Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          lRG9noxcz0GmP408Fnp+aYSD/5DVSOFlDP/D5ubuULA=
Subject key identifier:   DF:54:D2:6A:CC:B6:21:F3:5F:A5:1F:AB:E4:E5:8B:99:93:8A:90:F9
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       3625
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          359A
Signing time:             Sat 04 Apr 2026 14:18:48 +0000
Manifest this update:     Sat 04 Apr 2026 14:18:47 +0000
Manifest next update:     Sat 11 Apr 2026 14:18:47 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: MYAPNdWP34YCrqqgrcZrMvt+9sdxuMQG5c4IfnNAnN0=)
                          2: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=)
                          3: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: x0LYtT3APJOM1BU3phk/GRsyUAfN6VfKZJ0ccXlvtdg=)
                          4: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13861 (0x3625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Apr  4 14:18:47 2026 GMT
            Not After : Apr 11 14:18:47 2026 GMT
        Subject: CN=69d11dc7-df69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:b8:88:9a:e1:41:c0:57:30:5a:9d:d1:61:
                    f3:d2:32:01:73:f9:a2:e8:b1:6e:01:15:2e:19:28:
                    9a:1c:16:38:78:a2:99:31:5a:bc:ff:41:fa:95:42:
                    c1:cc:d3:b1:15:30:47:55:16:ad:b7:cb:09:40:a5:
                    d6:d5:88:f3:c7:26:db:f1:b5:ad:ef:7a:2e:42:9e:
                    7b:3d:1f:2c:47:40:fc:83:32:7d:7e:9d:6b:24:92:
                    67:11:ea:81:3e:b0:63:e1:17:07:ab:b4:23:e9:a8:
                    27:92:1a:7a:27:dc:32:d9:2b:04:af:18:76:3e:fb:
                    60:f0:fa:f1:89:db:06:f5:ff:2e:04:78:67:d8:39:
                    9e:96:2e:bc:2c:15:af:f1:4b:29:21:da:02:7c:99:
                    6f:0f:43:36:83:c2:61:fb:c3:9e:01:f3:d9:10:56:
                    ad:8d:8c:61:db:7f:e3:fa:d5:74:fd:33:94:e5:68:
                    f0:25:5c:ae:50:eb:bf:f9:b8:25:5a:e9:0c:d6:42:
                    50:10:99:98:51:32:9a:44:8b:d4:4a:e7:6d:9c:31:
                    f1:a5:14:48:27:9a:2e:8f:46:51:65:7a:61:35:b2:
                    95:af:63:8d:3d:c9:f0:84:2f:74:57:1f:45:4d:c1:
                    2d:a2:df:c0:10:7c:50:ab:e5:e2:50:4a:b8:16:76:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:54:D2:6A:CC:B6:21:F3:5F:A5:1F:AB:E4:E5:8B:99:93:8A:90:F9
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:0f:7a:30:bd:94:ea:ce:91:e3:65:50:b2:71:97:20:4a:54:
         71:d2:1d:60:eb:6a:cc:7d:14:fb:72:ae:3f:dc:9b:33:98:b5:
         8a:4c:11:22:3f:ad:1f:b3:d7:08:8c:41:28:7b:b4:2d:f1:98:
         fa:56:65:b1:cd:cb:c2:55:dd:49:62:d5:2e:fb:48:9e:2b:cd:
         5e:c9:5c:0d:ec:e7:3f:27:0c:9c:56:31:47:f7:d6:10:f0:ff:
         41:d5:4a:18:55:e5:7a:8b:4c:94:4c:56:22:11:71:19:a4:55:
         cd:a9:cc:3b:c7:20:c9:4a:58:da:a3:44:40:b5:0c:e7:67:e4:
         be:5e:00:ab:a8:ba:20:27:58:4d:c5:a7:3c:30:43:14:bb:22:
         d4:ca:8d:06:ac:f2:47:3c:b2:d9:79:4e:0f:47:05:41:ee:04:
         34:72:a4:e6:40:d7:db:4a:f1:12:5d:c4:ad:32:46:d5:bf:f9:
         27:8a:0a:cb:78:25:81:89:bc:9b:09:91:5a:fb:86:cb:b1:40:
         47:44:4a:68:e1:90:0d:c7:05:26:ba:3d:3d:94:eb:42:07:5e:
         f2:4c:63:cd:b2:fe:f0:b5:cc:08:77:89:f9:f1:a0:5a:b8:e6:
         a9:ad:1e:70:85:6f:20:89:27:8b:51:8d:56:c2:4e:bd:c9:73:
         35:68:27:f0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD
QjhDM0I1MDkwHhcNMjYwNDA0MTQxODQ3WhcNMjYwNDExMTQxODQ3WjAYMRYwFAYD
VQQDEw02OWQxMWRjNy1kZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoP64iJrhQcBXMFqd0WHz0jIBc/mi6LFuARUuGSiaHBY4eKKZMVq8/0H6lULB
zNOxFTBHVRatt8sJQKXW1Yjzxybb8bWt73ouQp57PR8sR0D8gzJ9fp1rJJJnEeqB
PrBj4RcHq7Qj6agnkhp6J9wy2SsErxh2Pvtg8PrxidsG9f8uBHhn2Dmeli68LBWv
8UspIdoCfJlvD0M2g8Jh+8OeAfPZEFatjYxh23/j+tV0/TOU5WjwJVyuUOu/+bgl
WukM1kJQEJmYUTKaRIvUSudtnDHxpRRIJ5ouj0ZRZXphNbKVr2ONPcnwhC90Vx9F
TcEtot/AEHxQq+XiUEq4FnYNCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9U0mrM
tiHzX6Ufq+Tli5mTipD5MB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE
NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1
TTNfVDE2bG1iRmpMakR0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApg96ML2U6s6R42VQsnGXIEpUcdIdYOtqzH0U+3KuP9ybM5i1ikwRIj+tH7PX
CIxBKHu0LfGY+lZlsc3LwlXdSWLVLvtInivNXslcDeznPycMnFYxR/fWEPD/QdVK
GFXleotMlExWIhFxGaRVzanMO8cgyUpY2qNEQLUM52fkvl4Aq6i6ICdYTcWnPDBD
FLsi1MqNBqzyRzyy2XlOD0cFQe4ENHKk5kDX20rxEl3ErTJG1b/5J4oKy3glgYm8
mwmRWvuGy7FAR0RKaOGQDccFJro9PZTrQgde8kxjzbL+8LXMCHeJ+fGgWrjmqa0e
cIVvIIkni1GNVsJOvclzNWgn8A==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:52 2026 by rpki-client