Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
File:                     Qnks9D39tIategexI8sqYaM-I-M.mft (raw, json)
Hash identifier:          NTbYPHkUymvQjnGmStP7jISdNTQFK/fu4u8c+yCciGg=
Subject key identifier:   2B:A1:A0:87:7C:51:C1:EA:B6:A8:16:BD:64:C8:76:FC:81:EB:8C:53
Authority key identifier: 42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3
Certificate issuer:       /CN=A914524B/serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
Manifest number:          0181
Signing time:             Sun 19 Apr 2026 04:17:28 +0000
Manifest this update:     Sun 19 Apr 2026 04:17:27 +0000
Manifest next update:     Sun 26 Apr 2026 04:17:27 +0000
Files and hashes:         1: Qnks9D39tIategexI8sqYaM-I-M.crl (hash: caCfLvjssuOyTbvG+E6vOHn8CvdZ5mGSzseAqlAADyA=)
                          2: A16739B2F89011EE9EB9D42BC4F9AE02.roa (hash: KlNM/yfkSE+noMo4pBbPbKUObjnAMx3gXh75VDyO61o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl
                          rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914524B, serialNumber=42792CF43DFDB486AD7A07B123CB2A61A33E23E3
        Validity
            Not Before: Apr 19 04:17:27 2026 GMT
            Not After : Apr 26 04:17:27 2026 GMT
        Subject: CN=69e45758-c0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:67:03:b1:15:0d:fa:2a:2b:b9:db:a5:2c:
                    60:58:00:6f:28:3c:df:a9:dd:9e:be:7e:2b:15:c1:
                    ca:70:01:96:08:f7:86:ec:b6:78:dd:ae:ca:8b:2b:
                    d9:e6:7c:61:44:a4:47:c8:32:3e:17:2e:46:4a:09:
                    24:1c:f7:89:12:35:5c:10:6d:8b:c0:52:4a:d6:2b:
                    76:2a:d8:9b:b4:00:7d:13:ab:58:18:88:75:0e:a9:
                    a0:c7:a3:ac:de:2b:1f:6b:d5:22:b1:0d:ae:d5:6f:
                    68:82:01:91:7f:b7:a7:75:a1:ca:a8:9f:6f:2a:b5:
                    4f:df:da:0b:df:84:9d:dd:60:3d:0d:ad:95:1f:a8:
                    63:f1:83:39:80:37:64:e1:0d:ae:9e:b3:cd:42:07:
                    20:f4:0a:9c:09:d2:98:21:13:be:7f:f4:0a:32:97:
                    78:13:a4:0d:56:5a:08:86:b5:b1:bd:7b:56:9c:22:
                    7f:ee:73:46:e4:ba:34:9a:d3:2c:58:1f:ca:87:5b:
                    0d:b0:7e:0c:ec:ee:2f:44:6d:e2:81:b6:1a:94:0a:
                    97:b0:db:df:11:80:6c:81:bc:74:98:b2:33:d8:8f:
                    1c:e8:3a:b5:55:5f:21:8a:06:bb:8d:d5:53:a0:5d:
                    80:c0:41:d3:c0:2a:1c:b3:41:0e:11:ac:b6:46:67:
                    15:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A1:A0:87:7C:51:C1:EA:B6:A8:16:BD:64:C8:76:FC:81:EB:8C:53
            X509v3 Authority Key Identifier:
                keyid:42:79:2C:F4:3D:FD:B4:86:AD:7A:07:B1:23:CB:2A:61:A3:3E:23:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnks9D39tIategexI8sqYaM-I-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914524B/B51022D6F88F11EE976C1E2AC4F9AE02/Qnks9D39tIategexI8sqYaM-I-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:73:c4:73:a8:f5:ce:81:73:87:67:83:11:a2:35:4b:e7:
         37:c1:32:02:d8:8e:59:59:a1:f6:69:7c:60:9a:7a:3a:91:cb:
         73:db:74:5f:6b:6d:f0:23:3b:49:15:72:45:4f:42:c8:bb:e4:
         c8:76:0b:fc:95:67:5e:7a:ce:55:eb:59:de:1f:89:5a:1c:df:
         75:38:bd:c9:44:d8:7d:26:56:be:a0:74:d0:e9:a8:15:08:f6:
         91:43:9b:5a:d2:ee:cf:c7:e8:3d:07:25:5f:7d:36:a4:e0:eb:
         d3:fb:d3:63:44:05:e8:4d:6c:6a:f7:69:fb:ff:28:7d:62:7d:
         60:47:c9:7a:4b:d5:63:51:f0:5d:60:8b:b3:84:25:5a:38:92:
         16:f9:eb:03:57:fb:a6:0a:fe:22:97:21:6e:63:3e:75:dc:5f:
         01:85:91:52:d9:f1:ed:5e:c0:af:4e:d5:58:f2:1e:b3:5f:da:
         7c:39:5c:76:a6:b8:3c:0f:7a:a7:8f:b3:94:45:12:65:a6:37:
         fb:49:f5:9f:e0:4a:41:ad:28:71:a2:58:5d:28:99:d2:85:a8:
         5e:c6:00:6c:91:96:cf:e5:55:f3:0f:82:a8:f5:35:43:b7:fa:
         82:e7:60:fb:93:d0:99:be:a6:12:ae:f3:07:f9:65:69:7f:b2:
         48:90:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:35 2026 by rpki-client