Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
File:                     fjqkjWfrmWmcArgfcWlt9GWopuU.mft (raw, json)
Hash identifier:          YjZCYEG63NG9iSYxiX646F20tmJ6kIP6iI2ITI1W2JA=
Subject key identifier:   AF:4E:B3:C2:A3:48:2D:79:45:9C:B9:E7:62:25:22:DD:EA:B8:53:71
Authority key identifier: 7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5
Certificate issuer:       /CN=A9142420/serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
Manifest number:          0112
Signing time:             Mon 11 May 2026 06:03:22 +0000
Manifest this update:     Mon 11 May 2026 06:03:21 +0000
Manifest next update:     Mon 18 May 2026 06:03:21 +0000
Files and hashes:         1: fjqkjWfrmWmcArgfcWlt9GWopuU.crl (hash: GMJmmDu0MFrE3rcaQo1UBHIJpaWIXA32j/iMBO32I0U=)
                          2: E010D234AC8D11EF93B1CB46C4F9AE02.roa (hash: pMb/fzhxQo8B4/8r3buBhCAOx+HEOaBzUhA5CpNJUgw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl
                          rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142420, serialNumber=7E3AA48D67EB99699C02B81F71696DF465A8A6E5
        Validity
            Not Before: May 11 06:03:21 2026 GMT
            Not After : May 18 06:03:21 2026 GMT
        Subject: CN=6a01712a-5e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:b7:ec:cd:68:c8:fb:78:e7:94:1b:fd:27:
                    c5:03:ee:67:3f:5d:ad:4a:ea:39:04:14:dc:1c:c9:
                    4c:4d:f9:16:ba:e0:45:86:8e:cd:b0:4a:0d:92:16:
                    3e:9e:9a:39:f6:da:de:66:f0:01:33:75:9b:c4:10:
                    68:d0:3b:89:84:3e:08:c5:8b:d7:06:ff:74:45:85:
                    3a:46:85:0c:e2:3d:bc:2a:63:e5:3f:08:8d:c0:7f:
                    00:af:e1:e5:4f:4f:98:9e:df:8e:49:4f:b9:1b:e4:
                    c9:a2:73:01:bb:a1:72:c5:8d:a6:ba:ca:88:3a:7f:
                    fb:93:4d:78:88:05:00:fe:69:ad:ab:7a:70:89:37:
                    83:32:ae:9a:44:93:c9:c0:1a:b7:77:86:ed:9e:93:
                    19:1e:f7:42:4a:47:c1:9e:d6:f2:9c:f3:c5:71:63:
                    4a:0c:03:ec:54:30:20:8d:ce:bc:9a:1f:1f:4c:f5:
                    7b:76:85:db:a0:d4:38:28:9d:c8:cc:a5:cd:31:17:
                    40:8f:a9:7f:0c:39:ed:e3:bf:1d:e8:9a:83:78:af:
                    ef:62:16:f2:a8:7c:26:3a:9d:bc:9c:22:0f:f1:73:
                    1d:f7:fb:54:d3:65:2c:1a:15:c0:ba:7a:12:4d:c5:
                    ff:d7:b7:f8:94:cc:5a:ff:a0:ab:19:92:cc:97:17:
                    61:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:B3:C2:A3:48:2D:79:45:9C:B9:E7:62:25:22:DD:EA:B8:53:71
            X509v3 Authority Key Identifier:
                keyid:7E:3A:A4:8D:67:EB:99:69:9C:02:B8:1F:71:69:6D:F4:65:A8:A6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fjqkjWfrmWmcArgfcWlt9GWopuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142420/C42B33D4AC8D11EF8860BE34C4F9AE02/fjqkjWfrmWmcArgfcWlt9GWopuU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:4b:28:1c:52:b9:db:38:07:db:91:ef:6a:ff:cd:ef:e8:
         34:4b:2b:c4:91:4a:63:a5:ab:ff:b3:23:6b:bd:52:ad:14:48:
         f3:9e:bb:8c:55:cf:66:28:37:0b:f8:7e:71:bc:6d:ce:20:cf:
         25:85:75:36:83:96:4b:69:c3:5e:18:b4:cb:a2:b6:ca:c9:7e:
         e1:e3:a6:fd:14:8d:4f:2e:9f:1d:09:ea:45:87:5c:05:d9:4d:
         f4:eb:9d:e8:9a:fc:56:3f:85:9c:3a:7e:cd:f1:78:21:8f:20:
         97:da:12:2c:b6:fe:02:51:b1:e0:5f:ac:dd:58:3b:18:7f:57:
         e6:66:96:1c:13:42:a9:3d:e4:f6:cd:7a:4e:31:af:78:5f:7d:
         db:6f:be:4a:e8:9a:18:ea:3c:e6:c8:9b:c5:b0:a2:24:6c:da:
         5b:f9:df:6d:cc:f3:c0:93:bb:81:eb:21:e4:1d:aa:0d:bd:11:
         13:4f:99:42:50:f1:1f:1f:ff:e6:0a:d4:de:3a:fb:46:ca:ba:
         1d:f6:51:f1:3f:28:66:7b:19:3e:79:36:72:01:97:0c:1e:07:
         c5:b8:9c:06:91:f5:4b:e6:35:96:f9:cd:c4:90:bd:5d:78:4e:
         00:4c:57:c8:c9:95:c6:bc:4e:a2:86:16:e6:1e:2c:4e:d6:03:
         f9:c2:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:20 2026 by rpki-client