Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
File:                     QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json)
Hash identifier:          mgsk0HvXUAy+zK5K1st587fdp4ErM4XzFZTUG+lLkJI=
Subject key identifier:   0D:08:E7:41:2F:53:85:0B:2A:7B:3B:BF:E5:5C:DD:93:BF:9C:52:91
Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
Certificate issuer:       /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
Manifest number:          58
Signing time:             Wed 25 Mar 2026 07:18:54 +0000
Manifest this update:     Wed 25 Mar 2026 07:18:54 +0000
Manifest next update:     Wed 01 Apr 2026 07:18:54 +0000
Files and hashes:         1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: OYCOJimXAcIetjdES1EkrzaqsOtnPtj4I93Ow8kCzo4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl
                          rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
        Validity
            Not Before: Mar 25 07:18:54 2026 GMT
            Not After : Apr  1 07:18:54 2026 GMT
        Subject: CN=69c38c5e-94ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:0e:fb:42:36:b8:f3:fd:19:40:e4:03:46:
                    b5:dc:52:e8:93:de:56:02:87:3c:4c:c2:4f:05:d5:
                    e3:fe:a4:75:6e:2c:78:21:b9:43:9f:cd:26:16:b0:
                    a4:7f:b0:75:54:d5:31:99:01:b3:a7:28:7c:d1:f1:
                    b8:10:41:66:05:d4:82:d2:53:9b:62:f1:9b:4c:13:
                    ae:dd:a9:69:21:d7:95:f1:48:05:14:b5:99:f3:bf:
                    b8:d7:e2:4b:33:48:a6:d4:09:ad:73:a7:84:85:a2:
                    a7:be:2b:c7:2f:4b:5d:e7:cf:4b:7f:d3:e6:2e:58:
                    ca:db:16:60:c9:0a:81:ef:2d:1f:1a:cd:28:34:37:
                    39:4c:9e:e5:35:ca:8a:17:4a:c4:bb:17:f3:19:53:
                    f3:a9:10:72:c6:04:f8:e5:4b:0e:5e:03:de:44:f2:
                    fe:8a:86:12:32:1b:95:9a:9f:2a:8c:07:6b:32:fc:
                    78:21:96:f8:05:12:85:a3:e6:fe:68:3f:c2:95:32:
                    8c:49:f7:c8:2b:24:b7:75:9a:ed:1d:99:38:f3:04:
                    88:e8:75:79:58:c8:58:ee:b4:99:08:d4:9f:38:8b:
                    9f:43:a5:36:67:c7:08:fb:f3:b6:dd:66:fc:8d:6c:
                    05:39:7e:2b:62:3f:50:62:ad:10:63:cc:3a:b5:ba:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:08:E7:41:2F:53:85:0B:2A:7B:3B:BF:E5:5C:DD:93:BF:9C:52:91
            X509v3 Authority Key Identifier:
                keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0d:f1:f6:a5:67:56:72:a4:48:3c:0f:52:81:3a:58:80:08:
         62:f3:72:8b:f4:a0:21:74:72:37:e5:ac:b0:19:fe:ea:0f:e2:
         56:91:7a:40:fc:95:81:ab:4d:e9:0e:f6:58:f9:df:3c:db:14:
         5a:c7:23:85:de:b1:5e:9a:5d:dc:c1:81:2b:05:75:6b:c1:0d:
         15:4b:ff:19:7f:45:db:f8:da:c0:92:dc:2f:e4:dc:b6:af:9c:
         d9:97:89:e6:81:84:58:09:56:b9:8d:55:d2:0e:cc:9c:82:25:
         75:df:4f:1a:bd:72:d2:24:08:f6:34:17:91:96:d7:32:06:4a:
         f5:40:29:e2:31:3c:3b:54:19:ed:41:a7:50:06:d3:1a:c3:96:
         91:a8:e3:65:47:0f:9a:39:fd:73:21:c4:55:8c:92:c1:10:ed:
         be:fa:de:f2:d5:0e:7f:77:37:b4:e9:1a:a6:4f:69:d0:fd:8f:
         77:fb:6e:0c:10:e5:91:de:db:ae:08:b3:6a:38:2a:3c:cc:1f:
         8d:7e:c8:e6:23:9a:ec:3c:70:f1:c9:ff:b7:87:a1:e4:96:f4:
         47:f9:38:29:0c:19:9f:be:71:03:85:af:6b:32:78:c9:c4:37:
         e7:5c:1a:d5:8e:6d:42:aa:44:51:8b:27:3b:27:b5:1d:b4:12:
         2a:6c:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:30 2026 by rpki-client