Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
File:                     QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft (raw, json)
Hash identifier:          eemJJ0jbEeNDgWkNDUmNrdNjSoEgQGXriB/gioNcW6A=
Subject key identifier:   6E:1F:25:40:51:E2:FE:63:CF:96:D1:2D:3E:88:7C:7B:7C:E0:24:37
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
Manifest number:          012D
Signing time:             Fri 17 Apr 2026 05:19:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:19:00 +0000
Manifest next update:     Fri 24 Apr 2026 05:19:00 +0000
Files and hashes:         1: QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl (hash: tcarJAWS72CBo2ODhQBRiEzB1OO0qTadzkwtpgjCEuA=)
                          2: 5F18EB127A7E11EF932E0B3EC4F9AE02.roa (hash: BsUN/x3WheMuDM+8ji5PasFXfHjRNRnwP8p4d3XtEUI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Apr 17 05:19:00 2026 GMT
            Not After : Apr 24 05:19:00 2026 GMT
        Subject: CN=69e1c2c5-c0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:c0:4b:b6:3d:b8:2d:4d:72:99:60:35:85:
                    f6:72:00:46:d7:19:a3:c6:4f:2f:1b:23:0a:4f:7a:
                    c5:82:18:a9:38:fe:07:ee:59:f4:8a:2c:e1:9b:eb:
                    ca:6d:9e:52:b7:58:82:c7:9a:7a:5c:90:9f:75:8b:
                    54:0a:73:79:c7:3d:09:35:23:b1:5a:5b:58:12:e4:
                    6b:9d:c0:af:e7:d5:b6:bb:80:f6:11:7f:f5:9a:71:
                    8b:83:07:71:11:2c:0e:d3:0f:4c:83:d6:ab:45:b3:
                    4f:74:57:12:96:2f:16:7d:23:cb:aa:1e:97:83:09:
                    81:84:cb:e3:a3:44:b9:25:00:58:e8:f0:46:1a:e7:
                    79:d7:3f:85:a6:e6:18:48:91:a5:3d:c8:2f:62:5f:
                    87:b9:06:82:74:41:c8:a7:65:10:66:db:ae:63:7d:
                    a1:5e:11:e6:61:91:68:f0:27:05:29:4c:ad:3b:27:
                    15:ff:8d:9a:3b:44:fc:b3:88:24:9b:fb:8f:38:dd:
                    83:8a:20:ab:af:0c:81:66:1f:52:20:dc:9f:16:1f:
                    04:d9:e3:7c:c9:1f:2a:90:3e:d2:f2:35:bb:d2:78:
                    21:5f:44:97:31:cb:58:c7:7e:15:02:6b:0c:2d:0e:
                    75:77:8c:fc:e2:48:f0:e2:0f:39:91:f2:eb:34:ea:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1F:25:40:51:E2:FE:63:CF:96:D1:2D:3E:88:7C:7B:7C:E0:24:37
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1c:fc:b5:34:aa:18:1e:ff:2d:cf:25:bf:b1:e8:25:65:55:
         07:e1:e1:9d:db:3a:0c:35:ee:c8:d0:e4:bb:ef:97:22:7c:ad:
         d5:1d:73:f2:bd:57:36:d4:31:9f:18:f3:1f:26:a0:f8:cc:a5:
         df:78:b2:43:1c:31:b9:b6:0c:be:e6:0a:16:7a:46:fd:1d:c7:
         e7:93:1f:1a:0f:67:5e:4f:04:b4:e1:84:a6:7f:0f:d6:a4:a0:
         f6:03:21:d6:40:99:33:e6:a2:bc:8e:ac:24:53:cf:8c:99:66:
         3b:fe:6c:31:7b:f5:72:15:90:ef:73:6a:4c:f9:7c:7c:23:27:
         32:0e:e7:e1:7c:be:1d:d3:a7:09:0f:6c:8f:fd:8d:96:19:0d:
         d6:dc:95:73:dc:b2:9c:79:80:5d:6c:cc:ce:56:70:ce:ba:f0:
         40:f2:fe:23:d9:fa:d2:a9:d1:66:a9:fa:b4:8a:a3:2d:4b:37:
         06:4d:da:cb:3c:c6:0f:c6:e5:0c:89:8f:09:fd:14:6a:09:7e:
         38:2b:d4:6c:12:1d:3f:be:ac:fb:79:9b:ac:66:45:ba:3b:c0:
         ee:95:5e:6d:68:a0:fe:c1:3b:de:37:49:9d:6e:38:40:36:28:
         d3:e3:73:95:85:9f:72:fe:31:61:54:4c:29:d7:38:8a:97:20:
         62:7c:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:05:25 2026 by rpki-client