Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File:                     QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier:          VAK6S6NNX4s/46uvLMYq44xJBtEU2FTIcF2e12I9Tjc=
Subject key identifier:   DA:D7:5F:EE:71:90:1F:EA:91:DA:82:A7:29:8C:89:3E:C9:B7:9C:F9
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer:       /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial:       0871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number:          0869
Signing time:             Tue 24 Mar 2026 20:26:15 +0000
Manifest this update:     Tue 24 Mar 2026 20:26:15 +0000
Manifest next update:     Tue 31 Mar 2026 20:26:15 +0000
Files and hashes:         1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: e2wLiEXJJLEfK3d7Z9DFfXJFUQADnuuAl9CqtxsDJf0=)
                          2: 6944587246B311F090CDB927C4F9AE02.roa (hash: hGp6bwwFeBV78RfPCjsM5O3StrZUexewSoAPhlPuLdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
                          rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
        Validity
            Not Before: Mar 24 20:26:15 2026 GMT
            Not After : Mar 31 20:26:15 2026 GMT
        Subject: CN=69c2f367-fa44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:95:5b:a8:f0:ec:80:09:7a:63:71:e7:23:
                    57:e5:56:d8:eb:94:d7:c3:d3:af:49:39:5f:26:b4:
                    e6:6c:94:1e:9e:42:57:b9:c9:db:f1:d9:f6:89:ee:
                    67:ac:4d:34:0d:cc:d0:af:49:9a:ec:82:64:aa:91:
                    dc:09:41:7a:fb:47:fd:ea:65:55:18:5e:cd:a4:47:
                    56:b1:2d:d1:71:6c:28:d6:4f:69:a8:3c:27:37:3d:
                    c7:94:e0:f9:28:6c:79:f9:fc:77:20:73:57:b1:53:
                    39:29:2f:3b:92:6a:57:e1:dc:35:f7:17:08:f4:98:
                    f2:e4:44:ab:e8:d0:58:69:1c:6f:cf:a7:24:af:ab:
                    f7:55:c1:1b:a1:80:f4:2f:39:f8:6e:27:a5:8b:44:
                    a3:c6:69:10:53:5e:30:81:11:f2:b1:25:53:07:0e:
                    03:30:77:9e:96:13:cd:0b:57:91:91:61:f2:b7:91:
                    91:39:53:a2:de:10:cf:7d:64:5d:96:d0:ea:12:3a:
                    f0:73:ce:e7:8e:65:d9:44:50:32:b2:7c:ca:81:c4:
                    e9:18:86:aa:29:12:72:3f:da:0d:87:68:19:77:22:
                    e1:14:c7:3e:e7:79:1c:23:87:97:ec:a0:80:3a:c7:
                    66:45:e5:61:8d:92:df:4f:9a:75:9e:7c:3a:c0:e9:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D7:5F:EE:71:90:1F:EA:91:DA:82:A7:29:8C:89:3E:C9:B7:9C:F9
            X509v3 Authority Key Identifier:
                keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:50:5e:7e:8d:20:42:27:0b:89:49:0b:81:c9:88:6f:da:ab:
         76:85:dd:4a:c3:cf:11:c0:c0:23:0b:ab:ce:d1:60:b9:2d:58:
         7e:9c:2f:e2:46:7e:97:80:63:28:0f:1d:f4:eb:66:c5:15:7b:
         46:97:4f:1f:df:4c:e0:7a:45:ed:39:7d:5a:ee:8c:bd:d8:8f:
         d8:ad:1f:31:47:be:96:ca:d9:25:35:61:50:2c:22:b5:2e:f2:
         7c:f7:67:6b:d3:3b:95:d7:70:9f:b0:5e:40:ce:ba:c0:45:1e:
         0a:c1:22:33:5c:10:3b:22:c8:10:68:c4:87:d9:78:3c:e2:97:
         1b:58:d0:a9:57:24:d4:07:7a:af:94:d0:65:8a:6a:b7:4c:36:
         52:48:9f:64:2c:e0:de:1d:a8:fb:42:7e:09:6b:20:0e:51:3b:
         a6:cd:55:c9:ea:c3:08:b7:1c:d5:f7:4b:c9:2e:ca:ab:5f:3e:
         00:d0:ad:34:dc:07:7a:4d:01:67:d8:05:f5:f9:17:25:40:9e:
         89:35:05:ec:af:5c:73:6d:c1:e2:08:00:86:21:0e:54:d9:0a:
         b9:90:4d:da:73:7c:fb:3c:b9:72:08:d9:6c:30:7e:e6:c0:43:
         16:1b:0c:bd:2c:48:90:95:cb:45:28:93:89:2a:0e:d1:4a:e7:
         4d:63:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:00 2026 by rpki-client