Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
File:                     qmLHn-GEOUEsWwLPS-tUqy674Yg.mft (raw, json)
Hash identifier:          QNq6rdXWJ62aq+DtVIa9O5T8u9eHQRGoJ8y386F3k0A=
Subject key identifier:   B0:2A:C5:7A:1A:A7:86:25:DF:DA:9E:4C:DD:27:B8:BD:DF:4D:B2:9E
Authority key identifier: AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88
Certificate issuer:       /CN=A91F6BFA/serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
Certificate serial:       0B10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
Manifest number:          0AF5
Signing time:             Sat 28 Feb 2026 19:38:44 +0000
Manifest this update:     Sat 28 Feb 2026 19:38:44 +0000
Manifest next update:     Sat 07 Mar 2026 19:38:44 +0000
Files and hashes:         1: qmLHn-GEOUEsWwLPS-tUqy674Yg.crl (hash: 1r0dIhHjtqrSQwO8moqraI591aif01RKo1BrWq9XKDU=)
                          2: 3AFE6DA8F72911EDB956BA86C4F9AE02.roa (hash: NCtWjC1uM4+Sx0ntIvyY3s6R1AF8S0ZUO+CcBcvcH7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2832 (0xb10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6BFA, serialNumber=AA62C79FE18439412C5B02CF4BEB54AB2EBBE188
        Validity
            Not Before: Feb 28 19:38:44 2026 GMT
            Not After : Mar  7 19:38:44 2026 GMT
        Subject: CN=69a34444-e689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:91:12:90:f8:5c:39:37:a4:82:bb:06:c6:
                    01:6d:e9:82:32:cc:a4:be:2d:9a:63:ca:4e:45:c9:
                    69:1e:85:34:9c:96:71:25:25:85:66:56:99:09:bf:
                    b0:71:40:a5:bc:db:4c:fb:2e:b1:ad:c7:d9:d7:cc:
                    ae:4b:a6:6b:e3:e8:4d:8c:9c:a6:f5:51:cd:ec:d4:
                    ad:00:6c:95:2e:cf:ba:98:a0:76:c1:fc:6e:ff:ab:
                    21:79:0e:f2:03:c8:da:03:4d:c8:49:43:f0:7c:5b:
                    af:e7:3a:04:7b:b3:d1:6f:d1:58:0c:4f:31:4d:ba:
                    95:f5:54:f8:ee:12:09:d4:e3:59:a2:04:75:0c:8f:
                    bd:55:b0:7b:43:a5:63:be:5b:f5:dc:73:a2:c2:e0:
                    cc:9e:c2:9a:98:d1:34:88:49:35:23:f6:c7:17:0d:
                    42:64:83:4f:6f:3e:08:f1:0b:97:59:78:59:23:db:
                    e0:40:ba:f1:2d:a3:da:c1:bd:3c:9a:b6:ca:a4:96:
                    df:6e:c6:26:df:5e:97:09:f1:6a:29:ef:51:f1:c1:
                    75:ee:73:2b:42:68:c4:88:1a:e0:f2:bb:86:a8:27:
                    a1:61:09:04:60:df:54:ab:14:1d:4a:70:14:94:c8:
                    29:d5:21:2b:93:d8:14:84:e0:52:d0:31:3e:19:ad:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2A:C5:7A:1A:A7:86:25:DF:DA:9E:4C:DD:27:B8:BD:DF:4D:B2:9E
            X509v3 Authority Key Identifier:
