Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File:                     QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier:          AwylxozWYxSBCHbXHqk8wgX0NDo19ygX/k/y94DrKKY=
Subject key identifier:   63:95:B1:2F:65:12:EF:EF:C6:42:CF:4F:C1:A7:54:BC:D9:F4:7A:DB
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer:       /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number:          1B
Signing time:             Fri 17 Apr 2026 08:38:00 +0000
Manifest this update:     Fri 17 Apr 2026 08:37:59 +0000
Manifest next update:     Fri 24 Apr 2026 08:37:59 +0000
Files and hashes:         1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: JpYWhlfD5z5bA3lL25WRMK+2nWc4ow4qFwLRe3xKRhk=)
                          2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: GHvsDod4B4M4Fvy4vn3Fb5pNbSRAj6hWau5NZwFd4IY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
                          rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
        Validity
            Not Before: Apr 17 08:37:59 2026 GMT
            Not After : Apr 24 08:37:59 2026 GMT
        Subject: CN=69e1f168-b6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:33:c8:70:af:4b:0d:8a:b7:6e:d6:85:51:
                    8b:c0:f3:fc:b1:be:64:a0:6d:f0:87:3e:e4:f8:37:
                    b2:51:cc:88:33:81:f2:c5:39:95:22:85:af:6d:77:
                    d4:a0:27:2b:7c:e1:69:d9:cf:ae:dc:71:f0:38:d0:
                    df:7f:b8:4d:c5:c7:53:ce:63:fa:cb:31:f9:11:21:
                    9f:57:ba:ad:60:d4:7a:95:28:76:e1:4d:09:f3:3d:
                    3f:cc:ff:ee:78:f2:6a:12:5a:d6:09:04:56:08:06:
                    c5:4f:52:db:a4:3f:1e:b8:d1:09:e5:43:19:31:9f:
                    4f:de:c3:c9:ad:59:39:24:5d:dc:1a:03:ec:95:5e:
                    23:ae:58:b3:66:ab:40:21:19:c9:2b:1d:89:aa:1a:
                    2e:8e:3c:89:4a:1c:95:84:d7:c5:e5:1a:05:2d:a1:
                    44:67:19:f3:0c:56:94:5f:80:88:08:f9:d2:73:b5:
                    27:91:ca:71:12:43:92:b6:8c:ff:d2:eb:0e:8f:6e:
                    3c:22:45:2d:09:64:86:87:93:27:fc:8f:72:d4:94:
                    14:78:cb:2a:ca:a4:61:19:83:2a:57:4f:4a:32:a6:
                    60:1a:3b:6d:bc:b2:09:84:61:43:46:83:0c:26:1f:
                    ea:4a:0c:65:e8:08:c0:b2:13:34:3c:4b:9f:0b:35:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:95:B1:2F:65:12:EF:EF:C6:42:CF:4F:C1:A7:54:BC:D9:F4:7A:DB
            X509v3 Authority Key Identifier:
                keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:46:b5:66:e6:34:cf:a1:54:a3:14:cd:2b:78:f9:07:9f:
         2b:03:75:ca:14:8a:a8:09:35:d1:a8:6a:83:b9:75:3f:c3:26:
         26:40:89:0a:04:ec:e7:01:27:1d:fa:57:6c:ea:4c:93:00:13:
         b6:7e:19:c3:af:50:98:95:c5:72:c7:ab:18:ee:80:d8:1b:a2:
         6a:6b:dd:4d:ee:ef:58:7e:15:f7:7f:b8:1c:40:af:6e:29:00:
         bf:80:7a:f0:9d:01:8a:2a:a5:eb:fa:2b:5c:31:3c:d6:55:01:
         10:3d:96:9d:7a:77:1c:15:cc:a7:84:ed:1e:62:38:b1:1e:ea:
         fb:f2:05:89:e0:a5:a4:35:39:9f:3b:a4:d3:88:5d:1f:74:4a:
         72:6f:99:e9:95:4e:7b:96:ef:25:c8:05:88:60:d6:ca:44:28:
         bb:e6:24:9a:2d:70:91:a1:36:62:32:be:6a:a4:b1:7e:85:dd:
         1c:b5:08:ba:e1:7d:96:0b:bb:43:73:9f:a1:f2:45:d8:15:21:
         ee:a2:2c:7d:ca:8d:dc:8c:e9:45:47:7a:98:5d:fc:1c:c1:ca:
         a3:ea:89:b5:86:a6:5c:62:59:0a:d0:5e:79:74:a6:2e:a9:3c:
         58:91:75:0f:70:86:b4:64:e0:d1:82:24:1d:d2:2f:61:c9:77:
         54:ed:d2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:47 2026 by rpki-client