Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
File:                     QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft (raw, json)
Hash identifier:          9ApUneq9XJDeOhpgnxJSrH9srTAo/oOQK/0/BcngzT0=
Subject key identifier:   44:B1:36:89:5A:2B:17:DA:9A:E2:56:F2:CF:AB:AC:35:4D:8E:DC:91
Authority key identifier: 41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C
Certificate issuer:       /CN=A91EC8C9/serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
Certificate serial:       0441
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
Manifest number:          043B
Signing time:             Sun 01 Mar 2026 01:03:13 +0000
Manifest this update:     Sun 01 Mar 2026 01:03:12 +0000
Manifest next update:     Sun 08 Mar 2026 01:03:12 +0000
Files and hashes:         1: QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl (hash: nug4UDbxhEvpxPD9q3YRaU2apeolMWHU8StS6MiY0EI=)
                          2: FFDA736894CB11ECA827746DC4F9AE02.roa (hash: 8iV4ugr4mSfNruY5D2DRxakIigz2o3vI9PRBikHz6M4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1089 (0x441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC8C9, serialNumber=4123AC2EC069D2EF27201F4DBCAAC6C19121902C
        Validity
            Not Before: Mar  1 01:03:12 2026 GMT
            Not After : Mar  8 01:03:12 2026 GMT
        Subject: CN=69a39051-db46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:03:0e:e1:08:51:d5:65:bc:43:2a:2a:a8:
                    62:4c:e0:37:83:bc:db:cd:b6:5c:d6:45:38:1e:84:
                    1d:30:67:3d:24:93:f8:c5:0b:2b:2a:27:1a:48:98:
                    99:77:d8:e8:65:96:ef:2e:cf:27:98:5a:6f:7d:35:
                    1f:9b:ad:dd:f4:20:d9:e3:9f:fa:30:3c:3e:39:e0:
                    88:ad:8a:4d:7f:d6:b3:68:ec:74:90:7d:1a:5f:1e:
                    de:8f:6a:24:fb:17:b2:a0:64:50:a2:e0:cd:42:3c:
                    8b:60:bc:90:58:be:3c:36:d6:4e:9a:5a:7f:2c:55:
                    28:83:79:c8:85:87:ba:49:d8:39:e5:2f:33:6c:cc:
                    1e:c7:55:96:57:a5:2a:dc:92:df:a8:95:a3:c7:18:
                    5c:4f:1c:9c:82:4c:59:58:1d:88:14:ac:fa:56:a4:
                    57:52:e5:c6:aa:c8:a4:35:23:06:93:ad:b7:40:95:
                    32:40:8e:0a:cd:c1:90:3a:78:78:af:20:44:07:7f:
                    ba:21:e8:3e:54:8b:90:e9:4a:b9:b8:0c:e1:04:a4:
                    d6:22:cb:37:53:f8:84:c6:2a:01:d6:c6:ef:e5:90:
                    0c:2f:bd:9c:10:28:03:01:a6:84:ca:b1:80:7d:bf:
                    80:92:7c:ab:86:8c:ba:c2:6f:6a:8b:a8:a3:58:82:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B1:36:89:5A:2B:17:DA:9A:E2:56:F2:CF:AB:AC:35:4D:8E:DC:91
            X509v3 Authority Key Identifier:
                keyid:41:23:AC:2E:C0:69:D2:EF:27:20:1F:4D:BC:AA:C6:C1:91:21:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSOsLsBp0u8nIB9NvKrGwZEhkCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC8C9/738DDFC494C811EC95CB9765C4F9AE02/QSOsLsBp0u8nIB9NvKrGwZEhkCw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:30:96:ac:7d:12:dc:8f:fa:60:49:2b:9c:b5:52:4f:29:4f:
         d4:2e:ba:7b:17:da:2f:f7:a0:61:10:0c:ed:31:20:39:fc:14:
         6c:e2:e8:e7:b5:4d:43:b3:09:9b:dc:a8:64:cf:64:07:8b:f4:
         47:c9:81:53:5d:77:72:9d:2e:90:cc:67:99:16:16:82:88:85:
         d2:15:63:af:74:46:ef:ae:de:ec:d5:7e:26:8e:c1:9c:27:1d:
         a2:09:6d:d1:ba:30:48:55:04:8c:c7:e0:68:94:46:74:ac:8a:
         2a:3b:85:6a:59:51:13:2c:a7:79:42:23:64:94:57:15:c6:e3:
         43:67:db:a0:08:0d:69:4e:e7:97:05:b9:fa:9b:ae:46:e1:25:
         12:aa:d3:d3:82:78:72:24:0e:c2:b4:e7:60:91:a3:71:37:3d:
         47:30:43:4f:4f:98:d1:01:88:7a:b4:b1:a1:42:cd:b3:94:a5:
         a8:cc:82:5d:39:1d:5a:32:e4:96:93:ae:e6:fd:56:c8:e0:89:
         d2:aa:6c:53:a0:1a:64:7e:c1:04:b4:0b:e0:f3:5c:da:84:82:
         45:24:90:0b:13:74:a4:4d:37:cc:92:e7:f3:71:ef:7a:54:d0:
         c7:e5:97:bb:fc:94:45:1a:b1:ac:14:39:91:e1:45:c5:06:55:
         06:47:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:47 2026 by rpki-client