Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
File:                     QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json)
Hash identifier:          U6BaDabfv4C38wt1/fKUrFf6knsB5E4TBrc8WTRiKpI=
Subject key identifier:   03:3C:17:FA:53:1C:97:0F:B9:FF:C9:5F:51:A3:6B:6D:50:E2:70:73
Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF
Certificate issuer:       /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
Certificate serial:       026F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
Manifest number:          026D
Signing time:             Sun 01 Mar 2026 02:34:27 +0000
Manifest this update:     Sun 01 Mar 2026 02:34:27 +0000
Manifest next update:     Sun 08 Mar 2026 02:34:27 +0000
Files and hashes:         1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: c1AzhaF6n4kJKFV++TRc2ZtOYVEDUHvoafl9qjKyUv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl
                          rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF
        Validity
            Not Before: Mar  1 02:34:27 2026 GMT
            Not After : Mar  8 02:34:27 2026 GMT
        Subject: CN=69a3a5b3-37f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:0c:e7:fc:43:6f:ba:c2:0a:b4:bc:fe:87:
                    bd:28:67:70:23:87:60:fd:c8:ce:05:0b:51:e1:8b:
                    45:3a:09:15:9a:2b:37:98:09:e5:6a:71:12:7b:c9:
                    65:ff:18:34:c7:81:0b:b4:af:ff:11:99:17:38:30:
                    1c:e1:68:9a:08:05:22:26:7c:bf:84:d2:8a:09:77:
                    68:a2:7b:77:46:8c:3a:c4:3d:d9:aa:11:8d:ca:7c:
                    86:40:73:a1:2f:43:66:59:86:a2:f8:1d:91:02:69:
                    da:d4:78:df:b9:62:e0:f8:98:2c:91:c4:46:30:52:
                    75:82:2a:ab:9c:63:e0:43:e8:b9:03:8b:ad:74:63:
                    7e:4c:8d:bd:0d:e7:85:5f:c9:d5:e1:1b:fc:f7:0c:
                    62:68:ee:6d:2a:cc:b6:e0:85:eb:c8:db:da:0b:c8:
                    59:6a:b1:fb:be:a0:3a:18:be:27:53:73:e9:84:4a:
                    d1:10:0c:c1:66:e1:14:ab:99:32:a6:3b:d4:97:63:
                    02:97:e1:1b:cc:e6:68:f5:df:f4:e7:ba:8b:86:9a:
                    47:3c:4b:53:12:49:79:d0:92:c3:8c:5d:5b:f6:bd:
                    82:db:7a:91:c0:29:61:f2:c6:44:cd:67:e7:c1:61:
                    5b:c3:aa:f5:dd:3c:b7:65:81:9e:3d:9d:42:dd:24:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3C:17:FA:53:1C:97:0F:B9:FF:C9:5F:51:A3:6B:6D:50:E2:70:73
            X509v3 Authority Key Identifier:
                keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:51:8e:88:4b:b8:8e:da:2a:26:24:d5:84:2b:83:e3:12:
         70:e7:a3:f8:aa:cb:3b:f8:34:67:84:4a:0c:dd:d5:08:a6:20:
         b9:7d:27:28:37:0e:11:5b:61:c1:1e:be:3a:86:4b:aa:80:6d:
         24:88:5c:8a:99:f2:1d:ea:8f:9c:c4:44:14:0e:a9:c6:63:5a:
         cc:9c:0c:0a:5e:13:f6:31:64:b4:1e:ba:20:07:11:e9:24:1c:
         bf:a3:d5:a1:0b:7d:76:76:a1:74:37:47:92:86:61:1c:33:58:
         a6:03:d2:c7:7f:6c:15:07:f3:75:71:b3:74:6a:89:9d:ef:95:
         ab:57:ec:1c:c4:be:f2:c1:c4:cd:63:1d:98:fc:76:2a:7e:28:
         f4:09:cb:15:c9:46:07:1c:26:f4:69:91:d1:97:94:0c:27:bd:
         ee:aa:8c:45:31:4a:77:fd:81:3e:d5:39:32:d7:ef:28:34:12:
         a8:21:23:0a:2c:06:8a:c1:8c:43:a6:93:fd:da:c3:db:82:78:
         18:35:a5:56:3d:bd:a9:9c:83:01:99:58:a0:b8:31:53:5e:a9:
         34:23:aa:fc:f9:3e:e3:fd:c6:f1:3f:d1:b7:17:36:b6:42:3f:
         63:dc:07:4c:a0:e6:1f:03:6f:0c:97:c5:ba:34:98:b7:5d:0e:
         94:f4:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:59 2026 by rpki-client