Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
File:                     QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json)
Hash identifier:          5+a4iukTImL9T91O9PiJfbKNcx+2IQN6gAuRoI4Dz6s=
Subject key identifier:   C0:91:54:9B:F5:4E:16:C5:11:B6:7D:AC:69:2F:86:11:CA:D9:59:B9
Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Certificate issuer:       /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
Manifest number:          072B
Signing time:             Sat 04 Apr 2026 21:35:53 +0000
Manifest this update:     Sat 04 Apr 2026 21:35:52 +0000
Manifest next update:     Sat 11 Apr 2026 21:35:52 +0000
Files and hashes:         1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: IxcHBQLZXg56i7LS6xAWPscOp4jZOlqXx+kYWO4pT7M=)
                          2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: 1Chxn96nNA7oNUELmf6ynN2eqdlPAPSq53GJ8LyaxFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
        Validity
            Not Before: Apr  4 21:35:52 2026 GMT
            Not After : Apr 11 21:35:52 2026 GMT
        Subject: CN=69d18439-cfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:12:1f:3a:36:89:96:bc:e9:10:4d:9e:66:9c:
                    c4:0f:93:00:83:c8:d8:aa:11:94:48:50:2b:e2:51:
                    70:2f:56:f3:d6:b0:f4:22:41:76:9b:4b:8e:be:7d:
                    ff:26:aa:9d:1b:fd:14:2b:8c:d8:d6:90:0e:1f:d5:
                    dc:8e:1d:c7:5d:d9:cc:fc:b3:3d:81:0a:c9:51:8a:
                    4d:72:fd:10:07:fe:e0:f7:ba:00:a5:6b:34:0d:1a:
                    0e:8c:db:01:98:96:15:a2:90:a0:fb:1b:dd:7c:6a:
                    b0:92:c3:43:29:b1:bf:84:c6:da:7f:a7:5e:fd:1e:
                    dd:5c:63:54:db:54:3e:16:10:a3:26:1b:98:76:87:
                    81:80:ef:1b:4e:41:e7:a5:76:b0:72:ce:26:93:b4:
                    84:fd:6a:ef:22:9b:83:b5:3d:76:91:05:51:2d:7d:
                    81:d8:52:45:00:0c:01:ff:5b:df:1f:f1:f5:32:b7:
                    d2:4c:60:c4:77:ee:df:00:ca:11:c5:8c:dd:da:f2:
                    51:38:60:5f:c3:bd:4b:71:fd:4f:68:98:80:94:44:
                    40:39:a7:87:0a:1c:f1:8c:af:a3:06:6f:66:e0:4b:
                    e3:5c:e9:cd:a0:c5:71:99:df:1a:de:f0:ff:5c:eb:
                    97:38:70:79:13:c2:f9:e5:5d:a8:fd:25:4d:ab:d1:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:91:54:9B:F5:4E:16:C5:11:B6:7D:AC:69:2F:86:11:CA:D9:59:B9
            X509v3 Authority Key Identifier:
                keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9c:d4:ef:59:d1:ac:e7:17:01:7d:22:9f:78:cb:9c:2f:1c:
         35:9e:8a:39:ce:1c:9d:84:a2:92:e5:d7:12:98:54:52:9c:12:
         b7:47:4f:fb:f2:86:60:fb:c7:af:da:1f:09:da:e7:dc:86:de:
         fd:b0:ba:e4:0c:1e:28:dd:ea:f9:c4:a0:0b:91:77:7e:b9:5b:
         ec:0a:fb:3e:6e:81:03:88:cd:dd:4e:93:2f:34:ae:5a:38:2d:
         6e:75:d8:2a:f5:48:08:1c:ce:10:91:fd:65:26:06:1f:58:36:
         6e:b8:74:45:5e:82:af:44:d7:83:62:12:2c:a2:01:7e:e5:fb:
         f3:48:69:a4:f4:c8:9c:ba:a2:92:62:8a:2a:b7:53:33:47:5b:
         7b:f4:3e:28:02:a9:58:22:8b:be:7d:e5:81:fa:2d:7b:50:61:
         85:e2:7a:1f:7c:3f:e3:3d:60:ea:4c:7e:01:64:13:90:cb:43:
         e9:47:df:88:70:7e:04:73:b2:d9:d5:28:7f:b9:30:8c:66:51:
         10:74:2d:d9:28:46:95:18:ee:00:d7:bd:81:cf:99:ec:3a:1c:
         51:cb:a8:f6:4b:34:7b:6e:f9:4d:2b:a1:a2:1a:70:c0:7d:ca:
         4e:94:9f:0d:ef:fa:e7:9f:fc:f1:4f:8f:e0:16:e2:c1:fb:62:
         64:b9:4b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:23 2026 by rpki-client