Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
File:                     qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft (raw, json)
Hash identifier:          cGKRuPakt7sOpMoGKlNgI170VcvFZV6E7ohTqIbhmQI=
Subject key identifier:   02:9D:F6:44:72:B3:0C:BD:DB:72:65:BA:88:F4:D8:06:24:DE:C1:5C
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Certificate issuer:       /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
Manifest number:          9C
Signing time:             Mon 11 May 2026 07:32:33 +0000
Manifest this update:     Mon 11 May 2026 07:32:32 +0000
Manifest next update:     Mon 18 May 2026 07:32:32 +0000
Files and hashes:         1: qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl (hash: gbHdXpXzGT1ReDutOVIuPST0K4b6oNlPqtyNvbpCVys=)
                          2: 0B9DC9A2623711F0B8A15A64C4F9AE02.roa (hash: 4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
                          rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
        Validity
            Not Before: May 11 07:32:32 2026 GMT
            Not After : May 18 07:32:32 2026 GMT
        Subject: CN=6a018611-e36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:44:5f:f4:2e:de:e9:c2:d8:b3:c7:27:10:
                    ea:bd:10:da:72:dc:d3:04:21:8f:bb:82:aa:7a:0b:
                    bb:b0:e2:85:17:39:49:29:97:fb:95:52:a6:1c:7f:
                    db:c9:af:3b:32:1e:6e:aa:64:8f:5a:83:b1:12:d1:
                    c9:ab:a1:7b:1d:5d:1b:28:99:ec:c7:07:8e:07:90:
                    81:6c:4c:6c:1b:78:fe:04:c5:79:d4:94:f6:89:65:
                    79:2d:13:a2:45:91:f0:0d:2f:e9:4f:4a:10:12:ed:
                    52:01:5a:47:8c:ca:ec:7c:ac:f5:59:b4:8c:c2:bc:
                    18:7c:62:7d:ff:18:9e:5a:7d:25:3e:19:bc:18:45:
                    3c:98:b1:cb:29:c8:d3:3e:a9:16:de:8b:a7:ee:1a:
                    64:d4:c4:39:4d:04:ba:97:9e:08:63:3e:ed:54:48:
                    7d:38:9e:59:50:8a:79:0e:82:04:47:07:bf:41:74:
                    01:1a:e2:70:2c:16:b1:70:46:a9:02:57:9e:22:e9:
                    cb:ba:a3:89:ea:9a:71:b6:66:b6:58:9d:bf:e4:0a:
                    79:83:0a:2c:f5:36:f8:06:12:e3:8b:f6:4d:dd:d4:
                    dd:bb:f3:31:0f:b0:8e:cb:f4:5a:8a:7b:7b:7b:74:
                    1b:6e:d2:f6:4e:a5:c1:f1:f2:24:ed:26:fe:a0:05:
                    d3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:F6:44:72:B3:0C:BD:DB:72:65:BA:88:F4:D8:06:24:DE:C1:5C
            X509v3 Authority Key Identifier:
                keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d1:0e:9e:34:91:01:3d:a2:57:fc:f7:e5:49:f7:e1:7e:03:
         86:7a:12:90:c0:f2:fb:0e:e5:b6:fb:11:a7:94:f7:94:ea:9c:
         e4:f1:6a:02:f7:4f:93:2e:4f:12:7e:14:af:06:fb:22:70:81:
         f0:c2:3c:93:9b:2c:7e:8c:9e:a4:b6:ff:6e:5e:85:0c:5f:07:
         60:a7:67:86:a7:e4:64:e8:3d:1d:44:6d:fe:6a:52:e9:78:a5:
         93:32:ef:b3:03:07:38:af:76:63:83:ff:d9:fd:3e:4a:0b:14:
         b4:2d:cc:8c:1f:3a:5b:4d:d0:23:4b:c6:fa:4f:8a:78:68:27:
         b7:87:b8:9e:74:40:1d:c8:17:29:31:c0:37:24:cb:aa:b0:3f:
         60:9a:59:7a:dc:56:12:6c:a4:9f:bd:9b:0c:41:41:fa:ac:4a:
         cf:8b:53:50:dd:91:b0:86:fa:3d:48:96:b7:60:80:f4:8c:30:
         65:b0:bc:ab:51:d4:56:ff:1f:65:bf:10:00:fc:0d:f2:91:b3:
         4f:43:3d:b2:d3:01:49:d6:60:a9:77:d1:9f:6c:5e:32:a9:ca:
         79:ac:a0:1f:d1:ee:f2:e0:d8:24:9f:b2:ab:7d:6a:8f:57:07:
         a3:ba:22:f9:0d:8b:3f:12:09:2d:ba:7b:4c:4b:97:ed:fd:43:
         fa:17:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:11 2026 by rpki-client