Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
File:                     qSMgEvL8BUJsBog1jP5vuRVHhrw.mft (raw, json)
Hash identifier:          yMwGMG8nQhjOvBnsfUD1AeSajeggkhFjq1q+crlrG+o=
Subject key identifier:   5A:A4:C3:57:B3:FD:6D:F0:53:DF:32:5D:36:17:20:1D:05:83:86:6B
Authority key identifier: A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC
Certificate issuer:       /CN=A91E237A/serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
Certificate serial:       0766
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
Manifest number:          0760
Signing time:             Thu 26 Mar 2026 21:31:26 +0000
Manifest this update:     Thu 26 Mar 2026 21:31:25 +0000
Manifest next update:     Thu 02 Apr 2026 21:31:25 +0000
Files and hashes:         1: qSMgEvL8BUJsBog1jP5vuRVHhrw.crl (hash: 4/3/F9tlpDrecqKHDe65BZ57Qipg4zVT/AJRn08wYPE=)
                          2: 5E7BBD38259A11ECB37EA938C4F9AE02.roa (hash: tfKQ4nSLaTty6qCyZ5NjOxlg8bhWRggP9dvKa4ut5Ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl
                          rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E237A, serialNumber=A9232012F2FC05426C0688358CFE6FB9154786BC
        Validity
            Not Before: Mar 26 21:31:25 2026 GMT
            Not After : Apr  2 21:31:25 2026 GMT
        Subject: CN=69c5a5ae-627a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:47:a2:02:47:12:18:b9:be:9e:15:1a:69:fd:
                    d3:ec:48:a3:ac:59:30:9f:31:39:92:9a:6b:87:60:
                    08:7b:c0:c6:d6:68:22:dc:4d:88:5e:45:00:c9:c5:
                    89:3a:4b:02:76:33:6c:6f:88:15:68:2f:09:34:84:
                    09:3c:90:50:14:19:24:2e:60:cd:80:9d:da:36:99:
                    46:20:7b:60:2c:fd:58:20:5a:1b:78:94:48:67:9d:
                    f7:f1:96:61:23:7f:26:3a:a6:bc:b5:0f:6a:1c:f2:
                    dd:78:27:29:93:da:fd:f8:14:1b:4e:c0:c2:a0:b1:
                    d8:0d:61:78:20:ff:3d:5b:7d:f6:ad:46:8a:98:ae:
                    d6:e9:ed:c7:11:67:f7:27:86:1a:28:05:2b:7b:60:
                    db:28:f7:cd:56:07:cf:f8:86:59:33:f1:c6:8f:38:
                    57:ef:d6:7c:56:84:f1:99:5e:1f:46:42:87:30:0c:
                    de:c1:95:f9:0c:b1:20:cd:c4:65:c2:23:40:83:92:
                    d8:33:3d:d4:0c:c7:ef:f1:cd:88:d4:7b:4a:8b:f6:
                    52:96:10:ca:cd:c9:6e:9b:37:1a:c4:49:a2:02:db:
                    ff:69:92:1a:2e:de:76:7e:03:b5:c7:75:fd:c6:47:
                    81:67:13:ac:dd:78:36:f3:cc:bb:37:3c:78:83:58:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A4:C3:57:B3:FD:6D:F0:53:DF:32:5D:36:17:20:1D:05:83:86:6B
            X509v3 Authority Key Identifier:
                keyid:A9:23:20:12:F2:FC:05:42:6C:06:88:35:8C:FE:6F:B9:15:47:86:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSMgEvL8BUJsBog1jP5vuRVHhrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E237A/E882E46C5BA011EBAEBE5329C4F9AE02/qSMgEvL8BUJsBog1jP5vuRVHhrw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d8:10:b6:00:75:71:ee:41:b3:26:91:b0:d6:3b:9c:f4:cd:
         98:5b:e5:40:57:31:70:4b:b0:9c:95:f1:ba:af:30:71:6c:d4:
         b6:0b:31:2f:c6:bd:c3:13:3a:a1:07:48:ff:b4:83:5d:0e:ab:
         0f:2d:71:ec:74:76:48:0a:d4:0e:33:57:da:c4:1b:dd:49:4c:
         c0:49:ce:6e:be:91:0b:ed:44:71:da:95:94:34:b8:e5:25:0a:
         b3:f6:29:8a:0b:c4:5d:b7:ec:c4:c2:2f:e9:49:c6:10:c5:02:
         8d:78:76:d0:82:a2:a7:f6:6e:d2:68:c8:83:95:36:8e:29:fb:
         eb:e8:69:42:26:16:9b:5f:98:f7:57:67:3e:9d:a4:5c:d8:91:
         f2:e0:d2:21:07:ca:68:b0:ce:30:da:1d:79:75:51:92:66:b2:
         3f:50:d8:e2:d2:a1:23:f4:6d:e1:2e:5f:d6:9f:76:82:15:92:
         2c:3e:a4:88:cc:9d:68:11:e1:90:f1:56:44:a1:a0:64:65:84:
         4a:d7:8c:d1:23:33:52:3a:3c:7b:e2:da:06:ee:94:06:11:18:
         40:9c:96:7e:34:25:80:3e:10:3e:1e:6a:ce:c9:53:88:63:08:
         5b:4d:6a:5a:09:99:fe:29:b0:e5:a1:ec:f2:51:dc:d9:de:d8:
         42:08:0a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:07:30 2026 by rpki-client