                keyid:AA:62:C7:9F:E1:84:39:41:2C:5B:02:CF:4B:EB:54:AB:2E:BB:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qmLHn-GEOUEsWwLPS-tUqy674Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6BFA/40D4B7EC660311EA99AD4F46C4F9AE02/qmLHn-GEOUEsWwLPS-tUqy674Yg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:49:6a:e4:0d:b1:70:c9:b0:8b:c8:ab:8b:3e:5e:81:96:47:
         c5:a9:41:f6:42:9d:2e:0d:35:c6:bd:a7:31:95:aa:c7:e4:79:
         0c:d3:94:1a:59:e7:62:07:43:a1:66:55:04:b9:fd:68:54:19:
         b5:b2:b8:21:9f:10:59:f7:60:9a:af:24:77:91:c9:99:b3:0c:
         d4:8d:c7:76:61:8e:52:29:5e:44:83:97:e0:b2:de:c0:99:5d:
         dd:bf:28:b7:9b:f5:82:8e:2e:3b:37:2d:7b:fc:d7:6a:a8:bc:
         e0:66:9e:c1:9e:e5:d2:8e:c8:d4:d5:ee:99:d6:50:00:25:a3:
         0f:d1:da:5f:ff:61:60:c8:a8:95:12:2c:af:d9:46:68:ec:c7:
         cc:2b:19:e5:80:81:b2:5c:c3:19:d2:ce:12:17:d4:ba:3a:a8:
         a1:90:ef:9a:10:fa:0f:5d:de:6b:4e:8a:b3:d5:0c:42:34:b8:
         8a:53:bc:c8:6d:c6:a9:8d:0c:4b:45:ca:89:eb:1e:75:62:59:
         1f:8f:9c:6c:a0:e9:b6:7e:8d:f5:e7:34:7d:6d:88:20:22:a6:
         d6:7a:c1:4e:60:07:57:f1:8a:9f:d9:46:90:0d:14:fe:a2:9c:
         80:14:17:bf:ee:3b:c6:28:9e:55:bf:51:d6:4d:7d:c6:9d:64:
         05:0e:7d:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZCRkExMTAvBgNVBAUTKEFBNjJDNzlGRTE4NDM5NDEyQzVCMDJDRjRCRUI1NEFC
MkVCQkUxODgwHhcNMjYwMjI4MTkzODQ0WhcNMjYwMzA3MTkzODQ0WjAYMRYwFAYD
VQQDDA02OWEzNDQ0NC1lNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsmREpD4XDk3pIK7BsYBbemCMsykvi2aY8pORclpHoU0nJZxJSWFZlaZCb+w
cUClvNtM+y6xrcfZ18yuS6Zr4+hNjJym9VHN7NStAGyVLs+6mKB2wfxu/6sheQ7y
A8jaA03ISUPwfFuv5zoEe7PRb9FYDE8xTbqV9VT47hIJ1ONZogR1DI+9VbB7Q6Vj
vlv13HOiwuDMnsKamNE0iEk1I/bHFw1CZINPbz4I8QuXWXhZI9vgQLrxLaPawb08
mrbKpJbfbsYm316XCfFqKe9R8cF17nMrQmjEiBrg8ruGqCehYQkEYN9UqxQdSnAU
lMgp1SErk9gUhOBS0DE+Ga2yoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAqxXoa
p4Yl39qeTN0nuL3fTbKeMB8GA1UdIwQYMBaAFKpix5/hhDlBLFsCz0vrVKsuu+GI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkJGQS80MEQ0QjdFQzY2
MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9VRXNXd0xQUy10VXF5Njc0
WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FtTEhuLUdFT1VFc1d3TFBTLXRVcXk2NzRZZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NkJGQS80MEQ0QjdFQzY2MDMxMUVBOTlBRDRGNDZDNEY5QUUwMi9xbUxIbi1HRU9V
RXNXd0xQUy10VXF5Njc0WWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIUlq5A2xcMmwi8iriz5egZZHxalB9kKdLg01xr2nMZWqx+R5DNOUGlnnYgdD
oWZVBLn9aFQZtbK4IZ8QWfdgmq8kd5HJmbMM1I3HdmGOUileRIOX4LLewJld3b8o
t5v1go4uOzcte/zXaqi84GaewZ7l0o7I1NXumdZQACWjD9HaX/9hYMiolRIsr9lG
aOzHzCsZ5YCBslzDGdLOEhfUujqooZDvmhD6D13ea06Ks9UMQjS4ilO8yG3GqY0M
S0XKiesedWJZH4+cbKDptn6N9ec0fW2IICKm1nrBTmAHV/GKn9lGkA0U/qKcgBQX
v+47xiieVb9R1k19xp1kBQ59aw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:12 2026 by rpki-client