Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          Ii4L5PLL+Y4RORcCK5R9UZVUJMXbK2wVArFK8A5ind4=
Subject key identifier:   3B:1F:42:50:AC:AB:C7:3E:F2:6D:B6:4E:64:E7:DC:25:BF:4B:0F:9D
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A6A
Signing time:             Tue 12 May 2026 19:41:01 +0000
Manifest this update:     Tue 12 May 2026 19:41:01 +0000
Manifest next update:     Tue 19 May 2026 19:41:01 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: Hcqp8krnnxkZooRMeGwFgU+SUp3Ctj5oTPLDwwXHh5o=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: FQzUC/UDtRjOVMq3qcWROmK5O0Zj21UozX3EEGahaO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2676 (0xa74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: May 12 19:41:01 2026 GMT
            Not After : May 19 19:41:01 2026 GMT
        Subject: CN=6a03824d-3cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ee:75:4a:3e:62:a6:91:7e:d0:02:d0:83:f2:
                    90:a7:3b:64:22:09:ae:09:e3:de:af:68:95:9f:ff:
                    72:aa:6b:b9:e4:17:cd:6c:f0:ce:14:79:50:d6:87:
                    9b:a0:3f:74:b1:39:28:d1:c5:e8:d1:e1:88:d9:c8:
                    a4:9b:34:53:6e:2d:62:da:f0:d8:d8:b4:67:81:e4:
                    aa:fd:54:1f:fb:a3:b4:26:88:a9:43:39:e2:6e:24:
                    bc:c5:d1:34:f1:83:a8:d7:01:3a:01:d8:d4:6f:1a:
                    1c:54:45:05:48:f7:4a:fb:e1:0c:3f:47:2b:b3:a6:
                    79:11:5e:cc:67:e5:9f:57:b6:b5:62:45:f4:9d:21:
                    7b:87:55:48:33:10:8e:df:0b:cd:6c:75:e8:a6:db:
                    52:61:d8:83:e5:67:c4:bb:ed:ae:06:56:e1:ee:9a:
                    3c:82:f2:f0:2b:dd:51:32:a0:26:e5:4d:93:ec:d3:
                    41:78:94:44:e8:5f:00:f7:49:f8:0f:85:c6:24:4c:
                    6c:b0:05:8b:72:c3:9b:6f:74:97:fc:14:f9:32:4b:
                    a1:b2:62:ad:6d:9c:43:d6:22:02:32:28:90:8b:a7:
                    df:60:50:88:50:0f:86:f2:40:84:7d:3b:dd:24:7a:
                    67:e6:b0:fb:23:33:2c:75:43:5d:c1:91:e7:c4:d0:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1F:42:50:AC:AB:C7:3E:F2:6D:B6:4E:64:E7:DC:25:BF:4B:0F:9D
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:30:f9:27:e4:55:5d:74:1b:aa:38:9c:0a:25:1e:c1:d6:72:
         f4:f8:c7:d4:f4:f7:ec:c2:d3:fb:26:23:b3:2c:5c:57:e2:28:
         b0:7c:7c:10:46:3e:5c:df:25:ff:4a:5c:64:87:9b:f0:d4:03:
         bd:17:91:33:16:92:dd:4a:80:1c:3f:0a:db:c8:df:12:e8:06:
         f2:ce:3f:be:2a:8e:f4:9c:e3:21:e6:67:e1:88:fd:fe:ad:a0:
         6e:9f:17:c8:d5:49:b0:30:6e:52:d6:ec:f9:f8:1e:df:25:e2:
         6c:23:80:33:c6:70:72:f5:81:6b:c6:bd:03:02:31:cb:75:0c:
         53:51:e1:0c:e4:7e:aa:27:72:52:46:9d:dd:26:20:3d:a8:f7:
         1d:3a:ca:d0:5f:0c:88:f5:20:c6:68:c2:08:ed:d6:63:e0:90:
         34:f2:6b:d9:0a:4a:02:43:38:42:71:4a:cf:5b:dc:ad:d9:49:
         49:d2:98:ed:3c:cd:4c:e0:8a:ca:c1:b3:51:36:e7:90:45:f9:
         65:2f:2f:24:45:69:34:2b:41:f6:83:d7:07:25:8b:3e:7c:6a:
         ca:38:7b:6a:4c:58:cf:01:9f:04:b1:df:fc:a5:19:4d:87:6a:
         f8:a8:72:d4:c0:cc:51:7d:4c:a0:7d:5a:38:ce:a1:85:ab:45:
         00:89:0f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:09 2026 by rpki-client