Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
File:                     QcZcAPCmsH08D2sSkFZPv4OC2nM.mft (raw, json)
Hash identifier:          bdE+7hq4HVnHkeQCasTyZTvjk5AV9rKW1tyqyLOLBf4=
Subject key identifier:   F2:F5:E8:FB:8C:BB:D5:C5:6F:FA:6D:59:1B:1B:8B:40:C1:B8:05:5C
Authority key identifier: 41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73
Certificate issuer:       /CN=A91ECD98/serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
Certificate serial:       0B03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
Manifest number:          0AF9
Signing time:             Thu 16 Apr 2026 19:17:01 +0000
Manifest this update:     Thu 16 Apr 2026 19:17:01 +0000
Manifest next update:     Thu 23 Apr 2026 19:17:01 +0000
Files and hashes:         1: QcZcAPCmsH08D2sSkFZPv4OC2nM.crl (hash: CJ2NFwqXqLTqcdu+UVBNWmSKDsSmByJYT4xjTHa9UJ4=)
                          2: F760C48ACE0111EB980FBD53C4F9AE02.roa (hash: r0lCb8PmrHuRVFml8CXtx2AwxypyCR8m21BT5Lcfkrs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl
                          rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2819 (0xb03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECD98, serialNumber=41C65C00F0A6B07D3C0F6B1290564FBF8382DA73
        Validity
            Not Before: Apr 16 19:17:01 2026 GMT
            Not After : Apr 23 19:17:01 2026 GMT
        Subject: CN=69e135ad-b501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:dd:c8:5c:21:7b:52:a1:17:8c:70:2e:19:
                    03:86:c3:7b:88:09:8d:62:78:b0:53:98:e0:4b:66:
                    9f:40:95:fa:9b:d5:35:86:ba:20:5e:22:a8:62:e3:
                    d3:12:87:ca:f3:9d:66:c0:e8:6e:f6:00:9a:4f:a1:
                    5a:2a:9b:bf:d9:d0:54:4f:87:9c:f4:5e:cf:85:86:
                    ca:74:a9:9e:9e:42:42:7f:db:cb:ee:df:53:fe:40:
                    8a:f0:18:d0:7b:26:dd:c7:ad:ae:99:fa:34:10:30:
                    45:22:18:ce:cc:0a:82:16:d9:dd:d6:32:28:17:c9:
                    65:31:6d:43:5b:b3:57:07:42:86:7f:f0:ba:37:ce:
                    d8:7f:0c:f5:9d:1c:5d:7a:5a:71:0d:83:a5:25:e6:
                    b9:7d:bc:48:8d:98:08:8f:7f:6c:b7:01:c5:a5:36:
                    f6:4f:d1:69:3b:98:3f:25:18:13:b4:66:6b:cf:03:
                    a2:af:11:d4:c6:e8:a7:b9:65:76:ba:2c:40:61:aa:
                    b6:6c:62:ae:49:59:6a:d9:a2:c9:0d:dc:c6:db:6a:
                    1d:44:30:25:ed:16:52:5a:0d:9a:bf:f4:06:6d:ac:
                    83:a1:37:87:9e:4d:9b:3f:7f:f4:5c:1e:fd:26:a0:
                    a5:a0:e7:1d:54:41:11:db:37:16:68:63:93:4c:3f:
                    c0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F5:E8:FB:8C:BB:D5:C5:6F:FA:6D:59:1B:1B:8B:40:C1:B8:05:5C
            X509v3 Authority Key Identifier:
                keyid:41:C6:5C:00:F0:A6:B0:7D:3C:0F:6B:12:90:56:4F:BF:83:82:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QcZcAPCmsH08D2sSkFZPv4OC2nM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECD98/7802048A66A411EA8FCB2B6FC4F9AE02/QcZcAPCmsH08D2sSkFZPv4OC2nM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a7:f5:f2:0f:d7:cf:de:34:d8:5e:a1:3a:e1:d4:2c:2e:23:
         1e:7e:19:1f:26:a0:d0:49:83:65:58:b5:25:4b:06:af:99:ad:
         62:d6:dc:35:f1:b6:32:54:4b:06:af:c1:ef:3a:70:0b:da:4b:
         c7:7e:04:99:97:ec:fa:1f:12:bc:cb:75:bd:77:56:48:db:7b:
         2b:3c:20:06:32:85:ee:2a:67:03:be:78:53:c7:19:35:e9:5e:
         8e:51:0d:02:f2:ef:88:00:41:0e:ca:21:99:86:3a:e0:54:36:
         62:aa:3e:68:fa:1f:28:ff:49:97:6e:5e:a7:72:02:48:55:4e:
         85:05:f0:35:14:b7:e3:56:52:bc:54:62:11:33:90:e9:40:8e:
         b5:bb:da:03:29:b6:b2:d3:34:ed:8e:95:e6:3c:dc:bb:4c:66:
         b9:52:16:80:0a:29:5f:03:53:70:a7:8f:3d:a4:86:4b:e4:ce:
         a8:4d:2b:73:c4:bb:d0:66:53:b5:36:98:93:c7:08:9d:10:32:
         2f:46:25:11:a9:dd:2c:94:a2:c5:fe:69:d6:67:9e:93:18:16:
         e7:0d:91:ae:02:69:9c:8f:3f:30:be:c7:fb:6d:e0:8c:2c:ea:
         0e:ca:76:50:33:f3:12:20:48:b6:d2:1f:30:a6:22:90:ae:cd:
         f1:d0:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:07 2026 by rpki-client