Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
File:                     QZ8npM_s9GHbgvb5BnZPttZfI88.mft (raw, json)
Hash identifier:          huIpfdre01RelsgxOjsi9R53z8lwj8R3O99+YLlDR5Y=
Subject key identifier:   CA:F6:3E:78:22:C4:C9:0F:42:B1:1B:E2:5C:E6:EB:22:28:02:14:10
Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
Certificate issuer:       /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
Manifest number:          0166
Signing time:             Fri 17 Apr 2026 04:36:05 +0000
Manifest this update:     Fri 17 Apr 2026 04:36:04 +0000
Manifest next update:     Fri 24 Apr 2026 04:36:04 +0000
Files and hashes:         1: QZ8npM_s9GHbgvb5BnZPttZfI88.crl (hash: K+Bq8HWpP/Xa8oArrsC/CROrHhe9a++RtnbYupnVuZ4=)
                          2: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (hash: y+oCb7jxR3D55AFcUV4IpcRd8DG8LNASO4m3mEiRdoA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
                          rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BED, serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
        Validity
            Not Before: Apr 17 04:36:04 2026 GMT
            Not After : Apr 24 04:36:04 2026 GMT
        Subject: CN=69e1b8b4-ee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:7b:7e:24:81:90:ea:f4:48:88:7b:6b:45:
                    66:69:3e:3f:52:75:45:96:89:97:8d:0a:08:87:d2:
                    30:b4:2f:91:bc:27:65:21:30:ad:fe:52:cc:86:74:
                    b6:e0:ac:eb:da:65:9b:cc:40:a1:d2:1a:21:0a:fc:
                    56:e3:d0:9a:2d:e0:5b:54:5e:34:9d:94:53:8d:6b:
                    98:db:ea:e1:f4:ed:47:be:30:7a:83:1e:3b:61:ec:
                    b2:5b:72:66:fd:15:bd:b2:7a:42:53:ba:b6:f5:96:
                    ec:50:94:05:90:c4:fb:13:2c:78:2b:18:ff:f0:8a:
                    54:69:aa:25:87:8b:c6:4a:f1:37:3d:c8:91:c6:be:
                    3f:7f:fe:e9:f6:15:19:2e:36:2b:dd:56:fd:8f:95:
                    50:f3:21:77:00:a9:7d:08:80:28:57:ae:81:70:d3:
                    ee:7c:31:5f:5c:8a:ac:dd:b5:b1:11:e7:9f:e6:c0:
                    63:70:11:32:e2:36:52:81:bd:e0:12:f5:c7:89:30:
                    68:e4:2b:fd:6b:8b:d4:40:50:82:5c:c0:64:1d:8e:
                    15:f3:56:2b:37:c0:3a:0f:18:e7:43:0e:7a:57:bf:
                    f9:5f:a1:0e:47:83:e1:4c:32:89:10:57:2a:c6:65:
                    d6:37:6c:64:80:5b:e4:c7:97:b4:ff:22:aa:07:59:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F6:3E:78:22:C4:C9:0F:42:B1:1B:E2:5C:E6:EB:22:28:02:14:10
            X509v3 Authority Key Identifier:
                keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:3c:a7:48:c3:52:67:93:78:9f:e2:59:26:78:dd:05:bc:14:
         a9:d1:72:1c:11:28:1e:14:bf:a9:c7:46:b5:ff:64:eb:ba:68:
         78:03:d3:71:6e:61:32:e7:21:4e:6c:65:1a:c2:e3:c0:8e:d2:
         73:21:93:08:53:47:a8:de:4d:26:2f:64:35:0d:a2:e7:21:ea:
         79:60:48:12:78:04:47:c0:f7:d8:b4:4c:f8:c2:5f:73:58:68:
         13:89:39:6d:44:2f:ec:d6:b0:9a:fc:8f:9f:0a:7e:fc:9a:ff:
         69:33:db:4e:20:55:eb:fb:f4:5d:71:5c:59:e2:8f:2e:7b:25:
         9a:6c:08:cb:6d:ba:26:11:d9:f8:09:ff:3b:29:9f:c1:aa:a7:
         7d:52:0c:e4:07:e4:c4:dd:88:8b:b0:34:c1:e2:48:6f:7d:49:
         49:24:6e:0c:10:19:74:8b:e9:d9:8a:dd:c9:86:ca:c8:12:66:
         bd:9e:74:6d:ee:0d:ef:99:88:ff:4f:c1:11:15:a2:5a:3a:57:
         3c:59:fd:59:50:67:5b:23:4a:52:3c:56:7a:39:5b:1d:e9:b6:
         7e:f8:a6:d4:de:8d:2a:4e:46:7e:62:1f:f4:72:a7:69:3e:08:
         8a:0b:47:f2:b5:3e:eb:41:4c:91:98:ae:a1:53:a8:62:f3:bd:
         12:b0:06:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBCRUQxMTAvBgNVBAUTKDQxOUYyN0E0Q0ZFQ0Y0NjFEQjgyRjZGOTA2NzY0RkI2
RDY1RjIzQ0YwHhcNMjYwNDE3MDQzNjA0WhcNMjYwNDI0MDQzNjA0WjAYMRYwFAYD
VQQDEw02OWUxYjhiNC1lZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8YB7fiSBkOr0SIh7a0VmaT4/UnVFlomXjQoIh9IwtC+RvCdlITCt/lLMhnS2
4Kzr2mWbzECh0hohCvxW49CaLeBbVF40nZRTjWuY2+rh9O1HvjB6gx47YeyyW3Jm
/RW9snpCU7q29ZbsUJQFkMT7Eyx4Kxj/8IpUaaolh4vGSvE3PciRxr4/f/7p9hUZ
LjYr3Vb9j5VQ8yF3AKl9CIAoV66BcNPufDFfXIqs3bWxEeef5sBjcBEy4jZSgb3g
EvXHiTBo5Cv9a4vUQFCCXMBkHY4V81YrN8A6DxjnQw56V7/5X6EOR4PhTDKJEFcq
xmXWN2xkgFvkx5e0/yKqB1lVVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMr2Pngi
xMkPQrEb4lzm6yIoAhQQMB8GA1UdIwQYMBaAFEGfJ6TP7PRh24L2+QZ2T7bWXyPP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEJFRC8wOEUwRTA2NjFG
MzgxMUVGQjA1OUI2NjVDNEY5QUUwMi9RWjhucE1fczlHSGJndmI1Qm5aUHR0WmZJ
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FaOG5wTV9zOUdIYmd2YjVCblpQdHRaZkk4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEJFRC8wOEUwRTA2NjFGMzgxMUVGQjA1OUI2NjVDNEY5QUUwMi9RWjhucE1fczlH
SGJndmI1Qm5aUHR0WmZJODgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3jynSMNSZ5N4n+JZJnjdBbwUqdFyHBEoHhS/qcdGtf9k67poeAPTcW5hMuch
TmxlGsLjwI7ScyGTCFNHqN5NJi9kNQ2i5yHqeWBIEngER8D32LRM+MJfc1hoE4k5
bUQv7NawmvyPnwp+/Jr/aTPbTiBV6/v0XXFcWeKPLnslmmwIy226JhHZ+An/Oymf
waqnfVIM5AfkxN2Ii7A0weJIb31JSSRuDBAZdIvp2YrdyYbKyBJmvZ50be4N75mI
/0/BERWiWjpXPFn9WVBnWyNKUjxWejlbHem2fvim1N6NKk5GfmIf9HKnaT4IigtH
8rU+60FMkZiuoVOoYvO9ErAGsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:33 2026 by rpki-client