Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          oq2i0dI9X6gFgllA0fRn3WTjKbfDcTMpQLl6+zosLDc=
Subject key identifier:   8F:79:00:2B:E3:08:9D:45:3B:F7:2C:AE:EE:55:9F:E4:1D:90:A9:D2
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1BC0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1BA7
Signing time:             Sat 14 Nov 2026 15:34:17 +0000
Manifest this update:     Sat 14 Nov 2026 15:34:17 +0000
Manifest next update:     Sat 21 Nov 2026 15:34:17 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: rbWx/vBK/85rwCY1rUj1ZqbUbALzsIXOH92exJPefkk=)
                          2: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: CL5Weu+KTdYEl5dHTtwjhOsL3bmgjnwV/p+SfqCmaYk=)
                          3: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: cMs/v/u29PIVw32nwoFvyx0zngw6/OTTFqGeidGgPpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7104 (0x1bc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: Nov 14 15:34:17 2026 GMT
            Not After : Nov 21 15:34:17 2026 GMT
        Subject: CN=6af87f79-8750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:a9:7d:5f:2a:5c:66:56:8f:f9:5a:ea:98:
                    f5:af:51:e4:e7:93:33:70:20:f1:b1:e4:0d:c2:a4:
                    bd:b1:d6:1d:2d:cc:60:0d:3c:a9:70:27:65:2c:d6:
                    d7:43:9e:64:66:2c:4b:3f:8e:2c:02:c3:1e:12:64:
                    63:83:64:ab:e2:9f:93:ff:45:76:a7:15:f4:98:86:
                    50:30:05:15:39:48:b5:21:9c:96:51:1f:c1:cb:dc:
                    87:38:6b:49:ce:45:5c:2e:25:db:13:7f:e1:50:3f:
                    20:96:4e:9a:8a:1d:02:e2:96:d1:9d:29:bb:36:67:
                    78:fc:3c:04:2f:3e:f8:b8:f1:c6:5c:f6:d1:07:9c:
                    ea:6c:ac:e3:ab:7a:4f:5a:51:a9:07:fd:e3:80:39:
                    8c:00:50:cd:02:c4:0c:ec:6b:17:9b:40:82:b3:8c:
                    21:a7:16:0e:a6:03:a7:3d:a3:d5:ec:6c:9c:11:df:
                    9b:77:30:3e:c1:ed:6b:7d:4d:72:92:8c:bd:09:a8:
                    5d:04:73:09:b8:9e:03:1d:27:96:36:a3:db:ea:7c:
                    29:30:db:96:66:59:1d:82:b7:b1:c5:11:75:f6:e1:
                    ce:81:05:1b:51:62:48:7d:1a:12:d2:a9:7c:63:d3:
                    8f:84:a6:e7:e6:44:57:50:ee:72:dd:31:99:30:5c:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:00:2B:E3:08:9D:45:3B:F7:2C:AE:EE:55:9F:E4:1D:90:A9:D2
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:27:bc:53:33:4d:b7:6a:5e:77:41:bc:94:36:81:5f:a4:
         4a:7c:f1:83:7c:fc:f2:b1:f6:7d:0e:e2:58:8e:ee:29:7a:4d:
         4f:1a:ae:5e:e9:24:40:4b:49:0e:e4:92:8a:51:73:72:af:eb:
         d0:42:91:13:d2:08:c1:e7:cf:43:93:03:a3:b9:79:dc:d9:16:
         07:39:2a:2b:5a:51:ea:39:b7:2b:20:be:1e:39:4b:44:bc:79:
         ea:26:01:f2:45:8f:86:3f:7f:93:48:81:f2:78:72:e7:ec:af:
         d0:e2:2b:d5:b2:cf:9e:c9:17:d2:6e:47:2b:28:a7:af:45:cf:
         0f:63:39:51:2b:ac:f8:d5:0b:8f:8f:7c:3b:18:cb:a7:ee:a6:
         6f:cb:59:0c:06:4d:36:6a:f0:c1:33:29:0d:90:fb:86:59:2e:
         f7:0c:2a:72:13:22:e7:31:91:7e:2f:cf:f6:02:fd:72:f5:44:
         fe:3e:05:ab:a7:c7:13:45:f7:b2:f5:aa:d7:54:9c:7b:00:96:
         84:71:e9:36:ba:f6:b5:19:cf:d1:25:d9:12:3c:b9:94:10:d7:
         d7:9d:a8:34:12:1e:08:ce:3b:a5:15:c5:05:0f:20:cf:11:73:
         40:e0:78:84:87:5b:99:3b:4d:2b:c9:63:40:74:53:b7:29:4f:
         14:b0:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:29:50 2026 by rpki-client