Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
File:                     QNuuLIMZi8b60lgpmII0VqN3Y6s.mft (raw, json)
Hash identifier:          OGpDOOiSsC2lVrqfkJlUOjzcFqARezAvlu3gwii3Ero=
Subject key identifier:   15:1A:30:8B:44:0F:41:AE:B0:B0:07:91:44:82:77:76:51:34:6C:D1
Authority key identifier: 40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB
Certificate issuer:       /CN=A9178C7A/serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
Manifest number:          0253
Signing time:             Fri 27 Mar 2026 01:50:51 +0000
Manifest this update:     Fri 27 Mar 2026 01:50:50 +0000
Manifest next update:     Fri 03 Apr 2026 01:50:50 +0000
Files and hashes:         1: QNuuLIMZi8b60lgpmII0VqN3Y6s.crl (hash: py4XxX6eyPHuaeddOs0zGiKweAj4W0Dylxun1KZ+WhQ=)
                          2: 668242F49C4511EDB73A4379C4F9AE02.roa (hash: pfvrI1kQlT/P1ZWjhgTdXeNg4qENFgB1Nnr2MrXGD4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl
                          rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 01:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C7A, serialNumber=40DBAE2C83198BC6FAD2582998823456A37763AB
        Validity
            Not Before: Mar 27 01:50:50 2026 GMT
            Not After : Apr  3 01:50:50 2026 GMT
        Subject: CN=69c5e27a-46fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:7f:e3:ce:f5:6f:4d:71:09:32:3d:94:34:
                    1f:f4:5a:47:6d:45:32:f5:95:76:eb:68:ff:13:51:
                    4a:80:5a:6a:6c:cf:23:af:8b:b5:42:3d:67:21:04:
                    b7:58:70:cf:d1:12:de:67:47:7f:8e:21:d6:71:84:
                    5c:dc:25:39:99:10:57:2c:55:46:1b:cf:51:c9:d5:
                    f2:4c:34:8d:a9:09:b3:fc:84:92:03:10:ce:e7:0f:
                    46:34:f3:cd:e1:cd:ad:70:32:b4:c7:36:30:09:a5:
                    f8:d3:d0:9e:2f:2d:27:ce:ef:3a:37:f3:0b:40:12:
                    39:dd:76:8a:5a:84:6f:cb:15:2d:3e:00:ca:65:d2:
                    e0:72:09:76:98:66:2b:71:b0:d4:75:cc:8b:6a:7e:
                    81:6e:d6:ae:e5:f0:dd:ee:19:4a:6b:0f:74:14:f5:
                    bd:f9:d2:0d:0a:3b:d8:1a:3b:f0:f4:5f:08:cb:4b:
                    30:9e:b7:d9:8b:6b:f7:e1:7e:8b:59:fc:40:b2:27:
                    f0:82:77:68:66:e4:30:a7:22:d1:57:e3:a9:ae:13:
                    27:ef:08:a2:d2:70:b4:cc:98:6d:79:f4:0f:30:bc:
                    d0:83:c8:13:dd:e2:13:b7:0b:bb:75:0a:08:a5:b4:
                    4a:90:5a:62:2c:d2:ae:c3:dc:8f:13:52:8d:b4:8f:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:30:8B:44:0F:41:AE:B0:B0:07:91:44:82:77:76:51:34:6C:D1
            X509v3 Authority Key Identifier:
                keyid:40:DB:AE:2C:83:19:8B:C6:FA:D2:58:29:98:82:34:56:A3:77:63:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNuuLIMZi8b60lgpmII0VqN3Y6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C7A/AC45962E9C4011ED97008470C4F9AE02/QNuuLIMZi8b60lgpmII0VqN3Y6s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:6b:bc:99:cd:bb:ff:24:17:d2:ff:7a:f1:00:f1:68:c1:
         c7:51:4c:cd:83:52:7d:7c:26:67:ba:42:e7:2c:7f:de:f3:dd:
         bc:82:1a:ea:45:32:5a:97:a3:4b:63:13:0d:57:50:97:dc:a4:
         3c:f3:e8:d5:0b:9e:ab:db:bc:47:cc:d5:43:53:f2:42:9c:71:
         e9:31:86:ec:4e:f1:b8:c9:23:41:ec:cc:99:ba:99:02:f5:a8:
         ae:e4:f7:70:7e:32:43:c5:bb:ee:ac:ff:4d:17:91:79:3c:70:
         78:81:85:97:bb:6a:fc:1b:fc:55:b3:4e:97:26:5e:b9:f1:b5:
         1c:a7:02:a3:a8:a7:65:e0:01:94:e5:48:3c:87:6a:ea:33:87:
         84:28:02:99:72:20:cf:f6:b6:0d:39:d0:36:7a:6f:21:70:09:
         42:7c:1d:5f:2e:78:c2:35:88:f7:a7:a4:2b:97:a9:d3:83:52:
         df:a2:cb:54:1d:6e:50:6b:a2:f0:11:00:c3:25:8a:26:f7:10:
         56:26:7c:9b:87:bf:72:93:70:82:ce:0e:c6:9a:04:4b:51:2c:
         3c:52:23:71:0a:d7:78:26:e3:1b:ff:eb:b5:8b:f4:da:14:ad:
         85:6f:d4:f9:e0:14:60:1c:85:81:e3:58:b5:fd:cc:7d:f8:1d:
         be:49:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:00:24 2026 by rpki-client