Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
File:                     QVEOswnqHt6pCF-PaC289YblBfg.mft (raw, json)
Hash identifier:          lOasaTu6IbZqf5/LDRCaq7l7QayhjnvqO73xCydMbS8=
Subject key identifier:   7E:B6:9D:82:1F:88:04:D9:84:D5:DB:EB:83:65:9E:E9:C9:3B:68:43
Authority key identifier: 41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8
Certificate issuer:       /CN=A914EBB2/serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
Manifest number:          02
Signing time:             Fri 17 Apr 2026 05:12:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:12:30 +0000
Manifest next update:     Fri 24 Apr 2026 05:12:30 +0000
Files and hashes:         1: QVEOswnqHt6pCF-PaC289YblBfg.crl (hash: 6u/+5BkwSoxNYKVnqCUr/e3prnUWxT3LIjbIUJOfebQ=)
                          2: 04A267BC3A1C11F18A86C54FCE833773.roa (hash: 23knBDl73gfXNd3iGv8o2CcfU2NSZeIUWhdKE2kDL2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl
                          rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EBB2, serialNumber=41510EB309EA1EDEA9085F8F682DBCF586E505F8
        Validity
            Not Before: Apr 17 05:12:30 2026 GMT
            Not After : Apr 24 05:12:30 2026 GMT
        Subject: CN=69e1c13f-c235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:ad:a6:46:05:10:ed:73:1f:93:ce:12:33:
                    da:04:78:db:5b:d2:2e:d0:cf:67:a3:97:36:76:f5:
                    78:e5:db:1f:d7:6f:44:7d:9c:27:88:3c:ce:3b:a0:
                    18:58:bb:f5:b1:cf:3f:f6:1c:ea:54:54:64:8d:a9:
                    79:31:65:c9:7b:e8:b1:ee:c5:01:82:67:77:39:45:
                    80:c3:0f:7a:fb:b6:f8:66:00:7f:b8:e5:da:70:3a:
                    10:75:09:af:29:f6:af:52:c3:6a:6e:21:66:45:2c:
                    02:29:48:fa:65:4a:f9:aa:0b:3f:68:de:ea:0d:5d:
                    d8:2e:27:99:a0:a5:4f:b9:b1:13:c0:75:78:ad:88:
                    67:a3:35:b5:ec:f5:d7:d1:7c:ae:88:2e:7f:41:9d:
                    3f:7a:78:31:72:ff:56:3d:b4:22:8c:a6:e8:b1:f3:
                    21:0e:a8:da:33:9a:0b:e8:ef:77:81:54:85:b4:ba:
                    51:a8:e9:10:77:86:49:ec:b3:d0:65:11:2d:50:85:
                    07:fd:c3:06:62:da:31:ee:69:49:ee:4c:fa:e7:f7:
                    59:97:4b:46:19:50:8d:85:d0:84:7e:4a:8e:95:4d:
                    16:5a:38:21:33:dd:05:96:9f:d3:0c:f2:58:89:1c:
                    73:48:65:68:a1:cd:f5:83:a7:b9:88:07:b0:b5:b8:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B6:9D:82:1F:88:04:D9:84:D5:DB:EB:83:65:9E:E9:C9:3B:68:43
            X509v3 Authority Key Identifier:
                keyid:41:51:0E:B3:09:EA:1E:DE:A9:08:5F:8F:68:2D:BC:F5:86:E5:05:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/QVEOswnqHt6pCF-PaC289YblBfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/07F84CA03A1811F1928271CB8EEE528E/QVEOswnqHt6pCF-PaC289YblBfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:df:5f:5c:18:35:61:15:62:67:c7:20:42:89:04:aa:e7:f7:
         83:a9:62:64:50:63:b0:88:a2:61:9a:52:d1:45:b8:56:bf:fd:
         fd:f4:06:07:fe:76:ce:b7:1f:2d:86:17:81:7c:e6:bd:2f:03:
         81:10:1c:22:f1:7d:ee:be:b2:e7:44:30:2e:60:2e:62:74:a9:
         a6:2a:c6:92:36:76:c1:58:82:c0:76:6b:67:db:62:a7:9a:10:
         41:43:e6:5b:90:6a:62:01:a0:24:3d:79:e1:3f:e3:0c:dd:11:
         46:d3:13:4b:5c:cb:1a:1c:b6:31:31:30:1b:75:8a:c8:a0:10:
         16:99:fd:e0:c9:04:66:b8:6e:95:50:95:d9:a3:4b:d0:86:bf:
         d3:78:12:cc:3c:9b:17:08:ab:11:61:02:ef:a7:7e:aa:b0:34:
         72:a6:9c:d4:36:26:4f:f6:a7:62:7d:09:8f:c9:6c:a0:61:75:
         ee:d1:69:e5:61:c8:ae:b6:19:aa:3c:3e:85:3b:95:95:72:31:
         27:ac:ff:64:2f:be:64:0e:fb:3c:30:d3:d6:5b:a4:4c:8f:66:
         b4:64:c5:2f:13:dd:a9:0a:bd:46:b8:7a:6f:e7:85:62:88:55:
         55:18:b6:03:3e:75:5e:76:63:4f:00:f4:d7:34:59:49:68:ef:
         3b:12:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:26 2026 by rpki-client