Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
File:                     Qb--vmNSH7BO2BI8aOXAza9dBc0.mft (raw, json)
Hash identifier:          3dDE9kBxZWvyVCHz9r5n71DligcCz1+kGfyoVm8WtiM=
Subject key identifier:   81:34:0D:8A:6D:F9:60:92:96:E8:A9:7A:6A:62:85:D5:5E:26:A8:D3
Authority key identifier: 41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD
Certificate issuer:       /CN=A9170982/serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
Certificate serial:       042A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
Manifest number:          0415
Signing time:             Mon 02 Mar 2026 01:46:26 +0000
Manifest this update:     Mon 02 Mar 2026 01:46:25 +0000
Manifest next update:     Mon 09 Mar 2026 01:46:25 +0000
Files and hashes:         1: Qb--vmNSH7BO2BI8aOXAza9dBc0.crl (hash: rJ2kcHj/EfIiqsgSunqbSdgFiroSVczo8y620AqMlLM=)
                          2: 332B4C6ABA7011F088893F1DC4F9AE02.roa (hash: 0Sm54IRiiNJRyYTIMOY3l4XXUfmKddVszLFvgn4oy1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl
                          rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170982, serialNumber=41BFBEBE63521FB04ED8123C68E5C0CDAF5D05CD
        Validity
            Not Before: Mar  2 01:46:25 2026 GMT
            Not After : Mar  9 01:46:25 2026 GMT
        Subject: CN=69a4ebf2-bb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:d1:00:bf:d8:67:17:27:4e:82:1f:12:76:
                    08:1f:5e:97:d4:5b:4c:b3:24:fc:da:75:89:4f:f4:
                    9a:f9:1a:72:42:f9:36:37:54:34:a2:28:23:54:67:
                    22:1b:77:00:22:e6:53:11:84:b2:97:c2:32:71:39:
                    07:e2:37:1c:ce:cf:3e:8e:6b:4f:7c:77:fb:5f:2b:
                    24:70:d6:ed:9a:07:dc:60:22:0b:79:53:6f:ae:8e:
                    96:a4:00:cc:32:d9:56:6c:48:25:04:fc:4f:42:5d:
                    6c:91:b6:ee:84:ab:b8:12:ce:c3:b1:d1:b5:11:c7:
                    6a:51:e3:82:b4:19:a6:3d:db:bc:8d:d7:9b:b9:f7:
                    18:b5:e2:31:01:2a:f5:5f:90:b9:be:67:1f:66:94:
                    4e:7f:35:e5:12:9f:b5:58:3a:ac:7c:cc:51:0a:6c:
                    ad:b4:3e:ad:3f:68:30:20:47:86:53:31:eb:f3:c8:
                    63:00:56:00:95:04:61:30:77:33:3b:2b:85:67:f6:
                    1e:45:56:df:b0:37:89:91:f8:2e:2b:a3:f0:59:d8:
                    c4:f4:51:8e:83:1e:45:f9:ba:00:45:00:01:b8:b6:
                    1f:17:76:23:cd:2d:1b:9a:2c:ed:ee:d4:69:cf:21:
                    50:ab:69:46:bd:f0:5c:af:55:1d:85:bb:ee:90:57:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:34:0D:8A:6D:F9:60:92:96:E8:A9:7A:6A:62:85:D5:5E:26:A8:D3
            X509v3 Authority Key Identifier:
                keyid:41:BF:BE:BE:63:52:1F:B0:4E:D8:12:3C:68:E5:C0:CD:AF:5D:05:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qb--vmNSH7BO2BI8aOXAza9dBc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/CF205C60AC1311ECB776B209C4F9AE02/Qb--vmNSH7BO2BI8aOXAza9dBc0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:8e:ce:17:b2:10:99:88:30:61:32:31:7f:8e:d9:db:e8:
         07:75:41:c3:36:0a:19:8b:c5:6d:8d:2c:0f:d7:fd:1b:e2:41:
         08:1c:3e:4e:80:a1:34:91:1b:be:12:de:3c:04:30:91:54:da:
         c6:18:1b:8b:01:4e:04:36:10:6a:b1:01:10:7f:19:33:7a:6b:
         52:c6:f9:0c:f5:0e:3a:43:61:42:1c:36:86:2d:6e:15:02:34:
         32:ff:2d:f3:29:11:db:66:b8:9d:0f:34:b0:45:48:fe:1b:48:
         85:b0:29:79:fa:56:f7:46:9f:d7:f2:61:24:47:73:af:da:bb:
         fe:96:6f:09:33:bb:5e:28:0f:4a:bf:0f:b8:18:88:9d:0e:3d:
         31:35:59:53:e0:e4:a9:50:5f:6a:e2:a2:a6:53:ff:5a:74:62:
         2c:1b:4f:1d:66:a2:e0:bc:bf:45:2d:25:ca:eb:9c:ac:fb:7f:
         7a:6b:13:14:44:48:62:de:49:e1:61:7b:39:48:0a:a3:7f:8e:
         07:79:67:24:35:e6:cd:ac:0a:5e:29:fa:c9:c6:40:8f:bc:98:
         b0:21:ea:41:01:44:12:b8:af:ac:6c:b5:6c:c0:1b:b1:ea:11:
         05:8c:af:cc:06:42:26:f7:fe:ed:89:99:ea:c9:10:d1:43:ee:
         c0:42:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:50 2026 by rpki-client