Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json)
Hash identifier:          hu0jQOqHRSiNSEV0VgHJBDd45dr2I7q8ODPfIwHMtqY=
Subject key identifier:   02:67:9C:D6:F4:6C:E2:65:4E:9F:71:34:C7:74:F3:5D:0F:46:9A:61
Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Certificate issuer:       /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
Manifest number:          088A
Signing time:             Tue 24 Mar 2026 21:59:22 +0000
Manifest this update:     Tue 24 Mar 2026 21:59:21 +0000
Manifest next update:     Tue 31 Mar 2026 21:59:21 +0000
Files and hashes:         1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: oLPqhZZ47VG/tAYzEPqUl7Zb89ez1+y1wCqRKyJ+pe0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Validity
            Not Before: Mar 24 21:59:21 2026 GMT
            Not After : Mar 31 21:59:21 2026 GMT
        Subject: CN=69c3093a-cdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:86:5d:87:d0:0e:8f:7e:fa:7e:63:cc:3b:
                    86:bd:57:ab:66:d0:fd:fd:46:02:05:d6:99:f0:8e:
                    f7:e8:db:23:f9:73:a2:31:9f:1d:1f:9c:03:57:6c:
                    2c:35:d7:b8:d8:c0:51:f3:4c:69:cb:f1:30:51:83:
                    a6:1e:2c:4b:e6:f0:43:6d:31:1e:02:74:ce:27:3d:
                    c4:95:38:18:2a:07:ec:75:14:7c:33:be:bf:0d:0c:
                    a4:10:cd:c9:3b:16:12:17:42:5a:83:24:43:de:36:
                    78:3a:37:59:de:55:20:a4:f9:d8:86:53:4f:86:a3:
                    ef:d0:02:22:72:4c:6e:55:e9:73:89:72:8f:a6:d3:
                    0f:54:b2:94:76:57:e4:b9:49:45:3e:e7:04:66:4b:
                    85:ca:70:4f:3c:30:9c:0b:7c:78:db:7f:f8:b7:11:
                    af:1b:e3:2d:63:b9:6e:c1:e6:b4:6e:9f:fb:52:c9:
                    53:57:1f:b5:91:29:50:13:2b:fb:0f:e7:5a:25:83:
                    b6:5d:43:d6:2b:07:a1:b8:1e:71:68:d4:db:c6:74:
                    23:d7:86:c4:9e:ac:24:ae:39:14:7c:23:e6:5b:89:
                    f5:6a:8e:47:4d:79:af:40:f4:a3:de:51:ae:46:a3:
                    ba:7e:f4:7c:39:f4:38:74:9f:d9:34:65:55:1b:93:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:9C:D6:F4:6C:E2:65:4E:9F:71:34:C7:74:F3:5D:0F:46:9A:61
            X509v3 Authority Key Identifier:
                keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:d7:50:98:67:db:a7:8c:71:30:7f:8d:db:65:c6:16:80:
         10:1f:52:b4:80:8b:30:6a:50:97:96:3d:bc:6f:d4:02:28:b3:
         10:19:5a:70:91:03:d4:9a:0e:29:6d:1f:0b:61:5d:65:5f:41:
         fc:19:95:b7:66:99:34:9f:2a:d4:24:c0:ef:0f:ba:62:ba:2c:
         62:62:de:6c:43:74:5f:ee:57:9b:4f:6b:74:20:48:d0:a6:54:
         58:17:af:74:ac:5a:72:8b:b4:1b:27:7b:da:46:ed:e9:b1:ef:
         ad:50:d0:50:aa:68:c8:98:fc:60:10:44:45:2f:51:47:32:9a:
         93:8d:b0:1f:41:b3:0b:f5:7d:51:6a:4b:f4:f1:7f:cd:4a:e7:
         30:c5:4a:85:1a:a5:d4:62:6a:17:b1:26:1b:7e:1f:6b:a3:1f:
         3c:07:fc:ec:c3:de:eb:a5:c2:1c:f2:87:b6:ce:d0:62:04:aa:
         7b:b6:2c:e8:ca:93:e3:f7:4c:3d:6c:a8:f9:8d:1c:c0:a3:d6:
         3e:32:12:a9:ab:59:ce:70:2e:16:32:b4:82:d9:6f:95:3f:a1:
         2e:a0:70:f6:e7:91:89:4c:e7:41:e5:42:43:a5:5f:a1:f5:49:
         74:6f:d7:06:3f:77:5b:91:b0:b7:5c:6f:fb:84:3b:46:25:70:
         51:ab:28:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:21:24 2026 by rpki-client