Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File:                     QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier:          oevufqG6jvgt9dTMejjnnB/QKucZX7yHf+rqTwszskM=
Subject key identifier:   4C:3D:74:D8:C9:FE:3F:5B:39:DD:A4:C8:59:D9:7C:23:6E:B0:2C:A0
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer:       /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial:       04D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number:          04CB
Signing time:             Sun 01 Mar 2026 23:47:21 +0000
Manifest this update:     Sun 01 Mar 2026 23:47:19 +0000
Manifest next update:     Sun 08 Mar 2026 23:47:19 +0000
Files and hashes:         1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: liigNKsgZUubyBS3IJ28OeteRND9i7Kz8wW8+hPNypc=)
                          2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
        Validity
            Not Before: Mar  1 23:47:19 2026 GMT
            Not After : Mar  8 23:47:19 2026 GMT
        Subject: CN=69a4d009-a174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:35:01:0d:b3:86:ae:22:97:8f:af:3b:ea:
                    6c:f9:65:79:fe:58:ee:8d:45:55:ea:9a:ab:6e:e4:
                    07:42:90:43:9b:2f:50:6c:2e:69:ed:ca:e5:dc:cb:
                    62:5c:8c:25:a5:87:f5:15:88:ed:1c:cc:88:6d:67:
                    90:a2:f3:99:32:30:23:3b:50:df:41:09:dd:bd:55:
                    ec:8a:d9:11:68:a0:67:0c:b4:7f:da:c0:be:12:ce:
                    e3:96:e8:fc:9a:1e:a6:c5:ec:7c:f7:3b:b4:6b:d7:
                    36:a8:35:44:c1:3e:5f:41:6e:80:28:9a:53:bf:e7:
                    a3:ae:38:b4:a0:ee:3e:ce:bf:18:bb:4c:45:cc:12:
                    86:c4:be:8c:95:b0:a2:48:8e:25:35:20:da:54:6b:
                    fd:4c:ce:cf:5a:47:4f:87:0c:3c:b8:4e:b5:2b:0e:
                    51:6d:6d:31:e6:4c:ef:4b:e4:07:96:aa:36:27:5f:
                    93:ee:b0:d2:78:ab:6d:72:56:7e:fc:e5:95:70:09:
                    b0:78:e2:38:04:87:ad:f3:84:bc:aa:37:30:bb:5c:
                    b1:31:a4:be:ac:ec:7e:8a:04:8f:04:55:08:11:8f:
                    0d:b3:85:01:b5:e7:28:09:68:94:fb:6b:3c:2a:24:
                    ba:84:ac:1f:0e:54:d7:71:39:3e:ed:a2:98:7a:81:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3D:74:D8:C9:FE:3F:5B:39:DD:A4:C8:59:D9:7C:23:6E:B0:2C:A0
            X509v3 Authority Key Identifier:
                keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:d8:d8:21:08:c4:24:4a:c3:bd:65:2f:23:84:f5:14:fd:
         07:d5:24:7f:c1:c9:83:83:e6:c9:af:68:59:ce:e1:d8:3b:7c:
         22:8c:ef:81:8f:76:1d:20:45:82:a8:a3:d6:77:b0:42:47:0f:
         44:70:2d:36:1e:bc:31:66:2e:4f:25:2c:b7:54:9c:cb:94:1c:
         c6:49:66:67:42:06:ce:fc:e4:78:7a:d1:b9:b1:2a:2e:6c:6c:
         19:c3:94:30:ad:5b:a6:96:f6:2a:59:f7:41:b9:55:ac:82:32:
         04:98:66:1d:a7:f1:d9:99:d4:40:1c:b5:ad:a0:29:f2:b2:23:
         cc:a8:34:6e:28:5e:90:95:b8:70:cf:68:12:17:a8:34:c5:ee:
         57:5b:64:95:a9:45:d7:8d:30:19:c7:65:9e:4f:0e:f6:8f:79:
         6d:43:94:fa:bb:60:11:14:3b:d8:22:a8:52:68:f0:b3:29:3a:
         be:1a:2f:f1:fd:f1:f7:64:49:a2:51:62:0f:be:c9:ff:09:65:
         dd:1b:45:60:10:62:9d:1e:2b:35:e3:68:68:d1:1b:1c:7c:e4:
         9e:98:c3:8b:db:2d:41:88:b0:e7:54:4e:78:85:c3:96:fc:0b:
         8d:e8:6a:f4:f5:fd:c4:9d:98:61:c7:58:ff:96:81:46:30:44:
         30:b9:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:53 2026 by rpki-client