Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File:                     QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier:          QMgWADQKJ0MqNgy9UnhBS1FxjPYETB9/VbXmIzIYpQc=
Subject key identifier:   BC:60:4D:98:A1:F3:CF:28:DE:CA:CE:B4:01:03:FC:D3:B0:7B:A3:F8
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number:          79
Signing time:             Mon 02 Mar 2026 14:06:17 +0000
Manifest this update:     Mon 02 Mar 2026 14:06:17 +0000
Manifest next update:     Mon 09 Mar 2026 14:06:17 +0000
Files and hashes:         1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: GuZhLQ/BTzt24D35TiyZ1NR2Yo8cI6c5rtP7chfJMx0=)
                          2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Mar  2 14:06:17 2026 GMT
            Not After : Mar  9 14:06:17 2026 GMT
        Subject: CN=69a59959-ef77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:9f:10:23:1a:b2:b0:16:6a:0a:f2:f5:c5:
                    3e:3a:46:78:0d:92:23:33:a8:a2:70:e6:85:60:79:
                    16:b3:dc:b2:e3:61:d7:e8:e7:2c:a7:7c:88:44:00:
                    78:b2:57:11:a1:1a:88:8d:97:8b:8a:c6:5e:5b:ee:
                    d5:97:6d:5b:ab:e9:5f:5d:92:6a:be:c4:84:33:3f:
                    e1:19:0b:4d:f2:a8:96:2c:bd:9d:17:74:5a:51:26:
                    fc:fe:a8:97:16:79:55:b7:46:2c:24:13:05:59:4a:
                    74:38:6d:99:d4:c1:59:12:11:8b:36:80:a5:bb:31:
                    b2:c1:d4:e6:76:73:fc:87:cc:df:7e:a1:d9:61:1f:
                    d7:d5:bb:c7:73:89:25:37:96:6d:6b:da:6a:80:84:
                    ac:4e:2a:67:f6:42:7a:4b:ea:0c:21:6f:20:8f:db:
                    b4:46:38:24:19:5c:24:9d:ec:9c:1d:63:7d:52:4b:
                    53:f0:93:a2:f6:3a:c2:ac:70:66:a6:da:29:24:cb:
                    f2:6e:e2:96:e4:15:ca:de:c0:89:86:f1:ac:5a:46:
                    e3:e6:07:ef:57:8e:ea:2f:8f:e8:62:41:0c:52:6c:
                    4d:0e:64:14:56:db:d2:b8:55:bb:e9:85:2f:bb:4f:
                    27:74:05:4c:9c:58:87:66:e8:27:7b:92:5b:ea:1d:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:4D:98:A1:F3:CF:28:DE:CA:CE:B4:01:03:FC:D3:B0:7B:A3:F8
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:e3:bb:02:c5:7f:18:5b:a1:55:65:41:55:5e:1c:67:19:
         5d:79:74:c9:d0:34:ea:d2:9f:de:6e:e0:7a:f9:eb:22:52:39:
         ab:b7:df:9d:f6:57:14:24:bb:70:a6:f5:61:36:33:7c:a1:c4:
         f3:ca:0e:80:d0:3d:bc:64:e0:e1:43:98:3d:16:3b:f6:ef:d1:
         16:5c:30:7a:57:c0:9b:cc:ea:e9:45:e1:c5:7a:e0:f3:1c:e3:
         e1:a0:f8:51:20:77:9b:1a:fd:95:ed:2e:4e:d7:12:8b:19:5f:
         34:b4:4a:00:59:d6:5a:8c:46:99:a1:03:dd:6a:0d:17:d6:42:
         8c:bc:83:0c:db:64:06:34:3f:af:b4:ae:40:6e:03:08:11:4f:
         e2:33:74:0e:62:9f:95:71:26:a3:66:df:1a:b6:58:a3:53:b8:
         2c:ae:e7:49:61:0f:fb:31:09:1b:44:4a:5e:9d:90:67:b6:7c:
         e7:08:99:d1:5a:80:d7:71:c3:6a:f6:72:d5:a5:54:51:65:0f:
         44:01:fc:87:86:fc:2c:84:9a:40:39:7d:3a:e7:a4:0b:e3:ee:
         05:ce:a2:5e:f0:8c:f4:7a:06:83:5f:2e:3b:00:7a:29:e8:e5:
         a2:54:c0:f7:d5:c4:1e:55:6e:4f:73:6f:e2:b8:e5:25:e0:5a:
         3b:0f:6f:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2
NDIzNjJBMjAeFw0yNjAzMDIxNDA2MTdaFw0yNjAzMDkxNDA2MTdaMBgxFjAUBgNV
BAMTDTY5YTU5OTU5LWVmNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtQZ8QIxqysBZqCvL1xT46RngNkiMzqKJw5oVgeRaz3LLjYdfo5yynfIhEAHiy
VxGhGoiNl4uKxl5b7tWXbVur6V9dkmq+xIQzP+EZC03yqJYsvZ0XdFpRJvz+qJcW
eVW3RiwkEwVZSnQ4bZnUwVkSEYs2gKW7MbLB1OZ2c/yHzN9+odlhH9fVu8dziSU3
lm1r2mqAhKxOKmf2QnpL6gwhbyCP27RGOCQZXCSd7JwdY31SS1Pwk6L2OsKscGam
2ikky/Ju4pbkFcrewImG8axaRuPmB+9Xjuovj+hiQQxSbE0OZBRW29K4VbvphS+7
Tyd0BUycWIdm6Cd7klvqHZoxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvGBNmKHz
zyjeys60AQP807B7o/gwHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx
MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1
NzU2LzZCNzI3RjMyNjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVq
Sk82T2dfcE92RUdRallxSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpyeO7AsV/GFuhVWVBVV4cZxldeXTJ0DTq0p/ebuB6+esiUjmrt9+d9lcUJLtw
pvVhNjN8ocTzyg6A0D28ZODhQ5g9Fjv279EWXDB6V8CbzOrpReHFeuDzHOPhoPhR
IHebGv2V7S5O1xKLGV80tEoAWdZajEaZoQPdag0X1kKMvIMM22QGND+vtK5AbgMI
EU/iM3QOYp+VcSajZt8atlijU7gsrudJYQ/7MQkbREpenZBntnznCJnRWoDXccNq
9nLVpVRRZQ9EAfyHhvwshJpAOX0656QL4+4FzqJe8Iz0egaDXy47AHop6OWiVMD3
1cQeVW5Pc2/iuOUl4Fo7D2/o
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:31:34 2026 by rpki-client