Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
File:                     kQglePceS4YFfcPrBwP-ZYnmaJE.mft (raw, json)
Hash identifier:          QcCa8Qi44UsKbtg7f3XoIin0Ir/WYSwObtXze0LJFM0=
Subject key identifier:   71:6E:F8:B9:64:24:18:B2:41:9B:D8:7E:FB:3D:2E:7E:3B:D3:F4:E4
Authority key identifier: 91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91
Certificate issuer:       /CN=A91BC039/serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
Manifest number:          FA
Signing time:             Mon 02 Mar 2026 23:27:15 +0000
Manifest this update:     Mon 02 Mar 2026 23:27:14 +0000
Manifest next update:     Mon 09 Mar 2026 23:27:14 +0000
Files and hashes:         1: kQglePceS4YFfcPrBwP-ZYnmaJE.crl (hash: 5c4ULm/Z/UvUQjUVUUoR68TDjFoKRAIOAgo4oXJCO/E=)
                          2: 1167F6B2A18211EFA7475221C4F9AE02.roa (hash: YCpUxQ8dgkmMh3e5UHsZ7Ir2L2aOgpsDHkfqNgWqSFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 23:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC039, serialNumber=91082578F71E4B86057DC3EB0703FE6589E66891
        Validity
            Not Before: Mar  2 23:27:14 2026 GMT
            Not After : Mar  9 23:27:14 2026 GMT
        Subject: CN=69a61cd3-1f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fd:39:d7:80:68:5b:0a:ba:20:ea:e1:3e:b0:
                    a5:fb:dc:2b:d8:04:80:60:6f:07:43:ac:ae:a2:a9:
                    51:2a:aa:2a:34:88:cc:11:b9:b8:6b:54:c8:3e:5f:
                    dd:6c:49:16:fe:56:75:c4:93:38:5f:12:7e:6e:b3:
                    16:05:2b:ce:c8:04:03:64:73:4b:f9:8e:c2:c6:7b:
                    5f:2d:d3:46:75:20:07:fe:52:24:e6:95:69:6e:b2:
                    bc:c8:f5:d9:12:1d:af:41:27:c2:55:12:5b:24:c6:
                    c9:e5:a2:be:28:4f:b9:44:69:4e:37:a0:0b:37:7b:
                    9f:7e:dd:2d:b0:a2:aa:01:fa:35:96:40:29:b7:08:
                    f2:79:68:e8:ee:6c:c5:b8:64:ce:a1:ad:92:a4:86:
                    4f:e7:71:fc:b9:94:2e:34:04:e7:1f:7d:6b:2d:c6:
                    e2:b5:e1:0a:8d:40:4d:4c:3c:10:d5:77:36:ec:54:
                    8c:bb:5f:41:98:cc:2d:0f:52:6b:43:52:c8:0d:b0:
                    15:ee:67:ac:37:6f:f4:96:b0:f5:d3:fb:79:77:a6:
                    f8:92:ec:17:fd:80:6b:4d:9f:80:0f:89:4d:f0:2c:
                    2f:a7:32:b3:1c:3c:b6:6d:9e:78:13:a9:9e:80:4f:
                    75:5d:1f:d8:7c:be:30:ac:1a:71:3b:3a:79:11:a2:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6E:F8:B9:64:24:18:B2:41:9B:D8:7E:FB:3D:2E:7E:3B:D3:F4:E4
            X509v3 Authority Key Identifier:
