Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
File:                     QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft (raw, json)
Hash identifier:          ZhVixGNn1rHeHR3VCyz9Ruj8MM0bwWS+quYfvTb56No=
Subject key identifier:   64:88:F2:34:B6:6F:0C:C6:C0:A5:6A:08:F2:28:81:B4:C7:AE:51:73
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Certificate issuer:       /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial:       9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
Manifest number:          9C
Signing time:             Wed 25 Mar 2026 06:36:29 +0000
Manifest this update:     Wed 25 Mar 2026 06:36:29 +0000
Manifest next update:     Wed 01 Apr 2026 06:36:29 +0000
Files and hashes:         1: QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl (hash: 1AxwQihMezUg0tqHpJ+AStICskZjAzb+M7Rb8L9Mb38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:36:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
        Validity
            Not Before: Mar 25 06:36:29 2026 GMT
            Not After : Apr  1 06:36:29 2026 GMT
        Subject: CN=69c3826d-81f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:98:d3:07:1e:d7:ee:92:c5:a9:6d:61:0a:
                    d7:83:29:7f:1e:05:0f:1c:f2:b4:56:89:9e:dd:4d:
                    b1:bf:16:62:bb:ff:20:f8:e4:06:1d:de:b5:a6:86:
                    87:22:ee:5f:ff:14:dc:5c:1a:47:f5:08:bc:e2:19:
                    46:1b:98:83:98:25:d6:47:44:04:60:1b:41:5e:1a:
                    74:76:8f:1f:a3:4d:2e:1e:64:d6:99:68:a5:65:fa:
                    c3:51:09:44:fc:1d:ec:48:c2:d8:6c:38:2c:cc:5f:
                    24:fc:41:44:2b:5d:85:16:d1:8f:bd:df:51:0d:1f:
                    d7:5f:0b:ba:af:ed:13:af:1a:ce:e1:46:b7:68:4c:
                    41:2f:9f:24:d9:07:6a:a0:ac:95:44:7c:f0:45:1d:
                    cb:37:e2:7d:aa:fa:30:56:83:83:7f:85:34:eb:f0:
                    28:a6:10:61:be:17:02:f3:bb:75:08:78:28:ad:b4:
                    86:9e:45:06:4f:58:06:ec:b5:13:bd:e5:fd:1f:80:
                    8d:48:79:88:fc:95:1e:95:c9:d5:c0:f1:1a:da:77:
                    c6:97:e2:27:6c:5f:20:21:95:f3:f9:63:42:35:12:
                    ca:34:6f:89:94:07:10:d8:e9:cd:5a:33:1e:e6:fc:
                    a7:28:f5:4f:10:f1:6a:02:23:69:25:5b:97:c6:be:
                    c5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:F2:34:B6:6F:0C:C6:C0:A5:6A:08:F2:28:81:B4:C7:AE:51:73
            X509v3 Authority Key Identifier:
                keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2d:9e:ea:fa:a1:a2:4b:06:3c:ba:e1:cb:7f:04:af:e7:69:
         e6:3e:89:9f:f1:96:23:d9:ac:10:b3:02:a0:21:d7:73:a0:e5:
         74:3f:43:c4:e5:d4:2f:d0:c1:2b:f8:22:79:5d:c4:bc:8d:aa:
         08:04:8f:b9:92:df:f3:20:19:6c:e6:ab:52:2c:81:bd:bc:a5:
         67:ec:47:58:af:65:8f:21:a8:9e:33:92:f6:ae:31:b8:ba:bb:
         7e:40:f3:11:f7:fe:a1:61:a3:07:4b:5c:2f:53:a7:98:8b:bc:
         27:56:6a:9d:46:d2:ce:d1:88:a1:c6:32:d9:7c:cb:b5:cf:3a:
         17:2a:79:d1:7d:74:f6:16:4a:cd:9f:ef:be:cf:62:87:e4:26:
         75:1d:76:b5:24:52:ad:e9:c3:fa:95:ad:86:cd:72:58:95:ae:
         a9:2d:49:fe:dd:67:f6:93:0e:c7:69:1a:42:a7:ec:fc:d9:aa:
         6c:9b:cf:8a:d3:3d:23:1e:3e:3c:64:36:a0:d5:b7:eb:ea:ba:
         49:09:82:76:95:28:dd:e1:4d:46:d8:d5:d0:2a:9a:8d:7f:76:
         e7:db:69:52:26:7e:de:a4:d6:5b:11:80:d1:ab:44:13:db:25:
         db:49:f5:db:e2:41:1a:01:cd:fd:7a:ee:b4:20:87:7c:49:83:
         9a:54:19:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDhCQjExMTAvBgNVBAUTKDQxMkE4RDE3REY5MDdBNzgzNzY1MDEyQTgzQjc4QjdD
QjFDQTI1MTIwHhcNMjYwMzI1MDYzNjI5WhcNMjYwNDAxMDYzNjI5WjAYMRYwFAYD
VQQDEw02OWMzODI2ZC04MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA25mY0wce1+6SxaltYQrXgyl/HgUPHPK0Vome3U2xvxZiu/8g+OQGHd61poaH
Iu5f/xTcXBpH9Qi84hlGG5iDmCXWR0QEYBtBXhp0do8fo00uHmTWmWilZfrDUQlE
/B3sSMLYbDgszF8k/EFEK12FFtGPvd9RDR/XXwu6r+0TrxrO4Ua3aExBL58k2Qdq
oKyVRHzwRR3LN+J9qvowVoODf4U06/AophBhvhcC87t1CHgorbSGnkUGT1gG7LUT
veX9H4CNSHmI/JUelcnVwPEa2nfGl+InbF8gIZXz+WNCNRLKNG+JlAcQ2OnNWjMe
5vynKPVPEPFqAiNpJVuXxr7F9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSI8jS2
bwzGwKVqCPIogbTHrlFzMB8GA1UdIwQYMBaAFEEqjRffkHp4N2UBKoO3i3yxyiUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81MUY5RjYxNDNE
MjUxMUYwODBDNDg5NTVDNEY5QUUwMi9RU3FORjktUWVuZzNaUUVxZzdlTGZMSEtK
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FTcU5GOS1RZW5nM1pRRXFnN2VMZkxIS0pSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OEJCMS81MUY5RjYxNDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi9RU3FORjktUWVu
ZzNaUUVxZzdlTGZMSEtKUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeC2e6vqhoksGPLrhy38Er+dp5j6Jn/GWI9msELMCoCHXc6DldD9DxOXUL9DB
K/gieV3EvI2qCASPuZLf8yAZbOarUiyBvbylZ+xHWK9ljyGonjOS9q4xuLq7fkDz
Eff+oWGjB0tcL1OnmIu8J1ZqnUbSztGIocYy2XzLtc86Fyp50X109hZKzZ/vvs9i
h+QmdR12tSRSrenD+pWths1yWJWuqS1J/t1n9pMOx2kaQqfs/NmqbJvPitM9Ix4+
PGQ2oNW36+q6SQmCdpUo3eFNRtjV0CqajX9259tpUiZ+3qTWWxGA0atEE9sl20n1
2+JBGgHN/XrutCCHfEmDmlQZug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:36 2026 by rpki-client