO/Cqtl2eTvy7iW604JQUmpraTy5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
                          rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 15:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13588 (0x3514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
        Validity
            Not Before: Feb 28 15:16:02 2026 GMT
            Not After : Mar  7 15:16:02 2026 GMT
        Subject: CN=69a306b3-621d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:78:e7:f2:d3:7d:6f:50:ed:51:7d:dd:59:
                    48:a6:5e:6c:72:cf:45:d9:01:38:97:f0:fe:3c:f1:
                    9a:1e:4a:dd:d8:6b:cd:01:66:5e:12:96:f6:41:4a:
                    be:2e:bb:7a:8e:78:c2:4e:b3:37:d6:74:5e:df:78:
                    75:97:f2:4e:5e:40:ac:ea:ae:60:df:ae:78:2c:c5:
                    c5:21:6e:8b:1f:20:42:39:2b:c1:c2:25:17:bb:41:
                    33:89:23:32:80:3a:3d:b1:f5:34:a5:8b:a0:05:72:
                    d7:aa:14:78:a1:71:ab:45:78:bf:2b:88:48:cc:ad:
                    ae:0a:12:90:c9:9a:71:fc:9b:5d:60:6b:b7:bf:24:
                    d2:0e:5d:b0:51:e6:d9:eb:62:4c:bd:35:a3:4d:09:
                    e2:27:35:7a:99:ce:4f:d5:79:36:ef:5f:ee:c5:8c:
                    d5:b0:e1:8b:50:32:5f:79:24:aa:02:66:8b:3a:d8:
                    ca:11:34:e6:0c:c0:f4:f3:b9:42:69:2d:03:d3:ac:
                    80:ce:b2:82:98:c2:44:bf:58:d0:ce:83:20:86:f4:
                    b6:b3:47:bd:e6:81:af:a2:81:7b:0d:ea:97:cc:3e:
                    53:63:e5:41:63:84:b0:44:69:d8:a5:c7:b7:5a:29:
                    c5:ec:f1:22:d6:60:57:9a:6e:a5:2f:c8:ae:df:c5:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:13:23:B2:75:55:3D:47:30:AD:71:94:63:7D:53:73:FF:2C:47
            X509v3 Authority Key Identifier:
                keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a6:5a:e1:2c:1f:87:a2:03:4f:01:82:c3:a2:69:d7:7a:1b:
         1c:87:b0:98:9e:e0:77:b0:ce:f9:ce:12:0f:ec:54:8e:e3:71:
         e0:7c:13:b5:98:62:a8:34:4d:5d:11:01:96:6a:13:c8:ab:47:
         2a:4f:90:3b:7f:de:59:e4:86:2e:27:a0:97:68:c2:8e:82:a1:
         38:e7:24:53:63:29:8b:fb:ba:d7:a6:db:d3:b1:fa:45:49:c4:
         52:0b:d4:d7:6d:fc:e5:73:37:72:6e:0d:40:77:3a:b6:4a:dc:
         68:7b:28:09:f3:41:dc:09:0e:4f:06:eb:93:b5:1f:ae:63:8d:
         14:5d:e9:a9:09:cf:a4:c3:38:95:93:d6:49:39:42:ee:19:99:
         12:37:f1:d3:9a:71:18:cc:92:65:e2:35:20:e2:61:76:2e:e1:
         d0:da:ea:d4:1c:b9:d5:86:ee:90:13:f0:17:b9:70:e1:1d:cd:
         06:35:00:bd:83:4e:31:cc:4d:f2:93:b5:2b:c3:a3:3b:97:1e:
         23:db:ed:3c:f1:a0:61:c5:c2:95:60:b1:5b:bc:8d:3d:22:a8:
         45:f1:a6:1e:d4:3e:a9:f5:0f:2c:4f:8a:9c:ed:bd:17:45:f6:
         d9:36:e3:04:80:05:5b:12:f5:ab:07:c4:10:27:44:09:89:2e:
         b2:f2:13:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:07 2026 by rpki-client