Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
File:                     QSE7L18kKfwyjsP06V1YhkAv62k.mft (raw, json)
Hash identifier:          uaazXhBxhvplDJADpQpQiU5dEGXLX15nNech2+4c650=
Subject key identifier:   D6:48:81:1E:60:BB:F4:84:9F:BB:E6:61:28:6F:55:A8:A8:71:96:B5
Authority key identifier: 41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69
Certificate issuer:       /CN=A91757CB/serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
Manifest number:          016E
Signing time:             Tue 03 Mar 2026 04:28:55 +0000
Manifest this update:     Tue 03 Mar 2026 04:28:55 +0000
Manifest next update:     Tue 10 Mar 2026 04:28:55 +0000
Files and hashes:         1: QSE7L18kKfwyjsP06V1YhkAv62k.crl (hash: BX6EKoY5Nf3bTno2IFbbxEz5WYXiuVS3HCSYc47kAtw=)
                          2: 47142068221311EFB680F113C4F9AE02.roa (hash: q1TM5Ebdt5SP+k07ZaaYP0AaM0RnbZZmHVQA7uMpDO0=)
                          3: EE01A248F2FB11EE9AA9E24CC4F9AE02.roa (hash: wtU3FReeveSRaGECvJZwcjQF5xOlaITNyX17soC/vMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=41213B2F5F2429FC328EC3F4E95D5886402FEB69
        Validity
            Not Before: Mar  3 04:28:55 2026 GMT
            Not After : Mar 10 04:28:55 2026 GMT
        Subject: CN=69a66387-dad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:ba:70:87:31:56:b8:48:b1:c4:5c:16:6e:
                    d0:94:0e:56:28:49:14:25:ec:3c:dc:77:f7:94:69:
                    d4:bd:fd:ac:72:f7:2b:8e:af:ed:10:fb:e3:d2:08:
                    17:b5:45:37:e5:ee:2e:29:b7:46:58:a6:7e:4f:ff:
                    03:ea:5e:8e:72:82:8d:79:a5:39:80:fd:6e:b2:ce:
                    2e:8d:2c:e5:ab:0f:3c:b9:4d:60:88:c4:d0:47:23:
                    e0:3f:cf:18:1d:42:e8:cb:5e:82:d9:bf:33:6e:d0:
                    b1:54:7b:c9:35:70:6d:45:f2:b8:cc:75:d4:e8:b6:
                    23:a1:a3:9c:ef:84:f0:8c:4f:2c:ac:9b:37:61:33:
                    36:cc:c3:ca:c7:c6:cd:c3:68:f4:e1:a0:c1:9a:54:
                    38:c1:ea:d8:71:4c:0c:97:cf:50:ce:71:da:a4:51:
                    40:06:06:2d:23:70:1c:94:b7:90:1c:05:4d:4e:3c:
                    24:55:d2:61:de:1d:dc:46:b5:6a:91:0d:33:c3:03:
                    32:16:39:dc:ca:9c:33:c5:f9:90:8e:49:2e:10:76:
                    c0:4f:b6:a4:5a:05:dc:90:e3:79:63:07:36:05:61:
                    11:fc:72:bf:7d:50:fe:86:b1:26:f6:04:94:19:e9:
                    a3:00:c8:7b:a1:f5:18:6e:4a:7a:8f:24:94:48:16:
                    aa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:48:81:1E:60:BB:F4:84:9F:BB:E6:61:28:6F:55:A8:A8:71:96:B5
            X509v3 Authority Key Identifier:
                keyid:41:21:3B:2F:5F:24:29:FC:32:8E:C3:F4:E9:5D:58:86:40:2F:EB:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSE7L18kKfwyjsP06V1YhkAv62k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/459B0C64F2F811EEA3506738C4F9AE02/QSE7L18kKfwyjsP06V1YhkAv62k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3d:61:a2:af:e6:73:54:91:62:c1:e2:47:33:f3:89:6e:14:
         46:c7:98:1f:9e:c4:21:d6:03:47:fb:30:71:65:b6:08:58:1e:
         6d:5f:ab:88:27:3e:27:92:4f:28:39:2d:0d:11:dc:39:0f:39:
         46:33:fa:65:ea:54:14:06:86:0c:43:64:f8:a3:f6:54:bd:4d:
         90:30:fd:19:84:5f:49:b0:0d:e5:77:ae:5d:82:1a:ec:11:5c:
         44:bd:06:f1:be:3b:c1:9d:a4:9d:5e:46:fc:cc:d5:bc:7e:7a:
         43:dc:b3:46:12:9e:fa:b0:3c:61:46:8d:1e:1e:89:80:12:76:
         9d:83:eb:65:46:04:c5:68:e9:e1:9e:b5:c4:30:dc:a3:8e:82:
         f8:89:a8:9a:5f:ad:08:61:7e:1f:4f:db:71:7a:23:3b:0f:a6:
         c3:98:db:36:5c:e0:ab:df:a8:a7:ff:28:8c:3c:a3:9b:a5:80:
         ae:a3:40:a2:e4:5c:f8:22:25:5f:03:99:08:87:e2:6f:b8:ac:
         ab:3e:40:1b:d5:d8:46:f4:69:8d:b5:04:3a:a8:66:4d:8d:5c:
         de:82:a0:67:1e:b8:d7:c4:30:07:73:13:67:88:9b:b0:f1:e9:
         e6:07:73:d0:35:0d:9f:6f:44:0e:b2:5c:31:f6:e4:26:8a:f4:
         e3:52:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:21:06 2026 by rpki-client