Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
File:                     QhQkhj78b5uyGjIfvVA2YeSoo_0.mft (raw, json)
Hash identifier:          TbnzPwDj0DREluoar5QiyoOmjk9R+4sFtKN/eusdLdE=
Subject key identifier:   E5:9D:67:BE:3E:51:31:95:0F:47:4D:5D:E6:7B:C0:04:B1:01:C9:D2
Authority key identifier: 42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD
Certificate issuer:       /CN=A9114ECC/serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
Certificate serial:       6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
Manifest number:          6C
Signing time:             Mon 21 Sep 2026 07:58:07 +0000
Manifest this update:     Mon 21 Sep 2026 07:58:06 +0000
Manifest next update:     Mon 28 Sep 2026 07:58:06 +0000
Files and hashes:         1: QhQkhj78b5uyGjIfvVA2YeSoo_0.crl (hash: b5IWHTjA6dWaCQ2Jawu8pUVe4NrUA4oFuT7EdQvsF8k=)
                          2: 7E43D97816DD11F18A14954A343D8C67.roa (hash: Sh1P0Dpi0gzhoXiIUXSmjEQ8/VuarxM29H03qaSJnUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl
                          rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114ECC, serialNumber=421424863EFC6F9BB21A321FBD503661E4A8A3FD
        Validity
            Not Before: Sep 21 07:58:06 2026 GMT
            Not After : Sep 28 07:58:06 2026 GMT
        Subject: CN=6ab0e38e-e732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:89:37:e6:05:18:a9:18:5f:64:25:eb:8a:
                    92:4f:ff:0b:91:b6:0b:6b:34:f2:92:a4:aa:09:30:
                    f9:f2:b9:a8:0c:b8:9f:32:6b:85:be:8f:1a:84:36:
                    4e:5d:b7:41:a5:3d:39:d8:15:9f:9a:83:4e:3d:4c:
                    8e:38:64:7c:75:7c:3d:41:1b:6c:a0:d6:c1:98:1d:
                    3b:7c:17:11:74:c2:bb:5e:9e:93:68:24:76:d2:f4:
                    bb:32:b9:98:88:b2:ad:ca:13:ed:e2:cc:4c:2f:00:
                    da:e9:23:b8:35:ef:3d:02:79:56:c0:cf:dd:3b:00:
                    68:65:1b:35:8b:67:9e:b5:fd:4b:bc:5a:4c:f4:23:
                    dc:26:b6:46:93:92:36:95:f3:32:2b:e8:09:eb:82:
                    ca:76:de:0e:cf:16:74:fa:b0:a2:47:cd:08:41:2f:
                    3d:3f:c2:00:31:a4:59:33:8d:48:f8:26:03:ba:2e:
                    33:70:cd:3d:e6:1b:95:03:42:36:63:ea:c6:fb:56:
                    d5:8c:29:96:44:37:bf:8a:8c:c5:df:72:1a:c1:2f:
                    65:94:4e:0b:ac:fc:2f:24:94:3b:0b:71:c2:a1:2d:
                    a6:6d:85:2a:01:1f:b2:f7:3e:1c:cd:3f:fe:9c:9b:
                    7b:a5:3d:fb:11:dc:30:10:87:91:f7:be:1f:e0:db:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9D:67:BE:3E:51:31:95:0F:47:4D:5D:E6:7B:C0:04:B1:01:C9:D2
            X509v3 Authority Key Identifier:
                keyid:42:14:24:86:3E:FC:6F:9B:B2:1A:32:1F:BD:50:36:61:E4:A8:A3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhQkhj78b5uyGjIfvVA2YeSoo_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114ECC/45B89E3C159C11F1B7CF4C72063D8C67/QhQkhj78b5uyGjIfvVA2YeSoo_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:90:42:0e:27:75:96:fe:1c:e3:ab:72:6a:4e:61:04:5c:01:
         cc:5c:e0:42:69:e2:7c:9c:af:60:12:cf:b6:93:23:d7:ef:45:
         dc:43:bf:86:23:c5:ca:79:7c:5d:f5:06:ef:68:c7:62:6c:83:
         ad:db:d1:29:d9:a0:f4:e8:ab:99:2f:36:cf:7b:38:d6:80:b0:
         ec:b0:c8:f6:b9:d4:3c:c6:46:d2:e9:74:68:05:ea:73:f3:3f:
         40:3c:0b:79:9c:6d:91:b9:65:6b:a3:85:52:0e:de:65:22:c4:
         1d:65:d8:69:ad:a8:c3:80:33:6e:99:06:92:4d:d8:9e:1a:70:
         4d:ba:9f:ce:df:d5:c2:ee:43:58:9e:8c:b7:f6:7a:11:75:7e:
         54:80:db:7c:f8:29:08:ec:e0:70:e8:e5:e9:9e:bb:3e:7f:ac:
         03:17:ce:9a:fe:36:fa:ce:c0:81:42:7a:f6:5a:63:9c:06:7d:
         70:10:b5:85:09:bc:95:db:ec:d1:5c:f9:01:4e:aa:fa:41:e5:
         d2:02:4f:a4:a5:1e:f9:a3:be:34:3a:d9:cf:41:51:3f:2d:30:
         23:07:b3:c6:16:ad:bb:c8:a6:dc:dc:f7:c1:96:54:f5:ea:c1:
         64:f3:8d:ed:30:a4:4d:4f:4d:b7:aa:32:0d:41:03:98:91:74:
         f2:fe:20:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:31:53 2026 by rpki-client