Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
File:                     QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json)
Hash identifier:          kp16O242w/yg+l8YQjT37GxuXsK98g5DPXYNr4sjhMY=
Subject key identifier:   D2:13:34:50:E1:F7:56:5A:28:E8:92:6C:D6:C0:62:0E:6B:1A:4B:60
Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C
Certificate issuer:       /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
Certificate serial:       0241
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
Manifest number:          023B
Signing time:             Mon 27 Apr 2026 02:24:29 +0000
Manifest this update:     Mon 27 Apr 2026 02:24:29 +0000
Manifest next update:     Mon 04 May 2026 02:24:29 +0000
Files and hashes:         1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: T8y9sxPOyWij7885Qn9liSmA/d4ZukksZF5hrqENZ/c=)
                          2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: NkxHKbtoUp0+3tPsUIQtJd1qKCp6YkrV3mW/saca7sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl
                          rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 02:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C
        Validity
            Not Before: Apr 27 02:24:29 2026 GMT
            Not After : May  4 02:24:29 2026 GMT
        Subject: CN=69eec8dd-6a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:66:13:06:ec:8d:5d:a6:76:39:37:b0:1c:
                    04:07:f2:01:13:ea:fe:75:08:ed:f7:f7:c6:1b:f3:
                    0e:88:5d:0b:ee:2b:da:63:75:6d:40:5d:f1:46:01:
                    c4:c0:3b:26:36:3b:25:6c:78:45:61:8f:40:1b:69:
                    31:17:29:7e:b8:c1:6d:a2:88:05:39:d8:9b:90:ed:
                    b7:b3:48:6a:8e:99:a8:02:68:5d:3d:91:65:69:32:
                    8e:67:4f:d7:9c:d2:de:bd:6b:7f:e5:2a:c6:e3:c5:
                    f4:61:e8:3f:a0:70:f3:2e:8f:81:bc:ab:84:a4:5e:
                    62:53:54:f0:de:aa:5c:83:1f:28:29:31:b5:de:22:
                    0d:3a:72:05:61:ad:fa:18:c2:09:98:c5:c3:84:83:
                    37:76:b0:73:65:2a:cc:60:0b:be:32:87:c7:ec:e5:
                    c4:de:cb:0c:44:8b:65:e6:2e:11:8d:af:f0:66:4f:
                    ad:d6:05:09:6d:99:43:aa:22:83:87:a5:a7:ce:45:
                    6a:fa:cc:14:7c:ae:f8:16:42:1b:b3:cd:c3:d5:52:
                    f8:6c:85:8e:45:b3:30:06:d1:d1:97:13:9a:76:db:
                    18:35:cb:72:8d:07:02:05:81:dc:4c:10:b7:76:d6:
                    29:a8:1e:79:13:91:be:37:6e:f6:06:7a:e8:6b:0f:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:13:34:50:E1:F7:56:5A:28:E8:92:6C:D6:C0:62:0E:6B:1A:4B:60
            X509v3 Authority Key Identifier:
                keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:34:43:75:e6:a2:26:0a:20:c5:e1:13:5e:14:cf:65:af:18:
         c0:99:f7:ad:ed:09:2f:c3:8c:f2:f3:22:55:22:75:67:d0:01:
         29:50:f1:85:57:ef:99:9b:1f:a5:9f:b9:df:b4:d7:ac:d6:48:
         f3:9b:42:3f:2d:e0:eb:e8:e5:d7:f9:b1:f6:19:5d:ff:95:b3:
         60:f8:04:5f:a3:98:4a:9a:c0:59:52:c9:d2:30:64:9a:98:80:
         85:b8:87:2b:72:c5:88:4d:35:28:06:e7:3f:6e:5f:fe:ea:f7:
         b6:55:29:17:9d:14:a1:54:97:6f:3e:e9:9d:81:34:5b:b1:93:
         4e:12:e6:25:77:c2:b5:c8:33:36:73:e8:bb:0a:31:0f:9e:35:
         90:b5:fc:f4:20:7c:ff:ad:4a:f0:fd:11:6e:82:a2:3c:e1:b2:
         28:61:fd:e0:0e:45:cc:58:8f:c9:cb:3e:22:62:4a:14:11:b9:
         ad:8a:7b:d9:1d:cb:17:a9:4d:8b:0e:0f:cc:29:f6:c9:83:32:
         8a:77:be:33:94:17:1c:53:0f:bc:24:44:59:e3:2d:db:1e:35:
         8e:32:0b:45:14:2f:81:84:0a:9e:d9:3d:58:33:d2:ba:41:33:
         05:19:57:86:79:92:04:ed:2f:ac:23:05:78:6e:ec:ad:e2:d3:
         75:3a:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:28:34 2026 by rpki-client