Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
File:                     qbsN-21P9jtyiDO-CtZiN5bsihk.mft (raw, json)
Hash identifier:          8NQp3MarN4KmGiYH3dL8/vS3xO4miwaB5Chl4ghfYCg=
Subject key identifier:   2B:E5:E1:F7:9D:11:64:4A:4C:DF:44:6C:29:A8:3B:0E:EC:5B:29:D9
Authority key identifier: A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19
Certificate issuer:       /CN=A91EBBD7/serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
Certificate serial:       0AE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
Manifest number:          0AD2
Signing time:             Sat 04 Apr 2026 19:15:16 +0000
Manifest this update:     Sat 04 Apr 2026 19:15:16 +0000
Manifest next update:     Sat 11 Apr 2026 19:15:16 +0000
Files and hashes:         1: qbsN-21P9jtyiDO-CtZiN5bsihk.crl (hash: aJvl+7j7u2esz8dXEjILF9B+oFlc4mq7DWueA3i/nuQ=)
                          2: 651072686CBB11EA95256D30C4F9AE02.roa (hash: cASTkD6P0USvFC5JERidtks+A/4jhXTPcKKMZcEkZtY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 19:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2791 (0xae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBD7, serialNumber=A9BB0DFB6D4FF63B728833BE0AD6623796EC8A19
        Validity
            Not Before: Apr  4 19:15:16 2026 GMT
            Not After : Apr 11 19:15:16 2026 GMT
        Subject: CN=69d16344-5b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:02:e8:25:4d:0d:9e:81:ed:b6:bf:89:4f:
                    03:1b:1b:80:fe:20:b0:c6:5a:d0:12:77:94:e9:09:
                    42:56:4e:33:b3:36:99:e6:15:31:75:9a:47:3e:5b:
                    22:05:93:48:46:21:0c:2e:96:2b:40:2c:a2:4c:ce:
                    28:41:b6:4a:9f:f0:df:a1:b8:0b:27:64:ca:0d:f7:
                    0b:4e:98:b5:fb:a9:b7:ff:3a:9c:39:41:39:c3:6b:
                    7e:fd:5f:b5:bc:20:50:22:23:45:7b:38:fe:53:7a:
                    38:f9:d3:16:76:07:1c:dc:c9:09:b7:80:ef:a1:26:
                    17:34:e8:66:11:c0:dc:5e:56:1f:2f:24:07:57:cb:
                    43:ce:4f:f0:7e:da:4a:2f:97:41:a1:fd:37:42:32:
                    61:e9:6c:8d:3e:b6:ee:55:9d:97:6f:e2:92:18:b2:
                    84:0b:fb:a6:b7:05:97:f8:cc:9c:07:93:36:df:59:
                    20:84:97:9b:1a:e5:68:00:20:45:0e:d9:33:96:c3:
                    f3:e8:44:a3:6c:e6:0e:7b:f9:20:90:84:79:e4:2f:
                    77:e3:89:d7:ff:31:c5:d2:36:0d:19:86:68:9b:82:
                    c6:cb:9b:c8:ea:9e:c0:57:ea:45:e4:16:6c:a7:b7:
                    c4:58:6f:99:1d:fc:a0:af:ac:95:dc:13:ac:32:cb:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:E1:F7:9D:11:64:4A:4C:DF:44:6C:29:A8:3B:0E:EC:5B:29:D9
            X509v3 Authority Key Identifier:
                keyid:A9:BB:0D:FB:6D:4F:F6:3B:72:88:33:BE:0A:D6:62:37:96:EC:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbsN-21P9jtyiDO-CtZiN5bsihk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBD7/F93219126CB911EA80832E2EC4F9AE02/qbsN-21P9jtyiDO-CtZiN5bsihk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:07:6e:cc:e6:39:d7:5f:eb:60:40:22:ec:43:cf:ce:5c:1a:
         5a:4b:c9:28:92:05:1f:22:9f:98:eb:6f:94:4e:92:6a:26:17:
         36:4e:c5:c5:ef:cb:69:78:bd:3e:7e:8c:8b:1d:d8:44:92:9b:
         08:1f:5f:a2:96:7a:07:dc:5d:b2:7f:9d:cb:2f:2e:6d:f4:59:
         ad:d4:94:9d:0e:a0:95:49:4a:00:20:92:27:4d:a8:7b:91:85:
         42:5c:1f:7d:41:4d:bf:86:3d:1f:11:d9:72:99:35:f3:2f:e4:
         f0:f9:a7:02:da:72:ca:01:54:65:e0:4a:82:b7:7b:0c:97:c5:
         4c:60:1a:52:59:4f:8b:cf:84:17:98:ac:b8:28:79:9c:a5:e3:
         60:3b:90:26:65:62:18:61:d2:16:e2:23:9e:9e:72:6f:83:8e:
         0f:c9:34:51:78:1b:fe:e6:d9:f5:38:e3:ed:92:48:ca:35:94:
         17:a9:3f:4a:f4:55:27:ee:a8:f8:1a:03:8f:52:47:2f:8b:36:
         20:8f:a3:a1:36:e1:f5:74:d2:9c:18:88:25:6f:05:2c:26:42:
         4e:5d:5c:29:0d:30:25:a5:0d:20:a0:6b:0d:be:48:bc:cf:f1:
         ef:a1:df:f3:68:7c:32:31:fb:b0:37:c2:99:e1:8d:30:07:d9:
         96:1b:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:37 2026 by rpki-client