Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          iFCiz9tBxwbNcMwCuj1gzIjhQxHlj4ZoVaOUMS64yP0=
Subject key identifier:   6A:23:4B:65:2A:8E:10:87:7F:FC:48:BC:2B:7E:20:AE:2F:9B:F8:3D
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A43
Signing time:             Sat 28 Feb 2026 19:57:34 +0000
Manifest this update:     Sat 28 Feb 2026 19:57:34 +0000
Manifest next update:     Sat 07 Mar 2026 19:57:34 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: WRdOwkHjSJO1tWRRCZaYj0aSlREgnk2EivpOo0Q4/+s=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 19:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635 (0xa4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Feb 28 19:57:34 2026 GMT
            Not After : Mar  7 19:57:34 2026 GMT
        Subject: CN=69a348ae-4d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:36:5c:8c:6c:1b:fb:48:22:5e:32:b4:3c:
                    13:4f:bf:e8:9a:39:e7:2f:d8:36:fe:67:f8:05:7d:
                    ef:a8:b3:ab:75:dc:a7:bc:fc:95:62:41:af:35:28:
                    9e:14:0b:e2:82:5d:2f:b8:fe:bb:e2:87:e8:61:d4:
                    63:0e:c2:3d:fe:a5:7e:92:07:4d:80:1c:f8:7e:a3:
                    0a:03:44:67:27:2a:3f:2b:b9:48:54:ec:6d:3f:43:
                    71:56:75:3d:63:9f:78:d1:f5:bd:5b:0f:6c:f3:67:
                    2c:18:bd:4d:e1:d8:19:a1:c9:05:94:29:03:6f:db:
                    f2:87:dd:c9:24:9b:1a:24:3b:68:2f:b1:f1:55:d0:
                    14:16:53:8c:4f:ea:e6:83:5b:03:15:d5:44:a5:50:
                    4a:bb:16:d5:ff:41:50:e1:a4:1e:63:1d:40:99:3c:
                    af:35:43:dd:b7:c9:f2:6c:11:52:c0:e1:67:e0:99:
                    20:85:bf:ff:ee:3d:51:e9:4c:26:d5:8b:58:16:5f:
                    80:91:10:fe:11:12:39:f4:c2:80:66:fb:0a:66:b4:
                    7f:55:98:ca:f7:79:68:79:0c:1d:d6:66:6b:26:8d:
                    1e:0c:f6:9e:b2:5c:1e:88:9d:b8:70:d3:61:54:a4:
                    03:51:7f:7b:ae:e7:b7:d8:f5:58:d5:12:6d:03:5f:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:23:4B:65:2A:8E:10:87:7F:FC:48:BC:2B:7E:20:AE:2F:9B:F8:3D
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:66:6f:52:15:0a:b7:7f:2a:9b:5c:d2:f4:1f:3b:65:43:60:
         96:e8:c4:3f:4c:ef:7e:4a:dd:c3:de:48:16:dd:e8:87:42:d2:
         b2:47:b1:f4:fd:6a:1c:51:a9:bd:77:eb:bf:07:23:02:d7:c2:
         66:44:84:58:3e:60:c1:c5:86:37:5b:a1:b8:74:01:b2:a8:24:
         c9:98:1a:7c:59:f4:93:db:c8:c8:4e:c6:da:6a:4a:b7:ae:73:
         64:53:db:d0:86:d2:2e:dc:d7:1e:81:d7:0e:a3:a2:12:fc:dc:
         04:69:62:ec:8f:6a:0d:8c:25:42:98:6f:22:45:53:b7:54:42:
         18:09:4e:6d:16:11:68:a5:23:33:95:09:7f:fc:e1:69:f1:ac:
         e2:82:4e:51:69:56:03:58:a2:cc:2f:f2:3c:33:7b:5a:c2:42:
         cf:8b:6d:37:08:18:3d:d9:e4:6a:fb:77:60:51:7f:76:35:2f:
         a7:0e:8c:ca:b6:08:ab:ea:fb:35:90:d3:72:1a:c7:9a:61:4d:
         32:b8:69:88:31:0a:62:1b:3e:75:f1:c7:61:70:1f:c9:d5:03:
         cb:fc:b6:54:f8:21:ee:34:b5:e1:b0:91:a4:16:e4:c2:88:59:
         be:be:1d:d3:04:1c:c9:b0:cd:45:e9:5c:d8:6f:20:03:51:5d:
         15:6f:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:49 2026 by rpki-client