Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File:                     QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier:          LNaEIF2OvvBWdPf5cgaIANtO3bN/9FJbeI5LrArO4IA=
Subject key identifier:   DA:94:05:63:20:49:46:2D:EE:15:EA:32:EE:E9:1C:6F:9D:A0:F0:1C
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer:       /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial:       062E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number:          0624
Signing time:             Tue 24 Mar 2026 22:29:48 +0000
Manifest this update:     Tue 24 Mar 2026 22:29:48 +0000
Manifest next update:     Tue 31 Mar 2026 22:29:48 +0000
Files and hashes:         1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: XEcVEvOi5wOCv0PdGkZtxVNBT1euV6r3mXOaH3bnS64=)
                          2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
                          rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1582 (0x62e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
        Validity
            Not Before: Mar 24 22:29:48 2026 GMT
            Not After : Mar 31 22:29:48 2026 GMT
        Subject: CN=69c3105c-41af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:c8:51:a1:e8:51:f6:49:d2:67:b4:15:ff:
                    85:ab:f1:2f:f6:15:87:67:47:18:69:ea:5b:60:87:
                    5b:0d:ec:32:fd:d8:c3:31:17:64:4f:6d:2d:63:b2:
                    17:8c:94:bc:77:fb:43:19:ff:bd:57:c4:d7:45:51:
                    f6:76:34:71:10:ab:f3:42:9f:ae:b4:1c:77:b8:3b:
                    24:ca:dc:63:83:c7:fc:83:a5:dc:5e:b0:dc:e1:5c:
                    d9:17:2a:62:b4:f6:bf:c7:8d:f8:23:8f:b6:c3:4f:
                    25:5c:0a:fc:49:4a:9a:f7:5a:ca:e6:ae:5c:0b:12:
                    ba:45:97:71:23:c1:d3:f3:10:57:b1:b3:17:c3:66:
                    bb:a9:f9:86:4e:f8:b4:2a:3e:b9:3a:a2:90:3f:e4:
                    91:dc:a5:e2:7e:5d:90:e3:59:46:d2:5f:64:4b:ed:
                    ed:7c:9b:10:64:10:cd:e9:5c:ef:3f:1e:c9:f0:b1:
                    2b:cf:e1:ae:bd:34:e2:9a:6b:18:12:98:65:08:56:
                    e1:3c:89:76:6a:3f:c6:54:d2:73:d5:15:cb:14:32:
                    97:c9:2d:57:e8:49:88:d5:78:de:dd:46:19:3e:17:
                    b8:f2:0e:de:45:7d:eb:6b:d9:7a:38:a9:dc:1f:19:
                    61:df:ec:c5:19:3b:1e:09:c5:9e:83:97:50:21:f1:
                    59:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:94:05:63:20:49:46:2D:EE:15:EA:32:EE:E9:1C:6F:9D:A0:F0:1C
            X509v3 Authority Key Identifier:
                keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:af:79:28:89:a1:5e:04:16:0d:f2:b5:0a:f3:ef:da:81:fc:
         6a:f1:8c:e5:88:76:64:fa:77:f8:03:5a:38:c5:3a:2a:58:37:
         10:e0:22:ab:c0:92:eb:60:50:dc:24:44:ab:e4:f0:c5:15:7b:
         95:5e:e6:58:58:e0:1d:d5:d0:18:6f:c9:d1:6f:99:fd:f6:96:
         84:5f:58:44:c6:da:af:2a:4b:2b:6f:b2:e7:2a:68:97:33:14:
         84:65:48:26:32:67:0f:21:da:d2:54:bf:d2:f0:9b:89:83:96:
         bf:f1:54:f0:6f:a4:93:06:34:62:e8:af:d4:a5:08:ef:62:f3:
         86:7d:cb:f2:d9:ac:b7:46:a8:1e:f6:bd:11:f4:99:42:fe:f9:
         2a:91:1d:ce:6d:bd:1c:75:f4:9c:23:89:f9:dd:7f:24:12:38:
         86:27:03:27:b4:63:0d:50:f3:88:69:80:0d:02:05:23:ac:fe:
         50:b8:ae:88:68:3b:28:77:cb:86:bf:50:f0:33:be:60:ea:cc:
         44:de:f6:3a:72:94:e9:57:10:40:0a:4f:06:7f:4b:c7:8a:71:
         c7:87:18:c4:34:2f:1f:5d:82:a0:66:80:cd:ef:bb:ca:8a:58:
         6d:94:ba:40:6e:c0:f9:f6:21:10:bd:2e:7f:6a:68:99:92:5d:
         7b:dc:4e:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF
NDQwNzI1OEQwHhcNMjYwMzI0MjIyOTQ4WhcNMjYwMzMxMjIyOTQ4WjAYMRYwFAYD
VQQDEw02OWMzMTA1Yy00MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLXIUaHoUfZJ0me0Ff+Fq/Ev9hWHZ0cYaepbYIdbDewy/djDMRdkT20tY7IX
jJS8d/tDGf+9V8TXRVH2djRxEKvzQp+utBx3uDskytxjg8f8g6XcXrDc4VzZFypi
tPa/x434I4+2w08lXAr8SUqa91rK5q5cCxK6RZdxI8HT8xBXsbMXw2a7qfmGTvi0
Kj65OqKQP+SR3KXifl2Q41lG0l9kS+3tfJsQZBDN6VzvPx7J8LErz+GuvTTimmsY
EphlCFbhPIl2aj/GVNJz1RXLFDKXyS1X6EmI1Xje3UYZPhe48g7eRX3ra9l6OKnc
Hxlh3+zFGTseCcWeg5dQIfFZ9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNqUBWMg
SUYt7hXqMu7pHG+doPAcMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5
NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUQ1RS81NkRENDhERUQ5NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92
LWVJY1NFTlZyQUxrUUhKWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZa95KImhXgQWDfK1CvPv2oH8avGM5Yh2ZPp3+ANaOMU6Klg3EOAiq8CS62BQ
3CREq+TwxRV7lV7mWFjgHdXQGG/J0W+Z/faWhF9YRMbarypLK2+y5ypolzMUhGVI
JjJnDyHa0lS/0vCbiYOWv/FU8G+kkwY0Yuiv1KUI72Lzhn3L8tmst0aoHva9EfSZ
Qv75KpEdzm29HHX0nCOJ+d1/JBI4hicDJ7RjDVDziGmADQIFI6z+ULiuiGg7KHfL
hr9Q8DO+YOrMRN72OnKU6VcQQApPBn9Lx4pxx4cYxDQvH12CoGaAze+7yopYbZS6
QG7A+fYhEL0uf2pomZJde9xO9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:07:57 2026 by rpki-client