Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
File:                     QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json)
Hash identifier:          SM0bAaDHWTdS4V41Oy2fraeukqDWd3ItqKHqHcdGFYw=
Subject key identifier:   8F:05:B5:B3:1A:1F:E4:D0:17:41:4F:CE:F1:20:EA:2D:1A:9C:E5:50
Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB
Certificate issuer:       /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
Certificate serial:       0A5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
Manifest number:          0A51
Signing time:             Tue 24 Mar 2026 19:27:59 +0000
Manifest this update:     Tue 24 Mar 2026 19:27:58 +0000
Manifest next update:     Tue 31 Mar 2026 19:27:58 +0000
Files and hashes:         1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: U4XDUEfpOheYgO3fVBhzpz9gC8/t7n27i7D1HoqQnTw=)
                          2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: FQzUC/UDtRjOVMq3qcWROmK5O0Zj21UozX3EEGahaO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl
                          rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB
        Validity
            Not Before: Mar 24 19:27:58 2026 GMT
            Not After : Mar 31 19:27:58 2026 GMT
        Subject: CN=69c2e5bf-bbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4f:9b:a0:cd:4b:c6:39:1e:a7:f0:c4:cc:48:
                    89:ed:b3:7c:42:31:a5:c1:1a:10:52:bb:7a:de:2a:
                    9c:7d:2c:f3:21:37:de:3b:f1:e4:6a:9d:43:8c:a2:
                    5c:01:cb:b8:9d:95:2f:ff:d8:bd:e9:8c:1e:7a:f5:
                    47:ac:f2:ba:81:57:dc:d9:5f:ca:8d:48:d6:58:ba:
                    fe:73:94:da:eb:ee:e5:38:6c:88:d9:20:5d:84:96:
                    e5:26:ac:aa:10:35:62:6b:f0:52:5e:27:a4:38:45:
                    62:e8:79:b7:dc:4d:c9:50:bf:8f:de:41:b4:af:26:
                    6d:d2:7d:cf:d5:a9:48:6e:f9:c9:29:c1:4c:59:a9:
                    64:e7:0a:2b:cb:ac:a5:69:48:c8:59:05:e8:7b:19:
                    23:16:82:69:8f:16:b1:34:64:6f:8e:43:b0:9c:4e:
                    a7:33:d1:58:a3:db:e5:e3:1e:13:65:a3:89:cf:94:
                    c1:50:6e:ef:61:15:06:c9:8a:ac:f1:8a:fb:6b:0d:
                    f1:c5:12:a6:9a:22:01:0b:7c:32:a8:57:ee:61:8f:
                    f4:84:f3:c2:39:b0:f1:53:cd:83:41:de:72:05:c6:
                    6b:9f:de:fa:7b:85:ad:8e:b8:d3:24:15:fa:06:f9:
                    14:0e:bb:8f:e4:1b:98:5e:96:8e:34:87:a6:56:bc:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:B5:B3:1A:1F:E4:D0:17:41:4F:CE:F1:20:EA:2D:1A:9C:E5:50
            X509v3 Authority Key Identifier:
                keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:50:a1:84:83:3a:95:a7:fd:8f:e8:24:8f:82:7d:02:78:86:
         43:8a:43:db:41:4d:82:f1:21:81:8e:28:5b:26:e1:94:57:59:
         c1:93:17:1b:33:f0:ec:8a:98:ef:eb:a3:e1:99:1b:df:36:f4:
         34:2c:35:03:19:9f:4c:30:21:7e:19:a8:a1:44:fc:44:ac:9b:
         bd:71:89:a3:12:84:bd:74:84:7d:a1:9b:1f:a3:ab:55:75:3e:
         77:1b:fa:38:4d:d6:54:7c:55:47:e4:6e:95:07:a8:5b:45:1a:
         56:cc:88:50:9d:bc:80:ca:f5:8a:bd:71:6c:ca:d2:d1:93:ae:
         ef:8e:7f:2d:fd:41:d5:f6:48:7a:9b:91:a7:83:a4:a6:ac:5f:
         dc:84:87:ac:4f:23:ae:17:42:5a:6a:70:89:de:b3:c1:e3:a5:
         c9:bb:0e:5c:4b:06:c5:18:74:53:d3:87:6f:4e:51:15:89:d2:
         3d:91:c8:a9:36:2d:56:61:b3:16:ba:96:81:d9:cc:cc:09:5c:
         33:4b:e5:be:05:8e:d7:5e:11:bc:30:84:a3:b1:e9:d5:eb:54:
         fd:9b:82:83:9d:62:d8:b0:c9:cb:8a:dd:8e:b4:02:25:cd:34:
         62:5c:8d:f3:ed:b3:67:11:a2:fa:b7:ad:3e:b4:1d:67:08:44:
         dd:6a:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:26 2026 by rpki-client