Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
File:                     Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft (raw, json)
Hash identifier:          yCM8fgpb44mtjLgha6bQtcDKqBVefRcEvBleRyHSb88=
Subject key identifier:   D5:90:60:5D:DA:09:D9:AF:1F:C4:E0:FF:85:07:AA:CB:83:8F:D9:EC
Authority key identifier: 43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C
Certificate issuer:       /CN=A9118D0F/serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
Certificate serial:       09D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
Manifest number:          09B3
Signing time:             Sat 28 Feb 2026 20:16:14 +0000
Manifest this update:     Sat 28 Feb 2026 20:16:14 +0000
Manifest next update:     Sat 07 Mar 2026 20:16:14 +0000
Files and hashes:         1: Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl (hash: Of9/nQCGeqgd9wLwVlm5V+bACE1C4KqxO2xHLy9qzFc=)
                          2: 0D491000A64811EA939A7F67C4F9AE02.roa (hash: kkd/CbtVIoWblEY1duaDls2Uy2Uyf0EyvNKyp/C3IM4=)
                          3: 75D91256B2F311EBB8A53526C4F9AE02.roa (hash: jIPkDEf13TMiFg2C0rBtFKVkCQXwsHcdNzopb74LLvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl
                          rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 20:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118D0F, serialNumber=43E1E8C4261CE07D4F8E4CFB7A3F833FBB46B88C
        Validity
            Not Before: Feb 28 20:16:14 2026 GMT
            Not After : Mar  7 20:16:14 2026 GMT
        Subject: CN=69a34d0e-9dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:c1:de:40:21:72:cf:06:db:1f:d9:e9:95:
                    f2:ea:de:c5:98:98:b2:28:43:f8:d2:2f:85:5c:b1:
                    d6:72:0d:3a:a3:49:d5:1b:f1:48:19:0e:f4:ec:19:
                    e3:37:97:cd:18:5c:b4:75:98:d5:8d:3f:41:a1:75:
                    3c:60:5e:46:bf:56:32:96:36:11:b0:66:ec:b0:cf:
                    67:a3:79:f7:2b:b1:52:76:30:59:94:a8:24:98:e7:
                    e3:e3:ca:b6:bc:3e:fe:b3:2b:f1:a1:e0:08:c0:cb:
                    70:09:01:37:ca:c9:d8:8e:60:de:fe:8a:ad:29:3b:
                    40:ee:18:f9:34:0f:6d:3d:3f:39:e2:e0:a8:f3:26:
                    1f:6c:ba:ae:a4:4d:1a:fd:bb:1e:29:70:fc:31:78:
                    ad:97:f9:e9:94:91:6b:09:54:e6:e0:c4:0f:a6:d0:
                    a1:9b:06:c6:a6:36:1d:f2:d7:21:78:2b:b5:80:61:
                    58:53:b3:51:db:9f:58:8a:9f:e3:4d:0c:7c:8e:b5:
                    42:6f:df:68:12:77:d4:7a:e7:85:75:1e:e3:a6:b8:
                    65:88:76:a7:e9:a2:2a:21:9b:c5:e6:b1:fc:2a:60:
                    9a:87:d6:57:16:33:e6:1d:27:a5:ba:7d:8c:12:8a:
                    80:88:10:ca:31:d6:7f:1f:3a:c2:66:d1:a9:c2:4e:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:90:60:5D:DA:09:D9:AF:1F:C4:E0:FF:85:07:AA:CB:83:8F:D9:EC
            X509v3 Authority Key Identifier:
                keyid:43:E1:E8:C4:26:1C:E0:7D:4F:8E:4C:FB:7A:3F:83:3F:BB:46:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118D0F/7D2273B4A64611EAAF9E9162C4F9AE02/Q-HoxCYc4H1Pjkz7ej-DP7tGuIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:ee:ba:65:55:84:fe:30:25:cd:44:ed:bb:c0:94:27:d5:
         52:4f:f3:9a:01:71:91:e1:e0:da:d1:c2:71:af:cc:11:65:8e:
         f6:b4:19:88:2c:04:23:ac:0a:0f:52:60:c2:78:09:36:f9:b5:
         3a:fe:0e:10:ba:dd:c0:0d:6e:f3:a6:1e:44:a7:72:25:da:21:
         8f:e5:9c:49:47:84:45:67:11:58:5a:ed:63:b5:a0:f2:f8:6d:
         59:3a:01:a4:a8:35:74:9d:92:65:e3:57:d9:53:f2:6a:82:96:
         6d:b5:df:9a:fd:f3:65:30:4c:32:cb:a3:54:20:b3:35:ec:8c:
         32:f3:bc:60:8c:86:5c:dd:9b:bf:19:63:91:2d:d3:f3:fc:9d:
         75:52:cf:91:5e:82:0b:35:fd:d2:1f:5f:2d:05:b8:a3:c2:44:
         75:6e:63:cd:9c:84:dc:1e:f9:0b:ce:2d:63:31:60:48:62:5c:
         3d:0f:aa:fb:04:91:ff:58:0c:d1:63:93:bc:d6:6c:a6:5b:71:
         a8:80:dd:2f:a7:08:49:e6:a4:fd:d0:d7:3c:40:e5:90:4f:7e:
         0d:ab:d7:96:b5:32:86:84:0b:59:66:9e:01:5d:e0:e5:69:b9:
         0f:4c:bf:d4:91:2e:a0:87:06:a4:81:94:e1:07:cc:21:7e:7e:
         be:24:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:29:51 2026 by rpki-client