                keyid:91:08:25:78:F7:1E:4B:86:05:7D:C3:EB:07:03:FE:65:89:E6:68:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kQglePceS4YFfcPrBwP-ZYnmaJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/1534A05AA17411EFBF616624C4F9AE02/kQglePceS4YFfcPrBwP-ZYnmaJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:3c:92:f5:c8:b7:1c:e0:6e:11:b1:ac:2a:25:d9:c5:f8:
         27:54:30:01:4a:11:d0:10:02:ce:e5:7d:d3:af:18:23:27:93:
         60:8f:d6:f1:3c:e7:5d:5a:d3:58:72:81:09:a0:77:0a:76:59:
         7b:a5:c3:c1:e7:98:49:d2:6c:a7:45:96:68:73:6b:be:70:36:
         69:d3:ef:35:46:93:9f:d2:b0:5e:c4:4b:ad:bf:d5:31:8e:7e:
         91:d4:10:d4:42:6b:54:c0:1b:a6:59:e6:65:fb:30:d6:d2:b7:
         24:86:90:58:10:b5:81:23:30:51:7c:8b:02:5d:2b:1c:c5:91:
         b6:6f:62:21:29:ba:5a:df:ef:f8:8b:8f:c8:07:0c:f7:92:48:
         90:a1:10:91:be:c2:90:8e:d3:e6:ce:fa:be:1d:1e:24:a2:7b:
         50:90:38:db:b8:06:32:01:33:9d:c2:87:6e:a9:88:48:dd:7c:
         7a:55:28:f6:c0:0b:6c:85:63:1e:25:60:a5:f0:d1:d6:b7:56:
         a4:a8:24:77:36:cf:4e:8b:24:7d:0e:b9:a4:19:f4:5d:5b:3a:
         61:d6:7e:ef:db:35:e1:da:49:b1:96:22:21:9a:51:66:21:8f:
         4d:ab:87:79:fa:ed:12:07:eb:bb:0a:8b:53:34:33:09:1c:14:
         b3:1f:09:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMwMzkxMTAvBgNVBAUTKDkxMDgyNTc4RjcxRTRCODYwNTdEQzNFQjA3MDNGRTY1
ODlFNjY4OTEwHhcNMjYwMzAyMjMyNzE0WhcNMjYwMzA5MjMyNzE0WjAYMRYwFAYD
VQQDEw02OWE2MWNkMy0xZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnf0514BoWwq6IOrhPrCl+9wr2ASAYG8HQ6yuoqlRKqoqNIjMEbm4a1TIPl/d
bEkW/lZ1xJM4XxJ+brMWBSvOyAQDZHNL+Y7CxntfLdNGdSAH/lIk5pVpbrK8yPXZ
Eh2vQSfCVRJbJMbJ5aK+KE+5RGlON6ALN3ufft0tsKKqAfo1lkAptwjyeWjo7mzF
uGTOoa2SpIZP53H8uZQuNATnH31rLcbiteEKjUBNTDwQ1Xc27FSMu19BmMwtD1Jr
Q1LIDbAV7mesN2/0lrD10/t5d6b4kuwX/YBrTZ+AD4lN8CwvpzKzHDy2bZ54E6me
gE91XR/YfL4wrBpxOzp5EaKAGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFu+Llk
JBiyQZvYfvs9Ln470/TkMB8GA1UdIwQYMBaAFJEIJXj3HkuGBX3D6wcD/mWJ5miR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS8xNTM0QTA1QUEx
NzQxMUVGQkY2MTY2MjRDNEY5QUUwMi9rUWdsZVBjZVM0WUZmY1ByQndQLVpZbm1h
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tRZ2xlUGNlUzRZRmZjUHJCd1AtWllubWFKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzAzOS8xNTM0QTA1QUExNzQxMUVGQkY2MTY2MjRDNEY5QUUwMi9rUWdsZVBjZVM0
WUZmY1ByQndQLVpZbm1hSkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoIs8kvXItxzgbhGxrCol2cX4J1QwAUoR0BACzuV9068YIyeTYI/W8TznXVrT
WHKBCaB3CnZZe6XDweeYSdJsp0WWaHNrvnA2adPvNUaTn9KwXsRLrb/VMY5+kdQQ
1EJrVMAbplnmZfsw1tK3JIaQWBC1gSMwUXyLAl0rHMWRtm9iISm6Wt/v+IuPyAcM
95JIkKEQkb7CkI7T5s76vh0eJKJ7UJA427gGMgEzncKHbqmISN18elUo9sALbIVj
HiVgpfDR1rdWpKgkdzbPToskfQ65pBn0XVs6YdZ+79s14dpJsZYiIZpRZiGPTauH
efrtEgfruwqLUzQzCRwUsx8J2w==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:23:52 2026 by rpki-client