Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
File:                     QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json)
Hash identifier:          Mg9AChDQxEfrqgRT94oGdjpDcjZ48psLP9SrnrH/VbQ=
Subject key identifier:   9B:D0:C3:5F:DB:DC:5A:26:75:DF:E3:7E:99:29:72:1B:E9:48:C9:14
Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
Certificate issuer:       /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Certificate serial:       02EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
Manifest number:          02E8
Signing time:             Wed 13 May 2026 01:26:33 +0000
Manifest this update:     Wed 13 May 2026 01:26:32 +0000
Manifest next update:     Wed 20 May 2026 01:26:32 +0000
Files and hashes:         1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: UCPD3ilGWQoMaGClAfrznsJzJX+igcZZcse8UYONeXM=)
                          2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: KjdHFdT4hMQndSJL6UoMqkq2ZW2qsfB7WspT9fMf+Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
                          rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
        Validity
            Not Before: May 13 01:26:32 2026 GMT
            Not After : May 20 01:26:32 2026 GMT
        Subject: CN=6a03d349-c623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:74:20:12:6e:af:a4:01:be:0b:61:cf:02:
                    43:76:cd:07:97:f7:d4:a7:88:df:d8:6b:68:bc:9e:
                    d2:cc:b7:b8:ac:d6:34:bb:dc:2a:b9:e5:a1:8a:04:
                    65:17:f2:7b:e7:9a:ba:84:c8:cd:48:3f:d6:84:4b:
                    0b:4f:1c:62:62:59:4b:93:e3:38:0d:07:2b:69:6c:
                    d2:40:d4:a4:3e:d1:d5:4c:a7:ac:60:80:64:6a:2e:
                    eb:4b:0a:06:69:b6:e3:9d:f8:3f:b6:30:8b:39:16:
                    b1:65:48:25:dd:2f:0a:4e:d7:4b:23:33:44:93:18:
                    b7:56:8b:25:1a:ea:35:0d:ed:4b:97:1b:9c:7b:37:
                    95:9a:fb:09:11:d2:ef:19:32:f3:b7:d8:56:8d:74:
                    48:69:29:42:cc:85:4f:b6:e4:c1:d8:ce:e8:02:7b:
                    9a:14:82:a4:9f:f8:10:00:72:f5:9d:6c:bc:8c:d3:
                    9c:cc:87:65:c0:01:68:78:89:2a:55:bc:5f:5d:24:
                    62:67:b1:8d:c6:4c:cd:56:7e:1a:1c:cc:52:08:2f:
                    be:38:c2:5d:fa:a2:8d:f1:6f:ad:bc:c1:cc:e6:81:
                    d0:1e:01:41:df:54:93:c6:95:73:2a:0d:81:fc:f6:
                    14:e9:07:92:db:99:56:94:5a:4b:69:bb:da:96:b7:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D0:C3:5F:DB:DC:5A:26:75:DF:E3:7E:99:29:72:1B:E9:48:C9:14
            X509v3 Authority Key Identifier:
                keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:99:4e:db:8c:a6:fc:72:87:fb:d2:7a:2d:ef:f4:27:8e:a0:
         7d:07:85:fd:8c:a9:11:e1:f4:99:6d:d6:46:f8:2c:2d:54:1d:
         35:02:39:a8:c3:9f:34:fb:66:ac:f3:aa:cc:93:b5:9f:9a:d5:
         9c:24:ec:c8:84:87:2b:bd:11:92:6a:28:62:34:c7:4a:d8:6e:
         59:e3:ab:bf:1d:89:f4:10:02:7d:3e:18:3b:04:27:70:85:b8:
         b3:a9:3d:52:0f:54:47:ed:f3:57:96:a3:3a:82:fe:5f:1d:ef:
         15:06:dd:3f:0e:b2:e1:13:19:c1:e2:8a:dc:19:d0:30:e0:9f:
         59:fb:a5:93:83:52:df:15:1a:ab:88:f0:3b:24:ef:03:e6:16:
         9a:c5:93:2a:66:e0:8f:12:c4:15:98:60:5a:f9:49:a4:cc:38:
         59:ba:bc:8b:11:87:ad:03:46:f4:49:06:22:58:b2:10:b8:ab:
         bc:84:78:74:e0:b2:e7:1f:c8:4d:31:71:a3:2d:a5:47:d4:3d:
         f4:ed:f2:38:0b:18:b0:a0:41:16:b6:97:ad:5c:1d:8a:ee:1c:
         b4:5c:39:c2:d1:07:36:11:60:25:06:ab:b5:3b:91:a4:92:27:
         50:2e:51:f4:d9:62:08:67:a2:bf:bc:43:05:ff:04:da:e7:20:
         16:8c:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:14 2026 by rpki-client