Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File:                     QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier:          5S9+ILk1WX2jfGGJuX6yfyyn/FulsawkARFxribKNKg=
Subject key identifier:   EE:3A:57:58:FE:24:13:80:D1:D9:AD:12:F3:78:8C:B7:E5:17:3B:55
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer:       /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial:       02B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number:          02B3
Signing time:             Wed 07 Oct 2026 01:50:14 +0000
Manifest this update:     Wed 07 Oct 2026 01:50:13 +0000
Manifest next update:     Wed 14 Oct 2026 01:50:13 +0000
Files and hashes:         1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: o0AdkGBdaE7k91QtCftglqoAg5X9CtTnNsBbnblkD38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
                          rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
        Validity
            Not Before: Oct  7 01:50:13 2026 GMT
            Not After : Oct 14 01:50:13 2026 GMT
        Subject: CN=6ac5a556-67da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:e4:7b:db:90:f8:3f:d0:b3:da:f4:20:df:
                    48:cd:33:c5:cf:f6:6b:4a:14:11:61:8c:d1:bf:d5:
                    fd:c6:64:83:5d:86:99:93:a3:b1:11:b4:f8:8f:03:
                    96:85:a4:fd:c7:f2:26:64:e0:ac:60:21:8a:00:dc:
                    84:4c:f1:74:7e:79:f8:8f:9b:17:87:47:1e:0e:8a:
                    b4:7f:3b:af:db:40:39:f1:63:a0:f0:13:47:7f:81:
                    c9:7d:7f:20:f8:a7:90:f6:85:9e:77:71:c2:d3:6d:
                    d6:6c:86:4c:40:99:1a:8a:42:bb:4f:fa:8a:57:71:
                    34:f4:94:03:d5:1b:71:a8:c6:0b:70:7d:d1:7f:ff:
                    ed:48:79:94:af:bb:86:cc:67:e7:af:84:7d:a8:a4:
                    30:09:b6:41:7a:06:ca:ec:77:97:f1:e3:b1:e6:be:
                    cf:d0:fc:13:bf:b6:33:87:85:cc:05:53:39:f4:c8:
                    44:cb:2c:d5:55:12:82:92:6d:4a:a0:fb:ee:5d:80:
                    88:d7:a1:89:0e:d5:24:d4:7e:a1:a9:f4:3f:91:f0:
                    12:55:88:24:3e:62:0e:e1:6b:03:8a:c5:0b:d4:d1:
                    f6:74:c1:58:56:26:f9:74:92:1c:55:b9:a9:10:2a:
                    ec:b2:96:6e:eb:78:e9:db:8a:d6:18:e8:01:71:1c:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:57:58:FE:24:13:80:D1:D9:AD:12:F3:78:8C:B7:E5:17:3B:55
            X509v3 Authority Key Identifier:
                keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:44:6d:2f:79:7a:bc:d3:7f:42:d7:e1:ee:d4:b8:04:88:a6:
         49:65:f9:03:a8:78:c5:2a:36:32:d6:1f:04:07:4c:72:2d:c6:
         e1:6a:c9:92:94:16:d1:ee:09:9d:b8:71:97:f9:4e:84:7d:3b:
         d1:4c:00:eb:67:4f:11:5b:77:52:eb:30:25:ca:64:2a:c6:fc:
         1d:23:4b:ff:e7:16:41:6e:01:52:f5:05:90:86:f1:4d:d8:03:
         1d:6f:20:73:c1:0b:20:9e:ae:e7:e3:5f:c4:64:2a:bb:29:f1:
         d0:61:b2:2b:e1:f1:f1:1d:5d:4a:a4:38:0c:f4:27:5d:20:cf:
         74:64:c9:bf:c4:38:13:79:da:53:8f:07:8c:80:a8:46:67:b3:
         1a:51:a9:33:77:e0:54:45:9b:a1:f9:83:6c:a3:01:f3:34:83:
         e4:94:d0:10:c1:7f:3e:bd:0a:88:53:97:7e:41:ae:bc:13:74:
         6d:cc:03:62:67:37:52:4c:e7:c3:4a:a1:f2:7b:1d:f5:43:cd:
         85:fc:90:99:94:e6:28:71:d6:07:a6:18:f5:7c:1d:bd:d0:fb:
         72:55:9f:b2:ce:67:aa:45:08:b2:69:20:80:b7:a6:2f:1c:e5:
         4f:e8:64:3e:31:35:2a:d0:53:40:f1:ab:28:8b:72:db:a4:36:
         11:c2:69:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD
RDI4QTRBRUYwHhcNMjYxMDA3MDE1MDEzWhcNMjYxMDE0MDE1MDEzWjAYMRYwFAYD
VQQDEw02YWM1YTU1Ni02N2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmBvke9uQ+D/Qs9r0IN9IzTPFz/ZrShQRYYzRv9X9xmSDXYaZk6OxEbT4jwOW
haT9x/ImZOCsYCGKANyETPF0fnn4j5sXh0ceDoq0fzuv20A58WOg8BNHf4HJfX8g
+KeQ9oWed3HC023WbIZMQJkaikK7T/qKV3E09JQD1RtxqMYLcH3Rf//tSHmUr7uG
zGfnr4R9qKQwCbZBegbK7HeX8eOx5r7P0PwTv7Yzh4XMBVM59MhEyyzVVRKCkm1K
oPvuXYCI16GJDtUk1H6hqfQ/kfASVYgkPmIO4WsDisUL1NH2dMFYVib5dJIcVbmp
ECrsspZu63jp24rWGOgBcRxkjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO46V1j+
JBOA0dmtEvN4jLflFztVMB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC
QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011
QjZGVlRWNmJvTFROS0tTdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhERtL3l6vNN/Qtfh7tS4BIimSWX5A6h4xSo2MtYfBAdMci3G4WrJkpQW0e4J
nbhxl/lOhH070UwA62dPEVt3UuswJcpkKsb8HSNL/+cWQW4BUvUFkIbxTdgDHW8g
c8ELIJ6u5+NfxGQquynx0GGyK+Hx8R1dSqQ4DPQnXSDPdGTJv8Q4E3naU48HjICo
RmezGlGpM3fgVEWbofmDbKMB8zSD5JTQEMF/Pr0KiFOXfkGuvBN0bcwDYmc3Ukzn
w0qh8nsd9UPNhfyQmZTmKHHWB6YY9XwdvdD7clWfss5nqkUIsmkggLemLxzlT+hk
PjE1KtBTQPGrKIty26Q2EcJp2w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:02 2026 by rpki-client