Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File:                     QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier:          K6cfqx1TyU8cH4TfpUX2X2lx6PxfxYgaRYsGtM3k7BA=
Subject key identifier:   E1:B4:AA:73:7A:9A:10:D9:00:55:64:7A:7E:02:19:55:58:1E:49:DC
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       039A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number:          0393
Signing time:             Sun 05 Apr 2026 00:32:58 +0000
Manifest this update:     Sun 05 Apr 2026 00:32:58 +0000
Manifest next update:     Sun 12 Apr 2026 00:32:58 +0000
Files and hashes:         1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: FXFiKD3UnT4T0HKTjLTedvkkUxFm3h9n4tlhKehAFHI=)
                          2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: 9lm6dFk3tQBYwYD/Z0ra4otIsDincdAqae6fuyCeHUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Apr  5 00:32:58 2026 GMT
            Not After : Apr 12 00:32:58 2026 GMT
        Subject: CN=69d1adba-7450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:02:85:fe:d0:85:74:cb:3d:93:44:a6:ec:
                    ce:2e:cd:30:b9:b1:68:10:eb:7d:10:10:b4:7a:11:
                    89:df:0f:d9:9a:51:68:63:72:81:e2:37:1d:81:86:
                    3c:b0:29:48:43:0e:bf:1f:90:76:a8:76:a5:4b:a0:
                    b8:38:e6:bc:76:ab:d2:99:91:86:e2:34:1c:a3:f6:
                    e2:13:e9:f8:9a:4a:1c:ee:8c:6b:06:1e:f7:85:ef:
                    d8:0c:df:e2:6f:bc:b8:1f:fa:52:9c:34:21:10:de:
                    f6:a7:67:62:d2:56:d7:95:79:de:8f:ca:83:95:02:
                    10:e4:21:e6:7d:76:77:67:71:74:50:de:51:a1:67:
                    1f:91:ea:3b:61:aa:4c:09:c4:f7:f4:0f:3d:c7:22:
                    bc:ca:c4:64:3e:fd:d8:bf:82:34:1a:cc:85:5d:97:
                    bf:6f:6f:6a:a6:c4:87:61:b3:7d:d1:ef:a6:7d:04:
                    44:f4:fa:97:12:68:61:19:66:a6:71:0f:f4:a4:c4:
                    02:cb:7c:96:62:61:ec:45:6d:8c:58:95:91:7f:95:
                    17:63:97:80:84:b0:14:40:1e:9b:34:4a:70:d9:d6:
                    99:64:af:3e:6f:7a:1b:5f:02:0c:89:f8:63:c5:0d:
                    ba:0e:1c:22:0f:67:7c:b3:30:f8:21:fa:ed:f7:5d:
                    7e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B4:AA:73:7A:9A:10:D9:00:55:64:7A:7E:02:19:55:58:1E:49:DC
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:73:cc:52:98:ba:8b:28:41:3b:39:af:84:0b:15:7c:cb:
         86:37:96:9c:e5:d7:8b:d1:ff:ff:19:99:77:2e:30:b2:57:14:
         7f:e4:cc:0f:33:ad:ee:a3:94:ce:68:51:69:a9:de:c0:40:71:
         2e:72:54:ec:13:7b:f2:0f:1e:1d:9f:84:bc:53:65:c6:f8:5d:
         2c:f5:05:a5:dd:12:07:11:4f:a5:c0:de:40:92:a0:80:2f:bf:
         a0:7d:42:c9:8d:60:fe:67:59:34:2d:3b:19:90:96:1a:79:1c:
         31:8a:88:ec:c3:b6:40:2b:e8:d2:b4:6b:c0:ed:a9:aa:ac:f3:
         cc:20:3b:e4:c4:17:6b:1e:ce:12:1d:53:f3:1f:5d:92:6e:77:
         ac:58:ef:33:85:9e:cc:a4:3c:7d:da:c6:34:de:c5:20:4b:9b:
         1e:1e:8a:02:eb:40:40:3f:11:b1:92:ec:20:1c:6f:c3:0e:f5:
         b1:a5:d1:0a:41:e8:2a:60:3b:96:e1:9d:b4:0c:db:54:d3:6e:
         e4:15:82:a4:bf:52:8a:97:9c:05:90:83:32:5b:d7:31:06:29:
         26:e5:9d:26:c2:ca:36:8e:d9:f2:96:07:52:2b:e8:e3:f6:6f:
         ea:ba:1b:12:c7:72:69:6f:e8:99:98:ee:8d:28:83:cd:1d:ed:
         e5:85:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:08 2026 by rpki-client