Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File:                     quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier:          /pvZYDmTmK33sFn65oyCupFv12TmVFYdShKWO0IImLs=
Subject key identifier:   15:6B:FE:60:AE:C5:2D:25:2F:A9:CA:78:37:41:EB:9D:98:B0:79:AF
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer:       /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial:       010E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number:          0109
Signing time:             Wed 25 Mar 2026 05:17:13 +0000
Manifest this update:     Wed 25 Mar 2026 05:17:13 +0000
Manifest next update:     Wed 01 Apr 2026 05:17:13 +0000
Files and hashes:         1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: XTVCjUKgJFOaJ/90VsmaqMYh+aqQGMlgtj4pwpp9/K8=)
                          2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: OXlWMlN/9eXJBuwyCfwBJ/3whRZMwq6quUWKtVMgPJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
        Validity
            Not Before: Mar 25 05:17:13 2026 GMT
            Not After : Apr  1 05:17:13 2026 GMT
        Subject: CN=69c36fd9-3498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:94:e9:26:98:01:93:57:2a:71:ca:44:85:
                    4e:38:bd:b5:8a:47:62:16:b4:43:b3:1d:ce:e7:8a:
                    d8:fc:ab:4a:42:90:de:4c:90:54:e6:97:f1:94:31:
                    93:9c:c7:da:dc:cf:c1:20:f4:fd:35:85:41:2c:a2:
                    43:87:2c:fb:a7:88:9c:e8:a7:9b:95:60:f3:41:84:
                    59:13:9f:41:bf:fd:24:c3:c3:6e:2f:fc:0f:7b:f7:
                    82:83:81:59:19:67:19:18:07:12:5a:9a:8a:4a:b2:
                    2b:f8:44:99:cd:ec:7e:48:ac:ad:d8:f6:53:25:66:
                    f6:ba:84:af:ce:4a:a9:09:f5:84:b9:d1:7e:16:f7:
                    d7:a8:d0:cb:8f:0a:67:6e:f2:79:2c:4f:d9:eb:b2:
                    e0:54:26:21:52:e8:f4:21:28:47:5d:b7:a5:00:bf:
                    33:71:aa:c2:13:77:34:3a:2f:e8:0c:08:3a:77:b5:
                    96:a2:49:67:d8:c3:be:6e:b4:26:d9:cc:bd:6f:c3:
                    08:8c:85:b5:cb:1a:67:3d:9b:cd:98:29:94:39:48:
                    5e:2b:10:cf:c0:64:01:68:e0:7c:94:1a:4e:02:27:
                    73:d8:d3:f3:a7:30:03:53:91:88:86:8d:45:63:54:
                    dc:fd:e0:15:eb:18:34:26:bb:87:b0:7c:76:6a:73:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6B:FE:60:AE:C5:2D:25:2F:A9:CA:78:37:41:EB:9D:98:B0:79:AF
            X509v3 Authority Key Identifier:
                keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a5:00:f1:f8:a6:06:72:0f:06:70:fc:ad:db:ce:5f:5d:05:
         4f:ea:02:ef:10:a4:0d:c2:11:4d:b8:e6:1e:41:88:71:c0:ce:
         17:f3:55:0a:4f:cf:13:d7:cf:d9:6c:25:e7:7c:7c:01:b2:4e:
         18:4f:13:05:73:7c:4f:21:c7:78:2e:68:8b:a0:8f:ad:6a:d7:
         d6:28:b8:72:1e:84:23:9e:eb:df:a7:20:eb:3c:c9:6d:9d:c5:
         96:60:2e:86:b7:13:e0:13:24:8f:78:bf:b4:00:c1:4b:22:d7:
         ba:21:c5:23:e3:1b:31:9d:a9:e5:c7:e8:42:86:84:b6:b0:af:
         bc:c9:f1:4c:f2:e9:45:02:23:e9:4b:0c:86:9c:b2:a1:46:a6:
         03:30:a3:62:29:03:74:bf:ff:96:b3:c1:bc:6a:29:c6:81:4e:
         4b:95:c2:66:65:57:41:c0:88:4c:8f:c4:31:98:6e:c2:79:9e:
         5c:e2:4d:8e:d1:80:54:e4:38:c7:0f:13:21:db:28:7d:48:a9:
         26:10:b3:36:46:2c:c4:1b:8c:62:65:36:2e:e7:88:f8:0c:31:
         89:3b:1e:ca:83:81:af:6a:e9:56:3e:7a:75:b6:e6:16:be:27:
         57:96:93:bd:84:48:46:19:17:e1:74:ce:a9:b1:09:06:d3:25:
         8e:4e:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:14 2026 by rpki-client