Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File:                     QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier:          7oJUDae0Ehfiv2d5LcHCKiW8gJ3mkbPDfXNwwER+2SE=
Subject key identifier:   79:86:C4:E1:7D:06:AC:A1:2E:F8:56:D0:D5:13:62:72:E7:B8:FC:42
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer:       /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial:       136C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number:          1360
Signing time:             Tue 12 May 2026 17:00:05 +0000
Manifest this update:     Tue 12 May 2026 17:00:05 +0000
Manifest next update:     Tue 19 May 2026 17:00:05 +0000
Files and hashes:         1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: bPgs8Uh5qjRYLLHNnipPdqb60o1k7btmJCRS9Pk7yu4=)
                          2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: xtqs23pEGpn+9A+WHIc8NfV6fN9kv4Vyj6xQTqFc8lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
                          rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4972 (0x136c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
        Validity
            Not Before: May 12 17:00:05 2026 GMT
            Not After : May 19 17:00:05 2026 GMT
        Subject: CN=6a035c95-6e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:50:c7:98:dd:8a:ef:df:f6:3e:fb:56:a6:
                    a8:a9:b7:ae:65:99:d3:b1:2a:0b:54:1c:92:bb:40:
                    f7:03:f9:7b:9f:fd:43:dc:2f:03:6a:60:81:46:d0:
                    36:6e:84:ce:e7:87:4d:d0:4f:bd:88:54:5d:58:1a:
                    09:ac:10:1f:40:b0:f6:74:2a:ef:7b:5c:40:54:28:
                    5c:a2:be:e3:f6:a2:05:d9:d3:c8:54:2e:43:d6:4d:
                    b5:15:2f:5b:e9:ac:65:1c:64:c6:8e:9a:e3:e5:62:
                    cd:b5:43:d6:45:9a:78:ba:2a:aa:af:54:77:a4:ca:
                    8b:2a:f9:dc:9c:9d:5d:72:ff:30:45:24:ca:e4:24:
                    e7:b4:50:f0:e3:27:b0:ae:c8:ac:cd:3e:fb:4e:3f:
                    86:c3:8b:72:8f:5c:a4:30:b6:81:bf:a2:da:02:28:
                    97:77:8a:35:58:e6:b1:85:34:ba:d7:3e:02:b7:26:
                    21:16:7a:67:2f:a8:34:24:32:93:0e:95:fa:f2:24:
                    07:72:5b:18:92:32:e0:dd:1e:e3:13:4c:09:12:8b:
                    0b:e8:6c:47:25:7e:b2:23:49:c6:16:6c:22:1e:50:
                    3e:a0:25:14:aa:f7:32:bd:12:e3:f5:14:fb:17:91:
                    92:03:43:02:df:c0:bd:46:3a:ce:3b:a4:33:e9:c9:
                    d0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:C4:E1:7D:06:AC:A1:2E:F8:56:D0:D5:13:62:72:E7:B8:FC:42
            X509v3 Authority Key Identifier:
                keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:ff:08:5f:c4:fe:b6:1f:f9:50:d3:e9:2c:cf:78:dc:8e:
         61:25:ed:be:51:ce:62:50:a9:8d:bb:9f:9d:b0:5b:b8:05:73:
         98:84:2b:96:75:b2:95:df:35:12:7b:3c:55:b3:b0:ba:32:1d:
         ad:c6:91:35:cb:94:53:b0:d4:92:0b:ba:37:06:f6:36:0e:80:
         c8:1e:eb:d6:53:ef:ce:4c:6a:38:a2:62:93:f0:e2:34:a3:65:
         5c:72:93:9f:46:73:79:41:9b:86:e6:d2:6b:e9:0b:5a:e7:d4:
         ce:80:67:9c:58:6e:e8:5a:6b:2f:51:6d:b9:49:96:90:f2:6e:
         f6:09:72:36:87:40:12:b8:c4:39:05:e6:d5:8a:de:17:17:31:
         8b:72:16:00:14:5e:bd:98:af:36:90:1b:95:e0:c0:ca:b1:13:
         d0:68:e0:10:cc:59:27:e8:b8:f2:30:84:2e:83:85:4a:6a:12:
         04:3b:42:a7:9a:b0:9a:a9:63:50:4b:a6:c3:a7:c3:2b:40:8f:
         64:ec:39:2a:96:c9:f3:ab:c1:c1:1e:05:97:ab:df:49:c7:64:
         d0:ea:15:e0:ac:5b:a0:91:72:71:e7:39:34:d6:a3:93:9d:83:
         a2:d5:bd:e3:5a:65:a9:80:bf:49:f2:ce:11:58:fd:ee:69:33:
         4a:2d:85:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:41 2026 by rpki-client