Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
File:                     QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json)
Hash identifier:          yUuRkuUwITDvQMQqIg5Qp59XciCbZH9HU+N4rteKCWQ=
Subject key identifier:   57:7A:E7:E5:34:CB:D1:41:B9:4F:56:AF:06:C2:9F:FA:AA:79:DF:B3
Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7
Certificate issuer:       /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
Certificate serial:       04E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
Manifest number:          04DD
Signing time:             Sat 04 Apr 2026 23:34:27 +0000
Manifest this update:     Sat 04 Apr 2026 23:34:26 +0000
Manifest next update:     Sat 11 Apr 2026 23:34:26 +0000
Files and hashes:         1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: FhZfT/PsZ5RR5hwQvMtvULU0vtZiDsh0PXn6rQmV7xo=)
                          2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: 8WBT2mYpXItDKfO9g6OLEzS6VivEAPbuFf/SLXRWDPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7
        Validity
            Not Before: Apr  4 23:34:26 2026 GMT
            Not After : Apr 11 23:34:26 2026 GMT
        Subject: CN=69d1a002-c4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:50:f1:0f:d8:53:9c:19:d1:7a:eb:37:3b:
                    52:71:5b:4f:68:19:a3:2b:84:fe:f1:27:d2:1c:31:
                    33:ca:ef:6a:9c:fc:56:cf:c3:28:34:f3:70:f9:3d:
                    3f:39:38:d1:b5:d5:af:b9:8c:45:54:53:c6:e2:60:
                    b6:82:8c:ac:88:80:d0:6b:59:05:78:ab:a2:70:37:
                    75:05:1e:2e:3a:4c:50:f4:c1:fa:eb:e6:13:97:21:
                    63:92:24:a4:dd:97:12:32:a6:9f:ca:97:9e:15:65:
                    fc:2a:79:71:8e:4d:68:19:7c:35:21:b3:6f:38:a3:
                    f2:a5:e9:c8:cb:ec:61:c8:e4:74:6e:1f:1f:a0:40:
                    54:58:ef:5f:93:c2:21:4a:ea:e8:e2:fd:e4:2f:69:
                    eb:81:f2:3b:cc:75:8e:ea:17:ec:e3:45:55:3b:53:
                    f1:e1:db:fd:0a:6a:b1:75:e1:e3:e9:fa:07:44:88:
                    37:cf:ae:a1:b5:aa:27:76:59:b2:d2:7a:4b:c0:77:
                    cf:17:41:6c:70:f2:b0:0a:d2:d6:aa:3a:81:07:1a:
                    8f:b9:bb:28:69:d9:fd:7b:40:50:e4:41:9c:54:87:
                    44:33:3b:d9:f5:e8:f9:70:f2:1b:b0:b3:9b:a9:25:
                    d1:cb:21:e3:82:34:3b:a4:83:ca:6f:01:af:f0:cf:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:E7:E5:34:CB:D1:41:B9:4F:56:AF:06:C2:9F:FA:AA:79:DF:B3
            X509v3 Authority Key Identifier:
                keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c3:e0:4b:93:e4:dd:84:eb:71:3e:4d:60:e4:24:82:22:15:
         eb:06:f7:4f:f1:72:0d:c2:a3:09:23:ea:4a:05:b1:8b:bf:46:
         7e:8e:5b:f2:e4:ee:08:0c:87:d8:a1:84:0b:34:88:ec:52:8e:
         25:9d:d6:c3:b0:60:b4:34:20:7e:1f:9b:91:da:cc:29:9f:d5:
         ef:06:a1:f3:bf:ea:fd:bc:e7:a9:fd:e1:23:21:9b:64:df:74:
         e0:77:f3:13:ff:90:cf:7f:d3:48:9a:da:f3:01:b1:03:61:f7:
         de:f0:f0:eb:9f:18:ed:51:68:12:5a:93:ac:64:27:3b:31:0c:
         87:8a:86:66:34:8c:74:22:b7:1c:0b:17:18:5e:69:3c:af:c5:
         36:20:df:bf:dd:c1:a4:3a:bd:ee:d7:ef:b0:8e:f7:52:a2:94:
         2b:0a:b9:c1:e4:c6:b5:84:79:73:52:d8:54:fb:b6:72:ed:0a:
         e6:fd:44:69:69:65:ae:9b:67:63:4a:56:fe:f2:5a:b5:12:22:
         fd:6d:b1:12:1e:0d:f7:88:bc:8e:ed:ee:36:d0:1c:d4:b7:96:
         a9:9c:b4:85:6a:30:2c:e2:bf:98:a1:56:f9:b3:5f:95:15:d9:
         9b:82:61:8f:bc:cb:8a:e8:7d:ca:a8:1c:60:2a:fc:9b:33:e8:
         78:9b:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:52:09 2026 by rpki-client