Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File:                     QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier:          NA7JTLK+2TxWJ29ZI1kSh0p6rO/jIOwdAgSt2liwJVc=
Subject key identifier:   A3:DC:91:67:97:0A:CB:AA:D1:71:9F:9E:1A:80:B1:CC:D2:22:EC:59
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer:       /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number:          90
Signing time:             Sun 01 Mar 2026 08:50:22 +0000
Manifest this update:     Sun 01 Mar 2026 08:50:22 +0000
Manifest next update:     Sun 08 Mar 2026 08:50:22 +0000
Files and hashes:         1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: uL8dae4souJMQHOc+7UUmQv7He3TvZ9wLMaF+MoSnL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
        Validity
            Not Before: Mar  1 08:50:22 2026 GMT
            Not After : Mar  8 08:50:22 2026 GMT
        Subject: CN=69a3fdce-6249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:c8:9b:5a:db:eb:5a:9b:7a:a5:8b:03:70:
                    5f:34:9e:f2:78:53:4e:5c:d7:70:d0:19:d8:e1:34:
                    5e:81:22:77:82:cb:62:03:6a:f0:36:89:fe:82:bd:
                    e0:8a:72:85:a7:28:c5:ce:58:7a:da:1f:d6:72:bc:
                    be:61:fa:83:ab:f0:50:e3:6f:aa:6d:37:ad:0f:b0:
                    1f:7d:bb:b3:cb:9b:a4:03:42:27:09:19:13:86:84:
                    b4:d8:5c:93:17:82:a7:75:39:2a:fb:aa:41:8f:7b:
                    50:b1:c8:de:5d:7b:bf:a2:cc:a7:8c:92:12:54:6b:
                    a4:25:d1:55:a2:25:b9:f4:85:6b:8c:e5:1b:0e:dc:
                    26:78:12:2c:a8:3e:ab:26:4a:4a:f7:57:92:b2:63:
                    60:24:ed:4c:e8:b4:b4:86:0b:fc:95:c6:fc:e4:9b:
                    39:f7:c3:29:fc:51:f4:e7:22:7c:61:2d:c6:6e:47:
                    e4:eb:0f:55:af:ae:90:ed:77:52:7f:ad:20:f5:c0:
                    d3:4d:0a:02:1b:c3:94:4f:d5:03:78:99:80:65:8d:
                    42:c0:02:90:78:c8:18:3f:57:f8:cf:c3:4d:ba:ae:
                    ae:57:29:8d:92:f0:9e:fa:4f:3d:4e:f1:b0:65:27:
                    b0:9a:21:92:db:35:3b:3c:54:e7:05:f5:5f:5c:6c:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DC:91:67:97:0A:CB:AA:D1:71:9F:9E:1A:80:B1:CC:D2:22:EC:59
            X509v3 Authority Key Identifier:
                keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:7c:47:df:2f:49:3b:e0:c4:57:52:39:28:21:c1:a3:f0:
         92:97:0b:f9:85:6e:21:8e:0b:db:55:9e:97:35:4d:f4:4d:9f:
         1d:70:f3:f1:5a:0b:e0:30:10:40:6c:c5:eb:df:97:6a:58:2c:
         86:79:9d:7b:03:1f:fb:6d:ea:3f:e9:db:96:b5:e3:47:ee:24:
         13:55:a3:47:4e:5c:53:86:f7:70:46:ea:8c:90:bb:41:be:28:
         62:fe:d7:fe:d3:1f:4f:9d:0b:44:9d:96:8b:d3:02:27:96:98:
         d1:22:da:ce:7b:d0:f5:c3:db:f4:3f:c0:44:cd:45:3c:d7:50:
         ee:fc:6d:e2:af:55:16:5f:0f:81:65:cd:eb:32:9f:9d:10:6c:
         f0:7c:d0:3c:6b:97:78:54:87:80:e7:5f:92:1a:93:f8:42:64:
         98:52:af:d9:44:66:68:f9:b5:e4:e2:9f:75:63:f4:68:9a:c2:
         5e:0a:fe:e0:87:b8:95:3b:cf:ee:48:04:56:6a:ff:c7:7d:b8:
         1f:01:86:b0:be:d9:66:60:d2:11:84:8a:02:ee:72:b5:21:da:
         34:bd:c2:ce:c8:a8:a9:67:57:89:fb:93:43:f6:21:11:18:39:
         bf:60:4d:d2:01:73:2d:e0:57:07:bc:0f:12:f9:05:4e:72:7c:
         1b:84:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:29 2026 by rpki-client