Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
File:                     QRBhvlydJMUpvH1WmJtK0sE40SM.mft (raw, json)
Hash identifier:          c1M08hQdbw4n9Q6KvLHHRtjxVYsuE6sz8k47uQ18Qm4=
Subject key identifier:   67:73:23:CD:61:C0:C8:53:E3:09:1D:87:69:D2:2B:47:64:C8:1F:D9
Authority key identifier: 41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23
Certificate issuer:       /CN=A9161A95/serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
Manifest number:          F1
Signing time:             Wed 19 Aug 2026 07:01:18 +0000
Manifest this update:     Wed 19 Aug 2026 07:01:17 +0000
Manifest next update:     Wed 26 Aug 2026 07:01:17 +0000
Files and hashes:         1: QRBhvlydJMUpvH1WmJtK0sE40SM.crl (hash: QgD26ao5P6aMppI1Mc4KTzQtNB/aMQ4w167lYmq8qI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl
                          rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A95, serialNumber=411061BE5C9D24C529BC7D56989B4AD2C138D123
        Validity
            Not Before: Aug 19 07:01:17 2026 GMT
            Not After : Aug 26 07:01:17 2026 GMT
        Subject: CN=6a8554bd-b35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:e1:b7:6a:a8:d2:93:63:a9:7d:df:3d:12:
                    d4:cb:99:46:a6:05:be:3d:11:20:d1:cf:a1:79:f2:
                    b0:c3:3b:fa:e5:05:38:58:61:65:37:5e:41:fa:08:
                    a1:26:8f:db:66:71:5d:b3:e2:76:a7:12:d3:ec:0f:
                    f7:4f:a9:3e:b1:ac:f8:8c:66:07:b4:36:c3:fa:df:
                    1e:59:8e:e7:f9:bc:c7:cf:41:a8:be:a4:27:bf:02:
                    68:0c:9a:10:ab:71:3a:e3:c0:39:7b:11:c6:4a:97:
                    ec:51:c0:db:a5:96:c4:f7:dc:c8:1e:43:df:b8:97:
                    05:43:13:a4:e8:86:f0:bd:3f:92:af:5f:86:4d:4b:
                    34:39:29:7d:3e:15:7b:7e:bf:ff:d7:50:a2:a3:2b:
                    50:dd:a2:50:dc:c3:c9:d0:e9:51:c4:bd:bc:f9:7e:
                    c8:f6:a5:be:17:44:9b:2f:29:ca:54:23:63:29:c1:
                    41:60:b8:49:8b:d9:a8:ee:54:c9:e9:ce:61:ac:23:
                    15:79:17:44:49:52:46:4e:34:5b:b1:d9:6e:7c:c0:
                    d3:b4:32:09:f5:a3:0a:1d:44:57:38:f5:d8:f9:37:
                    8f:ed:e6:12:1e:0e:cd:74:be:6d:5a:35:37:cd:9a:
                    f5:d9:54:22:f6:bf:b8:96:1e:73:24:a9:11:3c:9c:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:73:23:CD:61:C0:C8:53:E3:09:1D:87:69:D2:2B:47:64:C8:1F:D9
            X509v3 Authority Key Identifier:
                keyid:41:10:61:BE:5C:9D:24:C5:29:BC:7D:56:98:9B:4A:D2:C1:38:D1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRBhvlydJMUpvH1WmJtK0sE40SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/947618862BD911F0AB443122C4F9AE02/QRBhvlydJMUpvH1WmJtK0sE40SM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:69:ad:55:28:a0:26:a1:98:be:13:ea:55:59:bb:c6:9f:41:
         7b:a5:9b:0f:9b:7c:6e:c4:d7:c6:d6:14:1a:9f:a2:38:98:4d:
         8c:c9:1a:35:65:4d:86:1e:f6:4e:dd:b5:67:29:13:4d:38:72:
         6d:9b:8d:75:e3:d9:f7:b9:cc:1a:4b:5a:72:10:56:39:6d:76:
         a7:a8:46:cf:39:13:3d:46:18:be:8b:5e:73:ef:b5:78:82:9b:
         58:46:79:bf:49:c2:d3:d8:e7:f1:96:18:f0:0e:8c:c2:1c:0e:
         e3:53:d8:49:51:aa:d6:47:0a:53:a9:1d:fa:e7:4b:c9:62:eb:
         5d:fa:73:ee:97:75:a3:89:66:c4:9d:e9:ee:13:22:dd:e7:e6:
         bc:62:b4:dd:e7:22:0a:59:d0:79:3a:73:dd:da:bf:a6:30:b1:
         e3:2b:65:e1:73:ef:ba:8e:cb:46:21:54:7c:85:ea:cb:64:ba:
         c8:ae:6a:c9:af:5b:cd:47:1a:ab:89:85:64:f6:5f:f7:1b:ca:
         8d:ff:e5:f3:57:a9:1c:8b:ab:bf:3b:f6:5c:50:59:42:13:82:
         ba:58:54:0b:d5:dc:99:9d:3b:b9:1e:17:9a:9f:e8:e4:2e:7d:
         28:14:17:9a:87:83:55:dc:2b:ce:eb:ea:6c:b8:4b:1b:7a:b8:
         5b:57:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:11 2026 by rpki-client