Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          Gxh0PAgRqe+paKrcMD+Ry+HyXJ5H8I223P0FMQaFg18=
Subject key identifier:   16:41:A7:A5:75:02:18:C0:6C:28:3B:61:02:AE:58:D5:41:3B:0B:27
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       358B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          3561
Signing time:             Tue 12 May 2026 15:16:00 +0000
Manifest this update:     Tue 12 May 2026 15:15:59 +0000
Manifest next update:     Tue 19 May 2026 15:15:59 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: eDjUm/rTjWyzmCB6P6Tcbkf17asyjEvo4ImCZ/zYc8Y=)
                          2: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
                          3: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: May 12 15:15:59 2026 GMT
            Not After : May 19 15:15:59 2026 GMT
        Subject: CN=6a03442f-f490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:2f:3f:92:ef:b4:cf:6e:1a:ed:83:09:64:
                    0a:3f:1f:73:28:17:7c:c1:d5:6e:5b:3d:b8:b3:d0:
                    fa:b5:c7:e3:87:8e:2f:3a:bb:73:7a:fe:e4:f5:cb:
                    fb:ef:89:be:da:97:2d:02:38:9e:8f:15:46:3b:cc:
                    48:a8:dc:44:58:c6:64:bc:6d:ce:9b:d7:60:fa:c4:
                    fd:4a:7b:03:98:0b:54:ac:84:39:76:bd:73:c8:4a:
                    26:14:63:cf:9c:7a:5a:fa:8c:94:2d:a4:20:68:01:
                    b9:79:9a:ea:62:43:d0:9f:69:93:85:0c:93:88:f6:
                    cb:8a:2a:a0:43:18:2a:f9:0f:46:eb:d6:44:39:96:
                    d1:80:c0:26:3c:cc:79:33:95:58:bc:ab:2c:cc:89:
                    cc:41:40:cc:3c:8f:9d:79:48:7f:49:3f:fb:08:fd:
                    d6:a5:a0:9a:d6:82:db:be:e0:2e:1f:83:55:b6:9b:
                    25:13:8b:a2:9b:8a:03:7a:dc:67:ba:a9:cf:d6:b8:
                    08:de:9c:63:0e:9d:4c:40:a0:e7:31:e7:a1:53:50:
                    88:cc:cd:57:4c:bf:c5:68:6a:b7:24:f9:28:e1:5b:
                    fc:83:fa:7a:53:b3:00:7a:31:35:c0:ef:d7:3a:53:
                    9c:92:63:a7:3e:fc:9f:44:d9:45:3c:da:5d:e0:60:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:41:A7:A5:75:02:18:C0:6C:28:3B:61:02:AE:58:D5:41:3B:0B:27
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:21:de:3a:4c:f6:c0:4b:d4:fe:cf:93:b4:1a:bb:d8:02:22:
         65:9e:5c:a1:74:33:b8:cf:38:a7:6c:0c:e4:2d:ab:7c:1f:c0:
         78:3e:ae:60:09:fb:9f:ed:02:b8:4a:20:2c:a0:d0:03:2d:55:
         b2:04:07:75:5d:82:57:9b:bc:2c:c2:1c:6e:91:db:6e:a0:e1:
         f0:fb:94:6d:5d:15:a2:3b:7e:b2:30:23:07:91:08:3b:a2:7f:
         59:ca:f0:fa:ae:d6:48:43:eb:fe:d4:e6:22:4a:42:79:5e:20:
         e6:ac:21:7a:37:68:f0:f0:cb:88:5e:1c:1c:41:f5:ab:88:0e:
         b7:be:1f:19:78:2d:df:62:1b:01:f0:56:cf:54:03:19:ef:c0:
         e5:f4:6d:61:2a:f9:46:7e:5b:b4:0c:92:8e:42:c0:63:91:95:
         26:82:da:d3:2b:ec:f1:42:20:04:03:51:fc:36:cb:8a:8c:00:
         07:4c:c8:55:fe:6d:a5:c6:52:2f:b6:60:6c:4e:2f:3b:f7:72:
         15:2d:5b:e0:8f:f3:29:58:bd:63:a4:d8:e2:d1:a8:e5:b6:06:
         bf:f2:82:33:be:26:bf:24:6b:5e:d2:2e:6e:04:39:f3:ec:a8:
         87:05:90:a9:93:32:0c:f7:f9:2e:84:f1:6c:ce:3e:7a:46:9b:
         50:78:4d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:46 2026 by rpki-client