Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File:                     QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier:          6lyQkn63yEVe4mz4rhdVbOEanGH/ENxKM51rMBxdSh8=
Subject key identifier:   62:23:BB:84:6C:9D:24:87:C4:54:E2:C5:C7:C2:D3:B1:19:6F:23:AB
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer:       /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number:          0258
Signing time:             Sun 05 Apr 2026 01:49:58 +0000
Manifest this update:     Sun 05 Apr 2026 01:49:57 +0000
Manifest next update:     Sun 12 Apr 2026 01:49:57 +0000
Files and hashes:         1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: pTu0ix64qo5F6/bj/SpWWAUThijRvUE68ea8XRTfmLk=)
                          2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: pfvrI1kQlT/P1ZWjhgTdXeNg4qENFgB1Nnr2MrXGD4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
                          rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
        Validity
            Not Before: Apr  5 01:49:57 2026 GMT
            Not After : Apr 12 01:49:57 2026 GMT
        Subject: CN=69d1bfc6-17a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:70:2a:a4:6b:ca:0e:57:e9:66:c8:c5:b8:
                    bf:1f:f9:e2:de:3f:65:07:40:4b:1c:9a:54:bc:73:
                    0c:8c:32:66:93:1f:3f:5b:96:c2:7a:e9:99:e2:66:
                    c6:fb:db:81:0d:c2:f3:df:8a:c8:a5:90:6f:0c:e6:
                    eb:40:b8:56:09:9f:e1:6f:3c:1a:0a:e7:6d:0b:72:
                    96:bb:e0:e3:b2:47:06:04:cb:75:1e:5d:8c:ad:21:
                    f8:5e:7c:30:35:94:d0:7c:e4:06:50:76:d5:00:f5:
                    6c:53:8e:d4:48:52:9a:8a:e5:55:21:5d:59:5c:e7:
                    17:10:9a:c0:fc:c5:a9:9a:91:bf:05:68:24:ee:b7:
                    0d:6f:78:a8:13:e9:3f:26:97:91:02:d5:8a:6f:53:
                    be:cd:a6:c4:a7:ff:04:3c:4f:2e:14:68:fd:f2:18:
                    ca:d2:6d:a0:94:88:d5:18:ed:77:f8:a4:3c:77:0a:
                    30:d3:06:2b:c1:d2:ce:34:fa:4b:d6:06:38:57:ee:
                    03:02:18:11:20:c8:4a:6d:46:0c:d4:bc:14:f1:d1:
                    bb:81:74:18:df:f8:26:94:ee:e5:bf:d8:68:18:31:
                    67:b7:bd:1e:fa:54:c9:d0:6e:84:f3:53:22:89:4d:
                    cf:e6:97:12:5f:99:36:22:5c:40:99:57:ae:5d:80:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:23:BB:84:6C:9D:24:87:C4:54:E2:C5:C7:C2:D3:B1:19:6F:23:AB
            X509v3 Authority Key Identifier:
                keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:57:ba:01:00:97:11:b8:65:8f:ce:01:ca:f4:47:af:e6:19:
         66:83:18:4a:7b:3c:ae:64:71:53:53:79:2c:96:d9:53:48:ae:
         c5:54:2d:bf:a0:5e:2b:4b:f9:18:07:7c:a4:20:0f:2c:25:b3:
         a3:82:41:02:19:be:de:36:98:d9:3b:a2:90:cb:52:b2:3c:e3:
         74:15:a8:ed:94:a2:c7:60:b9:62:f2:3a:66:95:91:eb:28:d4:
         03:69:50:ef:f7:87:22:15:e8:b0:ab:ed:3a:a6:c2:eb:d1:b1:
         b8:61:4a:da:02:33:60:1b:ad:40:ce:24:33:d8:e3:e9:80:66:
         90:c7:df:22:87:9a:49:33:30:cf:b2:df:ee:49:cd:5d:7c:93:
         af:9e:17:70:e1:ee:89:ac:cf:52:3f:0f:18:2a:b7:4d:53:d5:
         50:1a:f2:a0:20:dd:8e:62:65:6a:0f:3c:fc:79:83:47:1d:25:
         71:c4:8c:5a:fd:bb:3e:ca:fd:5d:f3:d8:87:7b:24:b2:a7:f0:
         c2:b0:a2:b3:0a:71:94:61:7a:61:ac:f8:bf:7f:d1:62:ee:c8:
         d8:11:ec:03:4e:37:30:01:4e:cb:5d:68:53:53:20:ea:60:6a:
         08:94:c5:ca:d9:83:0f:a5:13:37:ec:e4:67:c2:6b:5e:46:ab:
         90:38:04:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:05 2026 by rpki-client