Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
File:                     QcdXFCmaV43RkP0fcwlVsf2awfQ.mft (raw, json)
Hash identifier:          Wu+C68lpq8nRJED7/1yUgqDmhnHowmIN6vXFBSrfSMc=
Subject key identifier:   E7:D8:87:16:98:41:BF:70:97:3E:7D:15:BD:59:FC:73:0B:7E:76:BC
Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4
Certificate issuer:       /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
Manifest number:          95
Signing time:             Tue 03 Mar 2026 07:12:57 +0000
Manifest this update:     Tue 03 Mar 2026 07:12:57 +0000
Manifest next update:     Tue 10 Mar 2026 07:12:57 +0000
Files and hashes:         1: QcdXFCmaV43RkP0fcwlVsf2awfQ.crl (hash: I06psP2GJSmK0Tp6WL2ZmNzamvwNDO9cYC1vu8l6bow=)
                          2: B87594FC08B311F1954B37591C3D8C67.roa (hash: wztUnu/AtmwGJSEKvUQ+sSvPTP/4Cs6eUYir69FLSaI=)
                          3: C425CEE64B8211F0A94CFD82C4F9AE02.roa (hash: kYrLbQFT1ZzGHGGu97W4fdlheMT2k3tj7Vb3H/0HdO4=)
                          4: D999F880AF4411F0A866CC48C4F9AE02.roa (hash: cG6u0zgjdvCrRZeQ4usyXAcEzT17uS3cbK/qREEeINU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4
        Validity
            Not Before: Mar  3 07:12:57 2026 GMT
            Not After : Mar 10 07:12:57 2026 GMT
        Subject: CN=69a689f9-4696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:4e:19:c4:37:39:fe:17:ed:e7:f4:47:0d:
                    51:0d:6b:b0:25:0f:33:4a:79:55:27:10:50:16:59:
                    b1:0b:04:5c:ef:83:86:cb:2d:d9:e0:17:6f:a7:db:
                    57:24:e6:e8:56:3a:a7:b7:ea:d0:82:23:21:29:c8:
                    04:a3:b9:d3:3a:68:57:b9:40:c8:91:2e:10:57:ef:
                    5f:7f:de:e0:21:71:97:89:b0:cb:4d:1d:a8:74:b6:
                    57:3b:65:4c:2d:5b:17:f6:98:38:66:76:ad:e7:a5:
                    ea:d7:62:f4:f0:f3:00:b3:82:19:cc:ae:c0:79:c7:
                    0e:50:f4:af:27:f4:36:95:36:fc:c7:90:d4:da:ad:
                    11:2c:b7:2a:af:a1:af:16:7d:6f:eb:50:8f:b0:21:
                    74:28:ed:45:bb:56:5c:a0:1d:6f:50:c0:ef:2f:c8:
                    5e:79:c0:55:de:3a:2c:f6:99:6c:97:7a:ca:fe:77:
                    ca:7e:e4:4f:97:43:89:b8:17:cf:2b:ef:6c:f2:3e:
                    57:93:df:9d:52:9d:13:17:eb:91:c9:e8:0f:f1:b4:
                    0a:bd:30:c1:e0:4e:4d:5c:8c:f5:98:1a:d4:7d:5d:
                    12:ec:ae:0c:30:1f:bd:73:c2:ea:2b:06:4c:1a:63:
                    29:44:e3:7e:fd:fb:58:e9:6c:cc:ea:b2:3e:4a:22:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D8:87:16:98:41:BF:70:97:3E:7D:15:BD:59:FC:73:0B:7E:76:BC
            X509v3 Authority Key Identifier:
                keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:f6:47:21:f5:11:79:ab:25:00:da:35:e2:ed:94:17:a9:
         c0:82:95:b4:61:c4:ad:10:da:d6:77:65:96:b5:37:99:d0:1b:
         d8:1d:97:ad:e1:c9:e3:9f:aa:b3:d9:ff:c2:84:ac:14:35:e7:
         d6:55:3c:de:96:67:dc:5f:9d:fe:fd:28:93:14:dc:72:39:1d:
         bb:ae:7a:69:a2:9d:56:93:70:34:92:f4:cc:55:91:b5:94:83:
         d5:b1:50:04:d9:40:41:8e:9d:e8:22:4d:70:b8:49:75:12:02:
         1e:b8:71:e4:18:f5:dd:da:5e:40:56:f0:1a:60:2f:b3:79:5d:
         ee:10:63:46:43:12:6f:c4:31:41:5b:4a:90:37:95:b7:36:3c:
         9b:15:49:f8:cc:60:f8:ac:b6:46:d4:77:1e:2d:48:2a:39:b4:
         f3:de:2b:df:9c:38:66:f3:4e:0a:03:8d:82:3f:0a:d3:3f:76:
         f8:06:94:f9:91:5a:3a:5b:eb:22:ce:21:5b:c6:9c:52:68:75:
         82:79:cc:c1:4f:54:19:a4:6c:02:a3:37:2f:4d:4e:19:84:a4:
         9d:04:b5:43:49:e1:17:65:8f:3c:fe:45:4b:0b:2d:e7:d9:de:
         6e:3c:38:35:9a:fb:cf:e1:68:10:90:d3:35:d6:f3:a3:69:19:
         59:0b:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:35:32 2026 by rpki-client