Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File:                     qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier:          7VUZvQ5toevX8FFHWgOpMLLmGE6Rs34qCxIwo81lOpM=
Subject key identifier:   2D:F3:33:FE:18:03:5F:3B:0B:4A:E2:AA:AD:CE:54:23:F2:FB:5C:E2
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer:       /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number:          84
Signing time:             Wed 25 Mar 2026 06:53:23 +0000
Manifest this update:     Wed 25 Mar 2026 06:53:23 +0000
Manifest next update:     Wed 01 Apr 2026 06:53:23 +0000
Files and hashes:         1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: lOhihpDasKDB31a/EAOZOaEdxBxGXjOzOgQvQwRJuXc=)
                          2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
                          rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
        Validity
            Not Before: Mar 25 06:53:23 2026 GMT
            Not After : Apr  1 06:53:23 2026 GMT
        Subject: CN=69c38663-b71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:95:ec:65:d8:85:1f:07:e7:41:87:e7:88:
                    31:3f:12:ad:2d:5f:ca:3a:5f:c8:1b:72:49:30:14:
                    1c:6d:3b:b7:b5:30:07:4f:ac:c2:42:7b:6d:47:ba:
                    a7:b2:69:70:de:28:29:94:4a:72:93:ab:90:b2:a0:
                    d5:cf:09:30:56:01:7f:cc:ec:a8:ab:44:e2:2c:f0:
                    59:3e:c8:06:8e:68:0f:fd:2b:d0:36:a0:1f:e9:c5:
                    51:39:b5:05:cd:2a:24:ee:db:12:a5:f5:db:cf:ae:
                    aa:f7:fe:89:8b:d9:17:5e:49:bb:8c:21:f3:35:f3:
                    5f:78:32:75:75:81:91:45:bb:06:a9:b8:21:b1:17:
                    8b:df:dc:98:2f:f7:b0:b1:bf:8e:3d:88:df:2d:2e:
                    4a:1b:89:81:8d:2a:8b:9f:6d:bf:0d:5c:9d:5f:b0:
                    36:6f:3f:0f:4f:e5:ab:6c:e8:56:27:b8:7c:8e:c5:
                    c1:2e:4e:72:87:23:07:4b:1e:73:e1:1f:dc:2f:4a:
                    32:d8:aa:53:2e:cf:74:54:09:47:48:2f:f4:bf:0c:
                    58:91:2e:be:c6:7c:d4:79:b0:ac:09:86:8d:9e:9f:
                    a5:ec:61:c1:ca:5b:50:c5:d3:50:6f:02:28:cb:4f:
                    58:ec:9c:29:a5:44:04:90:09:8b:01:0d:45:76:fe:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:33:FE:18:03:5F:3B:0B:4A:E2:AA:AD:CE:54:23:F2:FB:5C:E2
            X509v3 Authority Key Identifier:
                keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:fd:a1:6d:c9:34:90:85:a6:e3:db:a9:e4:dd:12:c9:e5:
         9b:73:28:82:02:d1:6c:be:26:bc:75:47:4e:c4:3d:0b:61:fd:
         b4:50:22:62:11:4d:d6:92:84:45:08:72:49:7e:de:bd:0b:d0:
         03:79:8e:49:2e:2d:ab:64:fb:76:f0:76:44:34:95:61:3f:a5:
         d3:e0:80:ca:48:8d:23:d2:6a:b9:fb:96:eb:48:32:f7:58:40:
         ad:bb:35:12:f1:8d:be:0a:8e:50:cc:cf:50:61:8f:9f:80:73:
         72:85:bc:b5:08:dd:d4:ea:65:1d:ab:2c:67:34:0a:a7:09:96:
         38:09:ac:25:94:c7:66:b7:13:0d:0d:23:de:59:b5:ae:f7:88:
         59:f1:65:cf:1c:9b:c1:65:bb:01:4c:6c:79:d1:d9:ed:e7:db:
         38:67:57:0b:d2:f5:e4:af:be:21:0f:fb:a9:48:73:05:0f:4e:
         9e:c0:49:e3:40:df:05:d7:88:fc:51:39:c0:36:30:ea:39:d2:
         d3:75:5c:f1:8a:77:cf:2a:5b:84:08:ab:72:48:2f:af:c0:dd:
         9b:74:2f:b7:f1:6b:05:dd:3d:34:f9:7f:8d:41:29:41:7a:98:
         ca:d4:79:65:f1:75:42:bf:62:c3:c9:82:88:07:89:68:b2:02:
         73:7d:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:36 2026 by rpki-client