Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
File:                     QtPsuchXCrCQ62Ae2zN5wNPYptA.mft (raw, json)
Hash identifier:          FDp4Ou44j9PrTNrIozqIxbOivCasr8626g1gyhHZJ2g=
Subject key identifier:   01:FA:52:ED:1B:4E:48:F6:42:27:07:BB:9F:25:C8:6D:F2:1C:0E:3E
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
Manifest number:          1ACF
Signing time:             Mon 02 Mar 2026 17:32:03 +0000
Manifest this update:     Mon 02 Mar 2026 17:32:02 +0000
Manifest next update:     Mon 09 Mar 2026 17:32:02 +0000
Files and hashes:         1: QtPsuchXCrCQ62Ae2zN5wNPYptA.crl (hash: zhA/eOTLWll4hl67Q/TXzHVCKgKx4jg+h18vup4VqmE=)
                          2: 4C4AC452D67911ECBFC6CB7BC4F9AE02.roa (hash: lv7rFdxgekurZEg5USvyEPn57wmRNOFzeYoZREea/3M=)
                          3: C8D6C4CAD1EF11EAA9944238C4F9AE02.roa (hash: T3+t4BxJ+SKNdGEYRPsyYAhom4i3xW2TFDuVhBpmNiI=)
                          4: 8EF0A700973911EDB1E3C460C4F9AE02.roa (hash: mTQtcWBHrk7TIhY8CS21ppzMxX7dQQuOEVfMQCgdVhQ=)
                          5: D4B094F697E011ED9EFB180DC4F9AE02.roa (hash: EUI2XwNp+FiRnvmi+/unwfEimcQrowsbqpJ7IeyqfaY=)
                          6: 06535DB891E011EFAE09CC5BC4F9AE02.roa (hash: k0pER09of24NwFUQRN8AsTgjH/wQZ+jTBU45DlV61H4=)
                          7: FB3F8334973B11ED935E7109C4F9AE02.roa (hash: sEF3ENT7iR3znylDhNkJeQTO7n2C421IlIbpcYKBQF0=)
                          8: B53FD334575411ECAA094876C4F9AE02.roa (hash: AzEHmuiE6HZulHxKIWLHL3FRs1epiI+Fm5baVMovAY0=)
                          9: 6B4669CE7B7D11E99F99E776C4F9AE02.roa (hash: l8UCcC6wneq4Cu2t+VFP11A3Sjxn3nvQ/jtevpkfByA=)
                          10: 907B9184973911EDB1E3C460C4F9AE02.roa (hash: +PKVNiluiA7Fq3i8KquMD87rUoxhLIs7+9LTLKJ1ArU=)
                          11: D42E171A97E011ED9EFB180DC4F9AE02.roa (hash: ld4bwSTH7DNmQDUsJ/AFf4fZeBG84QqW9207f4dTJjE=)
                          12: 0578A814931111EDB92FFC5FC4F9AE02.roa (hash: Yl6E1zqtMxpogR62Ie9y54XPu8EBJvXyi6oDW6gPT3w=)
                          13: 968DFDCE973311EDBFD0B43CC4F9AE02.roa (hash: bqcDqXmv4qGTBtt1WWnjGrUE+d3tdJB0fFj8nULB20M=)
                          14: D08850D2B71411ED98AFCC20C4F9AE02.roa (hash: H6AHYpW4fxedkWOJ1b74wcntzRDeX2FCiN5ESsGwoSA=)
                          15: 0722D856931111EDB92FFC5FC4F9AE02.roa (hash: yWlANq5g/pbbgNfseiIKUN8CyHFjSODbVb8MGxFsVq8=)
                          16: 670793E8F0EC11EFB7FBC612C4F9AE02.roa (hash: ASnQCsZiH1S5ekDn4WpRt79+1X/RJpzvGIce9TXHbAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9964 (0x26ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar  2 17:32:02 2026 GMT
            Not After : Mar  9 17:32:02 2026 GMT
        Subject: CN=69a5c993-7ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:59:7d:2b:cd:d5:cb:f0:e1:90:68:bc:c7:
                    a5:d7:23:67:45:de:88:f2:e3:b9:a9:0a:a0:d5:2b:
                    8f:a4:59:98:d2:7d:82:2e:33:0f:88:3d:c9:9d:80:
                    e1:13:d4:c6:de:fa:aa:2d:55:25:58:f4:09:7a:ca:
                    e9:1a:c7:f6:44:99:68:97:c8:09:a3:62:e0:49:0c:
                    86:5e:80:41:4b:37:61:5f:19:38:83:6a:23:aa:11:
