Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File:                     QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier:          xjiKMvuLzMKFLlm0k/qjJ4VgPxulSO17t+f5gzOzJVw=
Subject key identifier:   89:1F:6F:C2:DA:A1:E1:1E:91:46:4F:D5:34:99:DC:36:F7:84:8D:9E
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer:       /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial:       079A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number:          0791
Signing time:             Mon 02 Mar 2026 03:02:44 +0000
Manifest this update:     Mon 02 Mar 2026 03:02:42 +0000
Manifest next update:     Mon 09 Mar 2026 03:02:42 +0000
Files and hashes:         1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: /h4yB7TKj5XoRqKq7FEQqgbCnZYItgy/JBVpvZpv7QI=)
                          2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
        Validity
            Not Before: Mar  2 03:02:42 2026 GMT
            Not After : Mar  9 03:02:42 2026 GMT
        Subject: CN=69a4fdd4-1111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:9f:6d:4b:5f:d3:c7:b1:b5:37:6e:1a:e7:
                    cc:aa:5a:64:da:d0:b0:b4:f6:d8:c5:9e:6c:4b:56:
                    af:b1:4e:72:39:58:37:57:c1:c9:2c:0b:3d:12:ae:
                    d7:b1:a5:6f:50:e0:f7:25:e8:04:20:d0:ae:43:24:
                    60:21:ea:53:5a:e9:55:ee:94:39:a1:3c:fb:56:bf:
                    39:7c:10:d7:a5:d0:03:c0:28:b5:d7:a6:5c:40:37:
                    88:95:e1:c2:46:9c:ea:a8:eb:69:76:b4:e3:7a:46:
                    73:a0:d8:03:14:8b:4a:cb:29:82:6e:3c:96:bd:3b:
                    15:ae:d9:39:44:f7:66:2e:9c:15:20:f4:35:13:ee:
                    3e:37:33:de:24:2e:2a:95:ec:5d:07:4d:a6:44:63:
                    f8:7c:16:c9:47:e9:d4:6e:cf:ac:99:c0:34:cc:f2:
                    83:6d:50:a1:1f:95:17:d4:dc:34:c6:66:db:2c:e5:
                    cc:ca:f2:3c:a6:34:d2:8b:23:06:93:d5:f7:2f:98:
                    fc:80:66:4a:66:98:96:49:73:98:1a:37:99:17:2a:
                    b9:23:0b:31:e0:2b:3f:2b:84:85:6a:7e:cc:77:b3:
                    81:2a:d1:ea:87:31:01:ba:70:71:f2:66:34:92:39:
                    73:84:d8:a4:d8:6d:b7:af:d3:55:1e:b9:95:38:16:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1F:6F:C2:DA:A1:E1:1E:91:46:4F:D5:34:99:DC:36:F7:84:8D:9E
            X509v3 Authority Key Identifier:
                keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ce:ed:56:94:fd:b8:9c:4f:fa:65:3c:68:69:71:c6:73:68:
         51:a7:7f:04:ba:bf:7f:7a:e6:e3:a7:93:00:86:19:68:d0:80:
         4e:00:4b:05:1b:e3:3a:53:ae:c7:0f:2b:98:8d:fe:4b:1f:fa:
         87:82:2c:73:1e:db:2e:21:6f:9d:91:a9:00:d4:18:41:8c:71:
         5b:b0:54:a6:cc:f3:d4:83:e6:cd:7b:13:94:4a:bb:a1:c0:e8:
         a5:fe:d5:10:86:c2:99:22:59:62:69:83:bb:17:06:c3:8d:6d:
         ab:28:a5:fc:42:7d:f9:47:e8:9f:6c:1b:2d:8a:58:8f:6f:86:
         1e:83:63:a0:e3:98:ad:5b:2a:6b:3c:42:07:ee:e3:eb:61:c9:
         e9:db:4e:41:12:74:a4:48:52:9a:00:85:db:07:ab:ea:03:06:
         0e:99:d0:71:d6:54:70:2c:94:9e:fa:b1:7c:eb:42:92:c1:99:
         23:14:d4:b7:86:e3:2a:e2:3b:17:cb:91:83:fa:c1:b8:2f:7b:
         97:3e:40:19:a1:a9:88:50:7b:67:d7:d7:00:17:84:22:0a:39:
         1d:a5:88:ca:6d:3d:22:5c:a6:a7:01:36:ac:5d:7e:7f:15:f5:
         32:4a:05:4e:4a:56:72:20:48:c7:80:f7:8e:07:b6:56:e0:4b:
         35:f4:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:41 2026 by rpki-client