Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File:                     QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier:          cWInuO/SvQhT0YpQdqpgOQGVB2Zuiio8+mTFU2nelxY=
Subject key identifier:   A6:0D:A4:D0:97:EC:01:AC:87:F7:61:AA:B1:8D:06:5F:CD:65:A0:3F
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer:       /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial:       023C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number:          0236
Signing time:             Fri 17 Apr 2026 02:22:12 +0000
Manifest this update:     Fri 17 Apr 2026 02:22:11 +0000
Manifest next update:     Fri 24 Apr 2026 02:22:11 +0000
Files and hashes:         1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: BPDbOhGtxc6APh4iySHIQeLtWD58RVaoi55S+W6bUes=)
                          2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: NkxHKbtoUp0+3tPsUIQtJd1qKCp6YkrV3mW/saca7sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
                          rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
        Validity
            Not Before: Apr 17 02:22:11 2026 GMT
            Not After : Apr 24 02:22:11 2026 GMT
        Subject: CN=69e19954-a18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:40:93:c0:82:2a:f7:03:23:d5:1c:d0:c8:
                    dd:13:f2:84:e0:f9:98:15:0a:21:83:33:a8:3c:74:
                    0a:15:78:f2:aa:64:ea:31:b5:00:12:0b:a6:f7:bc:
                    19:0c:9e:44:f4:ba:78:13:48:b4:34:8d:5f:9e:42:
                    2f:5a:88:df:42:b1:87:b9:fb:ad:3d:f5:2e:ad:69:
                    57:be:ac:d9:ad:c5:4e:15:5a:bb:a3:bf:19:51:fb:
                    c0:8c:4d:16:6e:c1:c9:eb:78:0b:e1:e8:1f:bb:b3:
                    6b:4e:e2:21:dd:cd:0f:3f:ba:45:27:a4:06:44:3d:
                    bb:cc:da:44:31:ba:6e:19:2f:20:32:3b:6d:81:33:
                    fc:a2:35:ba:dd:ba:46:8d:74:37:b9:dc:f1:d8:6e:
                    9c:e3:32:a8:f7:6c:cf:8c:61:f0:2c:89:38:5c:52:
                    43:5c:d8:61:65:ec:2d:41:01:7b:a3:d6:9e:f9:cf:
                    aa:73:e0:12:1a:1b:57:63:f7:3c:5b:0e:68:e9:15:
                    b9:78:8c:7d:44:41:f9:27:b2:c3:f6:96:99:5d:6f:
                    9e:63:54:67:3d:bf:8e:09:c9:00:c5:d2:c1:32:00:
                    56:b3:09:3e:57:09:bb:a5:2d:fb:a7:3e:d7:f8:2c:
                    30:56:04:00:53:15:c7:7d:17:24:24:77:40:38:2d:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0D:A4:D0:97:EC:01:AC:87:F7:61:AA:B1:8D:06:5F:CD:65:A0:3F
            X509v3 Authority Key Identifier:
                keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:8e:20:f7:a2:b9:26:10:48:f1:24:63:61:9e:ab:2c:8c:
         e2:94:31:f5:3a:04:17:69:84:fd:00:fb:d5:a7:44:d7:a3:ad:
         84:3c:64:2c:47:eb:d3:aa:c8:9a:db:0a:a0:35:83:bb:66:d8:
         3f:bb:60:c4:f9:15:b3:73:99:2a:bd:70:6c:d1:83:6b:60:99:
         c4:b3:3a:47:bf:12:4b:f6:c6:8e:83:89:e7:75:51:41:3a:db:
         4d:0a:c3:fd:69:bd:ea:ee:d9:5e:be:c4:40:ad:9c:de:d9:e3:
         af:ea:9a:41:50:dd:07:03:64:80:e7:72:66:34:67:4b:3d:97:
         91:d6:cb:2f:e8:cc:1e:e1:a5:f2:87:16:93:8a:a7:1d:eb:75:
         b4:69:8e:8a:da:25:46:59:55:fe:6d:f8:dc:10:4e:8a:63:40:
         2e:f2:5d:ce:8a:29:b9:43:12:6b:b3:b1:3c:3a:4f:70:0b:f6:
         8f:b9:b8:05:84:c9:1e:13:7f:ab:9f:29:96:a2:b2:d5:cb:14:
         cd:76:de:9c:ca:23:4a:7a:70:66:bb:4c:ca:90:65:97:f9:71:
         f5:16:c6:fd:76:e0:ae:0d:17:70:f1:03:9f:c4:65:21:a5:ab:
         5f:f6:73:54:de:a6:2a:2a:ce:13:b6:a9:cf:90:90:73:61:b9:
         df:ae:a6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:09:57 2026 by rpki-client