Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
File:                     QbMaaMknik1EdI4t-MasqBV47LU.mft (raw, json)
Hash identifier:          xvi7Xpe0Yyqrkzx6+WLkEalupJxEXhlbIkjdQAh6usE=
Subject key identifier:   53:22:2D:EA:78:04:8C:99:71:02:E4:81:89:07:57:18:8D:4A:5D:98
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Certificate issuer:       /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial:       0BD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
Manifest number:          0BC9
Signing time:             Tue 22 Sep 2026 18:52:06 +0000
Manifest this update:     Tue 22 Sep 2026 18:52:06 +0000
Manifest next update:     Tue 29 Sep 2026 18:52:06 +0000
Files and hashes:         1: QbMaaMknik1EdI4t-MasqBV47LU.crl (hash: 4F0D9gDzixxUi8TlaCmpwEloMihmNjuaHXufCxh09vE=)
                          2: 73A346A24D5D11EAA811C368C4F9AE02.roa (hash: nj77j6pl8szzl1JiOzZeiuGGmWG3Z+CTwRY8QlEyQKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
                          rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
        Validity
            Not Before: Sep 22 18:52:06 2026 GMT
            Not After : Sep 29 18:52:06 2026 GMT
        Subject: CN=6ab2ce56-6ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:49:4b:dd:11:41:f4:b2:b7:b5:de:f0:3e:
                    91:da:a5:f4:03:01:3d:9d:72:22:ca:21:3e:ff:35:
                    4f:5c:a8:c4:0f:0d:cc:07:3a:72:88:c0:d1:cc:a8:
                    9a:b7:49:bb:80:48:37:4f:7c:6a:e7:a7:2b:53:04:
                    3d:aa:22:0f:a8:81:9c:d8:91:0c:b8:60:72:33:95:
                    99:fb:b6:3d:96:f0:91:ed:5e:2c:fd:07:2f:8f:82:
                    c1:03:20:a4:7a:8e:9b:07:a0:09:26:4f:0e:14:83:
                    b6:23:64:c6:96:7f:58:1b:1d:85:da:bd:05:58:2e:
                    1e:2a:aa:b7:2c:c0:6c:c4:cf:2a:f8:55:07:af:1f:
                    30:ae:75:9a:79:f2:d3:55:a6:78:89:ed:d8:af:6a:
                    25:51:c4:bd:2e:dd:48:97:02:5f:ae:6a:37:52:72:
                    bd:70:47:29:be:51:ff:f4:ee:bc:b1:48:ba:c5:e8:
                    2b:5a:51:25:4b:b7:43:38:c9:1a:5c:43:dd:c6:47:
                    e9:6f:75:99:9d:c3:6c:1f:12:15:75:b3:a5:89:c5:
                    36:30:28:b9:f5:9a:d2:82:6b:73:ef:d1:af:83:e7:
                    66:b6:45:ce:60:9d:b0:ec:cc:ec:dc:b3:23:3b:d0:
                    30:5b:dc:5e:f4:bc:24:3f:68:23:9f:11:43:1a:94:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:22:2D:EA:78:04:8C:99:71:02:E4:81:89:07:57:18:8D:4A:5D:98
            X509v3 Authority Key Identifier:
                keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:05:db:d2:97:08:6e:77:62:df:1d:b3:c6:cb:3b:db:44:22:
         11:d4:93:d2:53:a1:01:d5:7f:3f:9f:01:31:34:17:6e:07:94:
         f8:57:1c:af:96:ac:fb:ca:6f:d1:eb:9d:c7:31:4d:f6:3e:80:
         09:fd:b5:ac:91:92:87:6f:b6:16:4f:3f:e0:11:8a:2c:1d:c7:
         e9:0c:ba:6a:4e:9b:22:fc:70:b7:30:d8:de:ae:b2:ef:d9:79:
         b1:3a:1b:bb:80:2e:8b:06:ac:45:44:11:58:1f:a3:7f:61:9e:
         78:a6:18:fb:eb:03:e8:27:3f:5b:5d:19:cc:3d:5f:9d:cf:62:
         e4:1f:ce:77:2a:41:f6:3d:8a:11:9a:d9:93:90:68:6f:55:f8:
         f0:ec:4b:c0:41:50:2d:fc:5c:13:75:09:da:c4:83:ae:15:ea:
         fe:b2:f3:bb:78:41:e1:f4:58:41:ae:64:f0:44:f5:bb:9c:63:
         06:35:7c:19:bc:16:42:9b:71:2a:4a:ad:72:8f:fc:ee:c6:08:
         21:ee:ea:64:22:ac:44:35:24:b0:0d:cc:f2:5b:10:c6:4b:a9:
         ba:12:70:f5:3d:2b:f9:98:94:b0:9f:1b:f4:28:bc:6f:c2:1e:
         11:e2:04:77:3a:5f:4b:49:b0:30:2c:17:da:a5:39:fe:c4:d9:
         17:4e:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:18 2026 by rpki-client