Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File:                     QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier:          4zE9fxFhn+DtJ3r3yHO3sXAcNS8IOSBbyajv5o3hGHE=
Subject key identifier:   A4:F5:20:CE:A3:51:76:1F:30:4A:E3:7F:6F:0A:28:FA:44:A0:95:0F
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer:       /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number:          A8
Signing time:             Fri 27 Mar 2026 06:46:40 +0000
Manifest this update:     Fri 27 Mar 2026 06:46:40 +0000
Manifest next update:     Fri 03 Apr 2026 06:46:40 +0000
Files and hashes:         1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: mycr7+Iyy8w4BzA+HFAOApRQoD4O7t6DClw2JHe5eUY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
        Validity
            Not Before: Mar 27 06:46:40 2026 GMT
            Not After : Apr  3 06:46:40 2026 GMT
        Subject: CN=69c627d0-32ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:5c:f3:52:5a:79:8a:eb:79:f3:5f:1b:e8:
                    42:5d:87:c3:83:2e:5d:49:9d:74:f3:c5:5c:95:08:
                    1a:64:19:c4:65:d9:4b:b0:70:98:c7:f9:9a:95:19:
                    a6:f5:9c:0b:c0:7e:d1:b8:4f:a1:61:c1:0d:46:45:
                    b8:6f:ca:c6:be:db:89:b2:06:12:48:e4:28:13:37:
                    81:59:3f:82:74:f0:72:95:88:61:92:00:dd:f2:cf:
                    42:92:51:08:cc:bd:f6:84:87:4e:b4:eb:6c:3b:6c:
                    8e:76:f2:1e:35:1e:bf:e7:bf:cb:5d:a8:3e:85:a9:
                    68:0a:c9:55:ae:a2:d4:a0:af:3c:50:bf:85:85:db:
                    1d:9b:44:87:44:bc:be:b4:06:e0:a4:00:18:ba:45:
                    75:31:87:f6:19:7b:31:6d:67:84:43:36:90:da:26:
                    82:83:af:c4:18:8c:5f:68:81:81:00:2a:f1:7c:40:
                    c9:0d:76:5b:d6:47:87:7c:84:6c:0e:77:a5:e3:e9:
                    0e:5b:db:f3:4e:da:8c:92:9d:97:a1:6d:6d:fd:a0:
                    1e:cc:c0:a4:f8:0e:12:47:91:c5:54:9c:7e:ea:6f:
                    85:bf:b0:02:31:c1:19:54:9a:c6:82:fc:38:c5:b5:
                    91:c8:7f:15:43:aa:5d:50:fe:66:24:c8:d7:57:25:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:20:CE:A3:51:76:1F:30:4A:E3:7F:6F:0A:28:FA:44:A0:95:0F
            X509v3 Authority Key Identifier:
                keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:20:4b:c9:92:ad:7b:1c:03:af:dd:0c:2c:74:62:5b:d2:
         b3:15:38:13:3f:8d:6b:bf:2c:d3:d2:d7:a2:28:ef:68:87:6f:
         84:be:31:cc:0e:12:38:de:58:33:f9:e2:f5:5a:18:6c:a3:56:
         94:a5:94:8c:db:b1:0c:4a:38:28:02:86:65:3e:a2:ae:e2:dd:
         0f:bf:c5:3a:9a:01:e5:70:0f:8d:3c:9e:8b:5f:01:6c:14:65:
         87:4d:32:01:cd:f8:7c:79:55:99:71:d8:dc:61:fb:50:ed:f4:
         cb:96:d8:41:d0:3d:b0:07:c1:f7:dd:34:1f:2e:c5:a3:a9:0a:
         59:55:d7:8d:82:88:be:26:a2:2e:67:25:a6:f1:ab:03:23:a6:
         5c:ff:21:9a:65:13:a7:b6:5a:77:88:82:98:02:00:4a:f2:5e:
         fc:b2:90:ff:b0:18:f9:03:11:9e:b5:1b:5d:4a:c4:e6:ca:3d:
         5b:44:42:7b:20:05:c5:96:09:0b:81:22:69:e2:8d:f0:07:05:
         83:3c:63:80:58:6c:45:1c:45:09:60:9c:c1:10:00:db:af:bc:
         f9:fd:7c:f1:b3:cb:56:a9:1e:5f:2c:15:58:f1:65:af:bc:63:
         d2:05:b7:52:f4:64:2f:3b:53:81:16:6a:2d:80:81:7a:74:50:
         cc:72:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:59 2026 by rpki-client