Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File:                     QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier:          pswhaKmZIybsV25566BO4iFj81huhqT2c0k4qKzDDPc=
Subject key identifier:   13:78:54:68:FE:09:50:96:F5:34:40:F1:00:4F:5C:46:48:B9:F8:06
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer:       /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial:       1353
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number:          1347
Signing time:             Tue 24 Mar 2026 16:53:44 +0000
Manifest this update:     Tue 24 Mar 2026 16:53:43 +0000
Manifest next update:     Tue 31 Mar 2026 16:53:43 +0000
Files and hashes:         1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: Gjf/rwa7qJlQIcXeh2ZbmzRILZbn471WdGJ6oWFQV6I=)
                          2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: xtqs23pEGpn+9A+WHIc8NfV6fN9kv4Vyj6xQTqFc8lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
                          rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4947 (0x1353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
        Validity
            Not Before: Mar 24 16:53:43 2026 GMT
            Not After : Mar 31 16:53:43 2026 GMT
        Subject: CN=69c2c198-481a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:11:a8:41:c5:98:93:6a:f6:68:7f:35:e1:d9:
                    99:16:d6:20:99:05:76:59:5e:0d:fd:1d:dc:e1:e4:
                    eb:c7:ed:31:9e:02:f2:b8:cc:de:89:09:97:36:b4:
                    06:e1:d5:03:0b:40:bf:91:0f:59:3f:f7:bd:47:e8:
                    77:47:30:b1:e8:b3:87:62:ca:75:9a:37:68:e8:88:
                    6f:b1:07:6c:43:56:c5:f1:20:f5:25:d5:a1:36:bb:
                    ef:0c:6f:fd:e6:24:d7:b8:ad:1b:7d:8a:73:5a:3a:
                    f6:58:cb:a7:81:f0:61:2c:94:2f:73:be:fb:3b:e9:
                    ee:f3:a3:a3:10:a2:77:5a:08:1a:45:1b:cf:07:d5:
                    57:24:e8:64:f4:96:3f:00:a0:84:12:03:a5:5f:9b:
                    f1:2a:2c:b4:6d:b6:db:43:ad:5f:89:8f:43:26:5c:
                    f7:19:e0:35:0d:d2:c1:5e:f8:a8:d5:e8:4c:d2:37:
                    5f:66:4b:9d:f6:81:c6:af:d7:e5:19:cb:c5:a7:54:
                    74:91:68:d4:2e:89:58:9f:78:a9:d7:38:b9:17:a1:
                    b9:9c:0d:03:35:28:3d:9d:39:3e:a1:35:61:2c:e2:
                    61:04:19:8f:ac:81:a6:a6:fc:18:ae:6e:cf:b0:79:
                    c4:3f:91:2e:65:2f:19:b3:b2:ca:eb:73:99:c5:b6:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:54:68:FE:09:50:96:F5:34:40:F1:00:4F:5C:46:48:B9:F8:06
            X509v3 Authority Key Identifier:
                keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:94:cc:95:5f:9f:d0:be:36:e0:b0:4a:de:99:8e:70:a2:18:
         86:df:12:64:8d:f6:86:7e:93:f3:7a:57:de:34:0f:3e:84:fd:
         bf:6a:18:0f:8a:9d:dc:16:e7:35:f8:61:30:35:d8:78:bb:31:
         83:ef:2d:c3:f2:37:07:7b:16:76:35:ea:fb:8f:4b:1b:f2:90:
         44:2a:86:f5:72:76:36:a6:ad:da:19:ea:11:c9:a7:0a:e9:42:
         f8:91:e9:d5:6d:f9:55:a3:c1:4c:29:10:3a:74:c0:5b:41:0f:
         cc:25:e4:b4:f6:03:60:fa:02:8c:f3:42:b6:18:89:c8:78:3c:
         5d:09:de:db:57:d5:2f:d1:9f:9d:5e:ca:88:db:ba:49:d6:25:
         9d:f5:e6:8a:5a:76:83:70:41:67:05:a3:7a:65:f0:e8:4c:1c:
         96:79:e2:93:c4:03:f2:0f:ed:e5:c3:f9:df:eb:92:a8:e2:04:
         2f:c8:bb:13:ec:f9:f5:3c:63:48:27:42:bd:c6:b7:13:3a:10:
         0c:ed:01:0a:28:00:69:3f:40:07:ae:1c:93:c6:bb:f4:1f:01:
         d9:bf:9d:0e:71:7a:f6:b1:e5:4c:ff:7e:56:80:7c:a0:da:9b:
         71:94:2f:73:31:68:90:e6:df:4e:1a:a2:ef:0a:ac:21:b6:fe:
         16:49:33:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICE1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzYxOEYxMTAvBgNVBAUTKDQwOTM4NzA5NzI3NDM4QzhDMURFQkZGRDA0MTU5MDU4
NDgyMEM2RTgwHhcNMjYwMzI0MTY1MzQzWhcNMjYwMzMxMTY1MzQzWjAYMRYwFAYD
VQQDEw02OWMyYzE5OC00ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5xGoQcWYk2r2aH814dmZFtYgmQV2WV4N/R3c4eTrx+0xngLyuMzeiQmXNrQG
4dUDC0C/kQ9ZP/e9R+h3RzCx6LOHYsp1mjdo6IhvsQdsQ1bF8SD1JdWhNrvvDG/9
5iTXuK0bfYpzWjr2WMungfBhLJQvc777O+nu86OjEKJ3WggaRRvPB9VXJOhk9JY/
AKCEEgOlX5vxKiy0bbbbQ61fiY9DJlz3GeA1DdLBXvio1ehM0jdfZkud9oHGr9fl
GcvFp1R0kWjULolYn3ip1zi5F6G5nA0DNSg9nTk+oTVhLOJhBBmPrIGmpvwYrm7P
sHnEP5EuZS8Zs7LK63OZxbYTGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBN4VGj+
CVCW9TRA8QBPXEZIufgGMB8GA1UdIwQYMBaAFECThwlydDjIwd6//QQVkFhIIMbo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjE4Ri9EMjhENzVDMEMy
REYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9NakIzcl85QkJXUVdFZ2d4
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FKT0hDWEowT01qQjNyXzlCQldRV0VnZ3h1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjE4Ri9EMjhENzVDMEMyREYxMUU4QTY0RUZEMkNDNEY5QUUwMi9RSk9IQ1hKME9N
akIzcl85QkJXUVdFZ2d4dWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGZTMlV+f0L424LBK3pmOcKIYht8SZI32hn6T83pX3jQPPoT9v2oYD4qd3Bbn
NfhhMDXYeLsxg+8tw/I3B3sWdjXq+49LG/KQRCqG9XJ2Nqat2hnqEcmnCulC+JHp
1W35VaPBTCkQOnTAW0EPzCXktPYDYPoCjPNCthiJyHg8XQne21fVL9GfnV7KiNu6
SdYlnfXmilp2g3BBZwWjemXw6Ewclnnik8QD8g/t5cP53+uSqOIEL8i7E+z59Txj
SCdCvca3EzoQDO0BCigAaT9AB64ck8a79B8B2b+dDnF69rHlTP9+VoB8oNqbcZQv
czFokObfThqi7wqsIbb+FkkzxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:29 2026 by rpki-client