                    ae:0b:00:9e:b0:eb:6a:b4:9e:24:90:b9:66:3a:53:
                    3c:08:92:d4:30:52:82:43:55:de:7f:0f:9d:96:0c:
                    2a:57:de:84:ed:73:95:1c:19:dd:b2:6a:de:23:3b:
                    92:59:e4:d9:8c:c4:55:ec:2e:64:30:9b:89:79:e3:
                    82:1b:af:03:3b:32:99:26:d8:b9:26:4f:ec:82:de:
                    0f:8a:7a:9d:7b:ad:9b:bf:74:22:c9:04:41:70:6b:
                    c3:4f:f9:a7:a8:d0:22:68:77:ee:ab:54:3d:f5:14:
                    58:5d:e2:1c:a4:ea:85:9f:ad:59:e0:49:df:a9:34:
                    87:0e:d2:e2:3c:ca:ba:e5:dc:22:19:f2:07:93:75:
                    04:5d:cb:60:41:a7:24:e3:09:a8:d9:8e:4c:f7:84:
                    59:e6:d2:8e:f7:c7:ac:2e:56:44:d6:21:4d:a7:b0:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FA:52:ED:1B:4E:48:F6:42:27:07:BB:9F:25:C8:6D:F2:1C:0E:3E
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4c:27:fc:ab:43:51:99:62:d6:6d:fb:65:52:89:e0:aa:f3:
         f7:97:7f:af:85:9b:c7:fc:65:75:4f:17:89:d7:f5:8d:c4:5b:
         11:4f:59:c2:89:86:48:74:f3:9e:d3:f5:6e:c0:ee:23:af:40:
         b8:a8:e5:f6:45:94:6e:5a:30:09:c9:c7:e6:c7:8d:63:bb:a8:
         af:7c:48:de:7b:ca:5b:f5:d7:9e:df:09:f3:3a:c5:97:23:ac:
         4c:3d:b1:e5:b7:2e:e0:48:dd:0c:bb:c7:01:23:00:68:18:3e:
         c0:3e:09:50:6a:8a:03:5f:14:fb:7a:63:17:d4:33:26:e8:10:
         99:b7:14:c4:40:b1:83:6c:29:8f:5c:a3:f5:3e:7d:3f:0a:19:
         ee:10:50:a1:40:a4:ea:79:5a:62:66:57:8a:3d:f7:f2:6d:73:
         f7:06:10:6d:c9:28:fd:74:d5:5b:a0:63:33:ee:a3:7f:5b:45:
         67:a8:48:4c:90:75:ef:8d:26:98:59:13:de:72:5a:fc:1e:73:
         15:5f:85:ec:2d:a3:79:01:20:56:e1:e7:b5:ae:c3:2d:28:12:
         1d:09:93:50:37:67:15:d4:3d:f4:22:bb:14:63:81:70:c0:04:
         f8:2b:83:1e:69:98:39:37:5a:02:02:51:d8:48:d6:5b:c7:ab:
         4f:8f:c0:67
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjYwMzAyMTczMjAyWhcNMjYwMzA5MTczMjAyWjAYMRYwFAYD
VQQDEw02OWE1Yzk5My03ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+JZfSvN1cvw4ZBovMel1yNnRd6I8uO5qQqg1SuPpFmY0n2CLjMPiD3JnYDh
E9TG3vqqLVUlWPQJesrpGsf2RJlol8gJo2LgSQyGXoBBSzdhXxk4g2ojqhGuCwCe
sOtqtJ4kkLlmOlM8CJLUMFKCQ1Xefw+dlgwqV96E7XOVHBndsmreIzuSWeTZjMRV
7C5kMJuJeeOCG68DOzKZJti5Jk/sgt4Pinqde62bv3QiyQRBcGvDT/mnqNAiaHfu
q1Q99RRYXeIcpOqFn61Z4EnfqTSHDtLiPMq65dwiGfIHk3UEXctgQack4wmo2Y5M
94RZ5tKO98esLlZE1iFNp7CMlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAH6Uu0b
Tkj2QicHu58lyG3yHA4+MB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjgwNS9GODA3NkI4QTdCN0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENy
Q1E2MkFlMnpONXdOUFlwdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJEwn/KtDUZli1m37ZVKJ4Krz95d/r4Wbx/xldU8Xidf1jcRbEU9ZwomGSHTz
ntP1bsDuI69AuKjl9kWUblowCcnH5seNY7uor3xI3nvKW/XXnt8J8zrFlyOsTD2x
5bcu4EjdDLvHASMAaBg+wD4JUGqKA18U+3pjF9QzJugQmbcUxECxg2wpj1yj9T59
PwoZ7hBQoUCk6nlaYmZXij338m1z9wYQbcko/XTVW6BjM+6jf1tFZ6hITJB1740m
mFkT3nJa/B5zFV+F7C2jeQEgVuHnta7DLSgSHQmTUDdnFdQ99CK7FGOBcMAE+CuD
HmmYOTdaAgJR2EjWW8erT4/AZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:25 2026 by rpki-client