Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File:                     qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier:          AC0rwH/sUxIrTARA8UFbI6Ogb1bxLiQu53yaEoYmARw=
Subject key identifier:   66:BC:13:25:25:AD:2B:36:FE:97:C6:BF:30:B1:8E:42:A5:74:41:31
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer:       /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial:       05EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number:          05E3
Signing time:             Thu 26 Mar 2026 22:47:47 +0000
Manifest this update:     Thu 26 Mar 2026 22:47:47 +0000
Manifest next update:     Thu 02 Apr 2026 22:47:47 +0000
Files and hashes:         1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: ClNoSLbFlCYw5sKZ5ZCQenVkko/QRrnZYg6WN5LH4fk=)
                          2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
                          rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
        Validity
            Not Before: Mar 26 22:47:47 2026 GMT
            Not After : Apr  2 22:47:47 2026 GMT
        Subject: CN=69c5b793-fdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:90:25:b3:58:49:71:e9:ff:4b:75:04:cb:77:
                    5a:e5:c4:f2:19:e9:81:c2:76:e3:94:8d:f9:a3:01:
                    14:2f:68:9d:aa:f6:33:d6:bf:99:3e:3f:a2:1d:45:
                    ca:4f:5e:ac:3c:15:12:60:e0:80:c1:4d:02:be:89:
                    49:ae:5f:8f:19:e3:bf:b1:76:5a:20:58:c6:c8:f4:
                    a3:55:8f:29:2b:a7:97:3f:9a:07:5d:05:1d:eb:16:
                    68:62:6f:9b:dc:de:6f:be:42:c5:14:c9:76:d0:2f:
                    57:02:51:6b:cf:73:0d:ff:2f:8e:0a:a2:9e:6a:d0:
                    52:d3:61:78:53:c5:33:83:b5:50:9c:37:ff:55:0e:
                    4b:a0:61:12:08:00:a8:20:ca:4d:fd:66:85:e4:89:
                    5e:64:70:26:42:50:6f:44:a3:99:f8:c1:d7:e7:54:
                    cf:f2:32:30:79:45:9e:07:c9:b6:7f:2b:e0:54:67:
                    c0:3b:5a:e7:b4:5c:4d:15:4a:c6:96:2f:04:8a:f8:
                    bb:4d:29:1f:d7:38:62:5d:92:ec:01:a4:d2:0e:7c:
                    5b:80:37:bd:a5:80:29:d6:dc:8d:98:86:d5:50:62:
                    0f:dc:dd:44:62:a9:5a:22:74:2f:ce:00:d7:e9:78:
                    4b:24:90:6b:71:bc:47:09:7e:13:f8:6d:d2:90:8d:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BC:13:25:25:AD:2B:36:FE:97:C6:BF:30:B1:8E:42:A5:74:41:31
            X509v3 Authority Key Identifier:
                keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:23:5a:0a:0c:4c:9b:42:9d:3f:43:d5:fc:be:91:f7:33:11:
         23:71:91:05:27:d6:ef:e5:2b:04:c1:35:0c:e6:3b:6d:09:98:
         b7:c9:e9:76:0c:56:84:b5:c7:cb:4b:33:8a:94:82:c4:67:92:
         bf:4e:f8:b5:5d:9d:52:73:54:91:1c:2e:42:65:fd:d3:b4:ea:
         f5:59:a0:86:b8:d0:c1:81:18:64:3a:fd:ef:cd:6a:4d:9e:35:
         9d:2a:f6:15:d1:47:d1:cb:a0:4d:dc:94:a7:b3:fd:51:bc:e6:
         d1:23:fa:c4:9b:1b:e9:7d:a2:55:8b:78:3d:4d:24:93:78:6e:
         47:81:24:ba:47:d7:34:4d:6b:a9:aa:22:13:c3:12:3d:3d:4d:
         5a:67:65:b1:cd:9f:59:c7:50:b1:fa:6a:54:3e:5e:b6:39:1e:
         8d:ed:7b:39:44:ac:80:98:33:59:45:bb:2b:9f:cb:3e:61:fc:
         6a:69:3f:47:4c:72:12:0b:c0:e0:f4:f2:7a:75:d0:d5:db:ec:
         ee:fa:b6:05:f0:ff:cd:70:c2:a7:d2:f7:fe:72:64:2d:fd:6b:
         c0:82:3f:f2:c3:d3:96:81:bd:6e:89:ea:c0:19:55:26:05:61:
         5e:8b:d4:3a:c7:b3:eb:40:e4:4e:d6:55:fb:4d:66:e6:8a:80:
         aa:cd:4b:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RGM0IxMTAvBgNVBAUTKEE4OTZCMTcwQkYwRDg4NzIzRjM2QzdBQzIwODc4NTRB
QTI4NEJENzEwHhcNMjYwMzI2MjI0NzQ3WhcNMjYwNDAyMjI0NzQ3WjAYMRYwFAYD
VQQDEw02OWM1Yjc5My1mZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5Als1hJcen/S3UEy3da5cTyGemBwnbjlI35owEUL2idqvYz1r+ZPj+iHUXK
T16sPBUSYOCAwU0CvolJrl+PGeO/sXZaIFjGyPSjVY8pK6eXP5oHXQUd6xZoYm+b
3N5vvkLFFMl20C9XAlFrz3MN/y+OCqKeatBS02F4U8Uzg7VQnDf/VQ5LoGESCACo
IMpN/WaF5IleZHAmQlBvRKOZ+MHX51TP8jIweUWeB8m2fyvgVGfAO1rntFxNFUrG
li8Eivi7TSkf1zhiXZLsAaTSDnxbgDe9pYAp1tyNmIbVUGIP3N1EYqlaInQvzgDX
6XhLJJBrcbxHCX4T+G3SkI1JtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGa8EyUl
rSs2/pfGvzCxjkKldEExMB8GA1UdIwQYMBaAFKiWsXC/DYhyPzbHrCCHhUqihL1x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREYzQi9DREJBODEyRUYw
M0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlISV9Oc2VzSUllRlNxS0V2
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FKYXhjTDhOaUhJX05zZXNJSWVGU3FLRXZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REYzQi9DREJBODEyRUYwM0ExMUVCOEQzMEUwNThDNEY5QUUwMi9xSmF4Y0w4TmlI
SV9Oc2VzSUllRlNxS0V2WEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdyNaCgxMm0KdP0PV/L6R9zMRI3GRBSfW7+UrBME1DOY7bQmYt8npdgxWhLXH
y0szipSCxGeSv074tV2dUnNUkRwuQmX907Tq9VmghrjQwYEYZDr9781qTZ41nSr2
FdFH0cugTdyUp7P9Ubzm0SP6xJsb6X2iVYt4PU0kk3huR4EkukfXNE1rqaoiE8MS
PT1NWmdlsc2fWcdQsfpqVD5etjkeje17OUSsgJgzWUW7K5/LPmH8amk/R0xyEgvA
4PTyenXQ1dvs7vq2BfD/zXDCp9L3/nJkLf1rwII/8sPTloG9bonqwBlVJgVhXovU
Osez60DkTtZV+01m5oqAqs1LRg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:46 2026 by rpki-client