Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File:                     Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier:          Zhdax4W/W4aJsaQmZWnPiatwPF72rb9TieVvK7bsdO0=
Subject key identifier:   69:59:02:48:8E:89:25:E2:B9:5D:4A:34:65:D8:ED:84:99:2A:86:6E
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number:          015B
Signing time:             Sun 19 Apr 2026 04:37:57 +0000
Manifest this update:     Sun 19 Apr 2026 04:37:56 +0000
Manifest next update:     Sun 26 Apr 2026 04:37:56 +0000
Files and hashes:         1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: vqX7uctj6C+WYISB03qtvgWzsv3bRSr5Gr1q9nflHkg=)
                          2: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: qO2Q3Q5zR4BZKw3pBS7JR4NiTCN8t4Ujvg2GOjsbNkA=)
                          3: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vZ2S+w3GcPa+h6MU9zMiF5RlRO5/+gC76nWMxy6HcwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: Apr 19 04:37:56 2026 GMT
            Not After : Apr 26 04:37:56 2026 GMT
        Subject: CN=69e45c25-12b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:90:01:3c:10:ed:07:22:3c:af:8b:54:35:
                    79:12:7a:2f:79:51:7f:7f:46:ea:26:f1:86:28:fc:
                    02:c6:1f:98:86:e2:99:ab:ad:c1:ae:2b:e1:3c:77:
                    32:e2:a0:92:3c:b2:16:2c:da:47:e2:d9:0d:1d:ce:
                    a9:b7:77:90:d4:50:de:64:92:4e:f1:bd:95:bf:73:
                    14:42:fe:24:92:95:39:b6:60:97:9b:f8:c6:5d:92:
                    9c:2a:5b:f8:ab:1b:e2:93:cd:3d:31:0d:31:15:3d:
                    0e:9c:8b:8d:cb:82:5f:ff:fb:e9:3c:f3:a0:2d:b6:
                    a7:67:2b:77:35:fc:33:9e:5b:b3:7f:28:94:47:57:
                    5d:a1:7f:39:c4:aa:2f:b1:93:a7:12:63:71:36:31:
                    81:25:13:88:54:ea:4e:52:44:53:82:e3:4a:ce:c1:
                    e0:65:57:9d:8d:02:89:81:0c:88:8c:89:f2:fe:d3:
                    54:d4:54:20:89:14:d9:58:ef:ef:dd:f6:26:1f:95:
                    e5:3d:65:a0:6f:36:40:89:d9:96:92:ab:ee:4e:aa:
                    1f:c0:bd:26:bf:0f:99:0c:1d:4c:43:05:13:f5:bb:
                    7a:18:7f:1d:77:a5:2a:7c:9e:54:f7:c3:cc:4d:1c:
                    63:93:6c:03:0c:6a:c3:07:25:c1:71:8a:24:8e:1e:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:59:02:48:8E:89:25:E2:B9:5D:4A:34:65:D8:ED:84:99:2A:86:6E
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c6:76:39:8a:f0:ae:96:6c:d2:0c:b7:dd:26:2e:77:7b:4a:
         2d:0d:e0:16:ff:24:05:9c:f1:98:aa:bd:71:a9:80:97:bf:58:
         44:0b:81:55:79:f6:43:7f:90:bb:5d:1b:c6:15:3a:3b:fc:0c:
         00:89:6d:32:b2:a0:71:5f:84:fc:30:dc:dc:85:1e:31:ea:08:
         53:36:4e:3b:16:01:3d:81:12:49:14:aa:b1:b5:1b:f0:18:c7:
         a3:70:fe:96:6a:8d:03:44:d1:3c:2b:9e:c1:a6:85:09:95:51:
         db:52:5e:0f:15:67:62:8e:bf:a1:8f:82:ed:ff:a9:ad:77:ba:
         09:61:0d:7e:27:18:a0:39:36:f4:ea:1c:72:2a:a4:b8:74:17:
         a5:02:27:d4:72:0c:68:2f:e4:59:eb:85:b6:99:d2:59:f7:7b:
         c5:0a:35:27:93:79:09:e2:5d:9f:fe:83:c1:37:4a:e6:a6:47:
         bf:31:a9:38:4b:db:d3:6e:fe:2b:32:76:c9:ba:70:23:bf:e2:
         b4:f3:be:13:48:c9:62:00:4a:c1:16:30:e9:15:ea:a2:e6:b8:
         a9:e7:ff:14:b5:d9:9a:de:29:f7:f3:b4:ba:bf:f1:05:7c:c1:
         72:a6:78:cc:b6:49:94:43:3f:b8:49:69:86:fd:85:59:55:d1:
         ac:fe:86:2b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy
OEQyNjQ5OUQwHhcNMjYwNDE5MDQzNzU2WhcNMjYwNDI2MDQzNzU2WjAYMRYwFAYD
VQQDEw02OWU0NWMyNS0xMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi3qQATwQ7QciPK+LVDV5EnoveVF/f0bqJvGGKPwCxh+YhuKZq63BrivhPHcy
4qCSPLIWLNpH4tkNHc6pt3eQ1FDeZJJO8b2Vv3MUQv4kkpU5tmCXm/jGXZKcKlv4
qxvik809MQ0xFT0OnIuNy4Jf//vpPPOgLbanZyt3NfwznluzfyiUR1ddoX85xKov
sZOnEmNxNjGBJROIVOpOUkRTguNKzsHgZVedjQKJgQyIjIny/tNU1FQgiRTZWO/v
3fYmH5XlPWWgbzZAidmWkqvuTqofwL0mvw+ZDB1MQwUT9bt6GH8dd6UqfJ5U98PM
TRxjk2wDDGrDByXBcYokjh6CuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlZAkiO
iSXiuV1KNGXY7YSZKoZuMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF
MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3Vn
bHBRRm43STk3NFVvMG1TWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk8Z2OYrwrpZs0gy33SYud3tKLQ3gFv8kBZzxmKq9camAl79YRAuBVXn2Q3+Q
u10bxhU6O/wMAIltMrKgcV+E/DDc3IUeMeoIUzZOOxYBPYESSRSqsbUb8BjHo3D+
lmqNA0TRPCuewaaFCZVR21JeDxVnYo6/oY+C7f+prXe6CWENficYoDk29Oocciqk
uHQXpQIn1HIMaC/kWeuFtpnSWfd7xQo1J5N5CeJdn/6DwTdK5qZHvzGpOEvb027+
KzJ2ybpwI7/itPO+E0jJYgBKwRYw6RXqoua4qef/FLXZmt4p9/O0ur/xBXzBcqZ4
zLZJlEM/uElphv2FWVXRrP6GKw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:50 2026 by rpki-client