Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft
File:                     Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft (raw, json)
Hash identifier:          WJYxKMgUYTet6kLiIMxtPzYHWZPYab9swYTb6/mF/Yc=
Subject key identifier:   7E:50:40:9E:45:33:95:25:93:E6:1B:08:3E:36:39:F3:B7:FE:4E:14
Authority key identifier: 43:FB:DD:D5:DB:77:9A:6B:1E:C4:8B:36:37:FA:97:B3:18:66:5B:1B
Certificate issuer:       /CN=A9154515/serialNumber=43FBDDD5DB779A6B1EC48B3637FA97B318665B1B
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft
Manifest number:          1E
Signing time:             Mon 02 Mar 2026 11:04:39 +0000
Manifest this update:     Mon 02 Mar 2026 11:04:38 +0000
Manifest next update:     Mon 09 Mar 2026 11:04:38 +0000
Files and hashes:         1: Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl (hash: yGMAJxbUPu3khWG233tM837t+NwYfrP+EIOYzLLjk/U=)
                          2: 21F007E0F5FF11F0A5E3E8DF536F56BC.roa (hash: 9nI/LPOt4+wnPOe7Wb/NDp38QkLvQHSwDogzZck1Te4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=43FBDDD5DB779A6B1EC48B3637FA97B318665B1B
        Validity
            Not Before: Mar  2 11:04:38 2026 GMT
            Not After : Mar  9 11:04:38 2026 GMT
        Subject: CN=69a56ec7-99b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:7c:c4:7e:59:2d:34:7b:e3:41:c8:73:70:
                    5f:66:cc:21:3b:69:ff:45:6b:b1:2f:d1:53:c4:29:
                    ca:96:ac:8b:83:69:65:d5:05:df:e1:43:76:e5:6d:
                    74:b3:5a:ce:17:c5:e8:58:ae:66:52:0d:16:3f:ab:
                    36:4c:d6:ce:7e:ed:d5:a9:e3:49:3c:81:15:6a:6e:
                    62:13:a8:ee:30:fa:50:c8:e8:43:4c:6b:e1:75:18:
                    d9:b1:45:39:79:ea:f0:17:3e:ca:65:a3:6b:d5:be:
                    4b:1e:bc:3e:ba:11:06:de:02:e4:3d:e5:22:ba:6d:
                    e8:3d:b8:db:66:d0:79:be:26:25:46:c2:60:50:ab:
                    31:a5:be:72:9a:d8:e7:64:6b:09:7a:1d:36:d8:e0:
                    79:e4:02:cc:a2:bb:ba:d7:1e:1c:78:a5:32:87:67:
                    42:8a:5e:cf:34:a0:1a:3c:f9:f8:fb:b0:92:dc:0f:
                    83:e0:8b:67:d8:5c:0d:2d:66:34:92:17:d8:60:a1:
                    d1:30:30:47:d7:1f:45:1f:5b:98:3d:b9:20:ff:0b:
                    e3:93:6f:1c:d6:93:93:24:35:50:03:cf:2b:e5:85:
                    e1:92:4a:d4:f6:3f:8a:15:79:7d:ee:1f:f4:24:8c:
                    53:92:74:11:c8:3d:ab:52:d3:f1:cf:30:1d:39:a8:
                    a5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:40:9E:45:33:95:25:93:E6:1B:08:3E:36:39:F3:B7:FE:4E:14
            X509v3 Authority Key Identifier:
                keyid:43:FB:DD:D5:DB:77:9A:6B:1E:C4:8B:36:37:FA:97:B3:18:66:5B:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q_vd1dt3mmsexIs2N_qXsxhmWxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/788C7706F5FE11F091DB0CDE536F56BC/Q_vd1dt3mmsexIs2N_qXsxhmWxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:28:d9:e9:88:2b:c2:df:66:9e:bd:b8:78:0b:28:d1:e1:ea:
         cf:28:77:c9:83:8b:86:d7:54:2d:17:28:0e:9b:73:ad:1f:53:
         6c:85:55:8e:fb:d3:ae:3a:8e:00:f5:67:29:0d:0c:21:f7:ed:
         ce:21:ed:a9:af:ed:09:07:0a:ee:ea:b2:6f:3d:78:a1:b3:16:
         71:b2:67:f2:39:6a:25:bc:6b:85:08:3c:ed:24:36:c4:72:e9:
         4a:e2:a5:f1:d0:1d:59:7f:66:b5:bf:26:e3:f2:8c:12:cf:e0:
         dc:1b:a8:a8:98:f3:7b:2c:21:e7:73:c8:58:72:79:2b:47:3d:
         45:c0:a9:96:37:16:bd:4b:f4:13:49:9e:02:9d:92:39:da:d3:
         b7:36:43:03:96:bf:0a:6b:5c:49:98:56:d7:84:9c:b3:b2:f2:
         d3:22:91:55:37:c0:5a:85:aa:17:2a:92:8d:e3:da:2c:dc:82:
         0c:d9:79:2b:81:98:4f:9c:f2:34:6c:24:00:a5:37:2e:b7:dc:
         67:b6:85:82:b0:07:6a:0d:16:51:48:18:52:30:e4:9a:c1:a1:
         ad:24:ee:ca:8a:62:96:ec:a6:24:75:9d:f9:e3:22:d5:8c:41:
         df:c3:8c:55:4c:06:b8:c2:d1:0b:5a:93:f7:6d:fb:e5:a0:38:
         c0:2e:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:14:10 2026 by rpki-client