Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
File:                     cqUfTuqiGLczbu_3p6WMsa5UQjk.mft (raw, json)
Hash identifier:          eqX/HugTkdO59b0rd0UuTet0Qir3lB+uRIU0qIU1ToY=
Subject key identifier:   7E:55:4E:CA:04:64:55:2B:49:88:62:DF:3B:52:5D:67:A1:7F:40:D8
Authority key identifier: 72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39
Certificate issuer:       /CN=A917D121/serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
Certificate serial:       083C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
Manifest number:          0832
Signing time:             Thu 16 Apr 2026 20:53:12 +0000
Manifest this update:     Thu 16 Apr 2026 20:53:11 +0000
Manifest next update:     Thu 23 Apr 2026 20:53:11 +0000
Files and hashes:         1: cqUfTuqiGLczbu_3p6WMsa5UQjk.crl (hash: cFtWPDx/5+lg/4DzLtHdJix42yFc11MncsPA4cxqtC8=)
                          2: DAAB94840EC911EBA913852BC4F9AE02.roa (hash: oupCMhc1zc9sogDQvnnOtMORHUovshDacTpdu7VPrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl
                          rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D121, serialNumber=72A51F4EEAA218B7336EEFF7A7A58CB1AE544239
        Validity
            Not Before: Apr 16 20:53:11 2026 GMT
            Not After : Apr 23 20:53:11 2026 GMT
        Subject: CN=69e14c38-96f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:b9:1b:01:19:63:0e:70:99:2f:2b:60:66:
                    bf:e5:ae:1c:ea:b5:c7:64:09:47:4e:4b:11:20:33:
                    b0:56:5c:4b:6a:fb:71:2b:d6:d1:8b:2a:fe:98:fa:
                    b9:16:84:18:74:7b:99:b0:74:bb:45:27:fc:fc:38:
                    d3:fe:94:1b:9a:aa:4f:91:d2:f5:ac:c4:74:df:95:
                    cf:78:a2:74:67:a7:e2:f6:cf:11:a9:75:b2:39:46:
                    bb:d5:ef:b1:09:c6:83:28:db:42:44:1b:ca:4d:5c:
                    ab:8c:73:46:b8:7d:ad:1a:48:e8:72:e8:80:fd:76:
                    32:76:6a:ca:99:fc:be:fe:fe:b2:5b:58:c1:18:24:
                    0f:aa:00:a6:83:8f:a3:8b:4b:4d:5b:c5:12:5f:99:
                    04:0c:1f:38:49:27:2e:19:68:01:e6:00:db:17:d6:
                    c6:22:c4:3b:09:89:3d:29:53:d7:2c:a0:8f:51:79:
                    3b:72:bb:59:8a:ae:a8:14:e5:8b:4a:e5:de:82:b7:
                    94:a0:30:ff:cb:f7:3e:e1:d3:68:32:49:c9:13:6c:
                    43:dd:70:66:02:74:dc:3b:c0:fa:25:6a:44:ec:25:
                    d6:41:dc:19:29:10:57:7d:2a:c4:94:31:0b:e9:70:
                    ca:34:11:16:af:81:05:70:5d:a0:5c:d1:9c:57:d4:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:55:4E:CA:04:64:55:2B:49:88:62:DF:3B:52:5D:67:A1:7F:40:D8
            X509v3 Authority Key Identifier:
                keyid:72:A5:1F:4E:EA:A2:18:B7:33:6E:EF:F7:A7:A5:8C:B1:AE:54:42:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cqUfTuqiGLczbu_3p6WMsa5UQjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D121/8B0F8B0C0EC811EBA5042C2AC4F9AE02/cqUfTuqiGLczbu_3p6WMsa5UQjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:e1:5f:6c:d2:83:91:77:da:d3:5c:9b:f2:7b:dc:f5:3c:
         f2:c1:65:79:5a:a2:d3:02:f5:46:e8:1f:1c:e2:b6:37:36:ee:
         1e:86:20:9b:30:52:db:f4:6b:ef:1a:b5:6b:b1:d9:d9:29:e0:
         be:28:ad:8d:46:15:47:08:3e:83:4a:06:d5:34:58:6d:05:f4:
         d6:f6:37:0c:0e:a9:f1:9e:39:23:24:1b:cf:42:5d:9e:e3:e0:
         82:3c:da:81:1e:2b:99:f1:64:ff:91:88:82:c4:c0:da:a9:49:
         f6:8e:fe:38:63:fa:e4:bc:e8:4f:64:0d:6a:ba:e5:79:c9:e5:
         79:36:67:47:21:28:1f:90:94:32:b8:60:48:69:33:4d:bb:e6:
         21:16:1d:7c:20:4e:cd:3a:3b:e1:33:ac:8d:fe:6a:41:64:69:
         49:62:29:9b:19:89:f5:53:b0:2a:60:6d:9a:d3:4c:7c:b9:6a:
         97:7f:f0:28:c7:be:44:ca:da:53:10:57:79:4e:e2:bb:5d:b0:
         ed:0d:06:c1:b2:ba:42:dd:c6:55:11:1d:55:59:a0:29:10:d2:
         8b:a1:ce:1c:05:db:3f:82:70:74:20:9a:a1:40:94:cd:6e:a2:
         63:58:a6:5e:95:0e:9d:3f:e4:6d:95:f4:b4:19:94:7c:94:ea:
         c8:b5:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:48:58 2026 by rpki-client