Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File:                     QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier:          Ly/n1kxH6K+YCPQNfbBh4JaJ3y2bX/lUv2SMiMrO6os=
Subject key identifier:   3C:D2:43:DB:E8:3C:3B:54:0E:1E:B1:C2:1A:F6:68:CE:07:E3:5F:2F
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number:          0187
Signing time:             Tue 13 Oct 2026 05:11:41 +0000
Manifest this update:     Tue 13 Oct 2026 05:11:40 +0000
Manifest next update:     Tue 20 Oct 2026 05:11:40 +0000
Files and hashes:         1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: hW0Z44Oi6kjU0HEamHF6JaQkXvus4klEK/bgHAUXPMY=)
                          2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: BsUN/x3WheMuDM+8ji5PasFXfHjRNRnwP8p4d3XtEUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 05:11:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Oct 13 05:11:40 2026 GMT
            Not After : Oct 20 05:11:40 2026 GMT
        Subject: CN=6acdbd8d-ceac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:96:1c:b7:cd:f5:78:a2:cb:9c:cb:37:88:bc:
                    16:ec:04:97:2c:bc:f2:a8:0f:28:e7:bc:77:a2:1e:
                    99:97:60:ae:89:5c:0b:c1:1c:52:f6:85:79:86:70:
                    80:3c:19:0d:68:45:a7:b0:52:28:8b:45:b7:3e:22:
                    0f:62:e7:aa:be:6c:3b:7f:5c:77:b9:de:49:77:01:
                    b7:aa:00:7f:96:a1:2e:0c:6b:09:3b:c5:79:16:14:
                    9f:c8:73:bd:28:e1:76:f8:6d:75:c1:23:17:0e:1f:
                    fe:a9:19:48:13:db:4f:04:70:16:43:55:1c:ec:29:
                    20:95:b2:14:05:a2:98:b8:1b:03:46:07:19:20:34:
                    64:12:dc:fe:a2:81:5e:0c:54:12:d2:11:55:65:59:
                    67:b5:da:c6:96:1b:9b:9c:31:bb:c8:b6:4d:c0:91:
                    d3:b2:08:e6:1f:d8:2c:44:9b:ec:9d:35:43:7e:b3:
                    11:50:ce:67:85:16:77:d4:88:8e:a3:fc:2a:5a:c7:
                    a0:7a:e9:b8:bf:1a:9d:40:4f:f2:ba:13:c7:29:ef:
                    3f:74:a3:d9:86:0e:f4:b7:a4:ea:5e:b9:29:11:51:
                    1a:0b:26:3f:4e:2f:11:65:39:86:63:28:5e:8d:b3:
                    d1:ba:6f:1d:1e:0d:fc:2a:ab:d7:cd:4a:f7:45:d2:
                    18:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D2:43:DB:E8:3C:3B:54:0E:1E:B1:C2:1A:F6:68:CE:07:E3:5F:2F
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:69:fb:f0:bd:c5:0a:f3:1d:51:68:ad:4d:1c:da:11:41:35:
         4c:fb:48:11:22:0d:0a:97:02:de:d0:12:a3:ed:ab:df:a6:c5:
         be:1f:d5:ec:ae:f0:2f:63:80:58:de:99:22:28:28:2b:3b:dc:
         18:f7:a4:67:1b:11:d6:80:bc:72:6d:6d:66:a4:d4:b2:26:82:
         a7:7b:db:8d:65:d8:f8:a1:84:dd:e3:d5:43:09:a6:0e:a1:8a:
         b9:3d:02:5f:3b:67:c4:59:1a:58:2e:9d:07:c8:57:8a:bc:5f:
         65:6e:ac:ac:d1:7f:90:51:eb:2d:18:33:50:ec:92:40:94:a2:
         0c:d7:80:e5:62:df:bf:56:c7:54:4d:12:b8:e4:45:b3:64:cb:
         5a:ef:6a:63:00:e2:f4:2e:e7:e5:f0:d7:24:cc:3d:68:44:87:
         2b:e2:9a:e0:5c:af:e9:db:54:bb:a9:a1:75:bb:a6:a5:b7:51:
         10:34:5f:dd:3d:9b:24:4b:28:0d:33:9e:a7:c6:7d:1b:bd:a5:
         4f:a3:5d:48:ca:a0:05:4f:10:a0:1f:fe:59:83:8d:07:b9:5f:
         fa:23:ad:de:3d:1e:46:e8:94:8a:29:cc:9e:c3:c6:5f:c6:57:
         56:eb:d6:52:78:16:78:72:a2:98:48:f0:84:a0:6b:aa:e1:5e:
         d7:06:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:39:21 2026 by rpki-client