Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
File:                     qtP-OSFFYMILVrZr17neXikZTf4.mft (raw, json)
Hash identifier:          kfslIIx9xQEsthuLfZ0moM1s7mVe3awbOMN8Xo6IoPs=
Subject key identifier:   A2:37:33:63:4D:90:1B:6C:1B:61:C2:33:2A:B4:CB:06:7A:B8:FE:52
Authority key identifier: AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE
Certificate issuer:       /CN=A915273A/serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
Manifest number:          09
Signing time:             Fri 17 Apr 2026 08:53:30 +0000
Manifest this update:     Fri 17 Apr 2026 08:53:30 +0000
Manifest next update:     Fri 24 Apr 2026 08:53:30 +0000
Files and hashes:         1: qtP-OSFFYMILVrZr17neXikZTf4.crl (hash: 2ZHGA+gLjL0d/+w+zf8SGO1I7nGfs1H832+brFk43vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl
                          rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915273A, serialNumber=AAD3FE39214560C20B56B66BD7B9DE5E29194DFE
        Validity
            Not Before: Apr 17 08:53:30 2026 GMT
            Not After : Apr 24 08:53:30 2026 GMT
        Subject: CN=69e1f50a-5f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:c9:94:ea:b4:91:fd:20:69:2d:f9:8a:c1:
                    bc:94:2f:97:0c:32:01:ae:79:74:d7:18:a7:5c:24:
                    2a:e2:98:bb:42:87:1a:37:c9:18:32:51:01:0c:a6:
                    9a:72:6b:ed:b3:77:60:8a:41:9e:8a:aa:35:15:06:
                    3a:f7:d9:97:7f:84:a6:ba:51:dd:f0:25:53:c2:fe:
                    78:a5:39:6b:b8:fe:fe:b2:fb:eb:20:66:e1:a5:ee:
                    fc:d4:16:ed:52:50:14:8a:76:1e:41:66:34:72:d3:
                    5c:47:0a:38:81:70:dd:13:a8:e2:d4:f2:16:b9:1d:
                    58:e9:ec:d4:24:35:cc:6c:e4:bd:7a:92:60:77:91:
                    e0:04:b1:e6:3d:8c:4f:3c:4f:10:fe:64:66:2c:5c:
                    b4:72:0a:53:25:e4:1f:06:40:10:bb:25:d5:24:7e:
                    c9:a6:0a:44:48:79:72:72:6d:dc:4d:bc:a9:31:f0:
                    e2:92:4b:b8:47:27:10:ad:f2:60:9a:95:75:6e:7f:
                    d1:c7:86:db:16:52:e0:ad:f2:4b:57:11:c7:c2:0e:
                    c8:18:ad:60:a9:66:8c:50:ad:d9:a1:9d:e4:08:a2:
                    71:e4:9e:56:3e:65:09:d3:5c:77:db:ff:34:9e:6a:
                    5b:7c:f9:81:96:8a:1f:7d:48:b0:b9:bc:0c:c3:dc:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:37:33:63:4D:90:1B:6C:1B:61:C2:33:2A:B4:CB:06:7A:B8:FE:52
            X509v3 Authority Key Identifier:
                keyid:AA:D3:FE:39:21:45:60:C2:0B:56:B6:6B:D7:B9:DE:5E:29:19:4D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtP-OSFFYMILVrZr17neXikZTf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915273A/C1BEAAC234EA11F1AF1B592394833773/qtP-OSFFYMILVrZr17neXikZTf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:68:12:4e:ec:3c:21:8f:8d:cd:21:eb:f6:87:b0:7d:b8:5c:
         3e:5b:b1:83:6f:08:df:5a:bb:c1:98:64:b5:5d:e0:6a:8c:2f:
         ed:b7:14:b0:dc:07:19:a9:6d:3e:67:c3:f0:d1:6b:f2:c8:f4:
         82:f5:3f:98:d6:31:65:69:af:5d:40:ca:a7:df:9d:ce:99:7b:
         42:67:83:c5:f5:e6:6a:da:f1:25:89:a6:22:30:fb:7f:66:62:
         ef:a4:2b:3a:3b:5b:83:1b:44:22:1a:16:da:94:be:dc:ea:63:
         8a:a5:c9:ce:40:0b:ea:10:a4:da:1e:13:07:ac:6e:fe:89:e5:
         8f:7e:0d:78:e4:5a:6f:7f:67:b5:2e:c7:ed:c2:53:43:6e:ce:
         06:8e:68:04:a1:8d:a3:55:9b:c3:7f:99:50:42:47:bf:b5:44:
         40:ea:fb:89:a2:e1:73:0a:7a:df:52:1d:61:a4:d7:36:64:8d:
         3c:69:59:77:e0:b6:9b:2b:14:1d:27:1e:20:b2:ed:c5:0d:77:
         ac:7d:b1:dd:09:d0:48:93:8d:01:4d:01:22:73:14:2c:58:08:
         19:da:1d:d6:d8:67:d9:b7:61:0c:27:26:5f:71:9a:26:fa:18:
         ac:85:7e:3b:2a:c9:a2:96:38:85:81:b3:fc:33:9f:52:df:12:
         9e:3a:60:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:45:25 2026 by rpki-client