Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
File:                     QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json)
Hash identifier:          Wqg/cFbIBKClxL/WjLDv3Mikhtbb/cHQ83Jf5R2iaCo=
Subject key identifier:   7B:3D:9D:2B:4B:EF:9E:09:CE:1F:8F:AA:17:E0:CC:A8:8C:CC:9F:05
Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A
Certificate issuer:       /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
Certificate serial:       0D2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
Manifest number:          0D16
Signing time:             Tue 12 May 2026 18:07:58 +0000
Manifest this update:     Tue 12 May 2026 18:07:58 +0000
Manifest next update:     Tue 19 May 2026 18:07:58 +0000
Files and hashes:         1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: PuwSD44l4s0H0o398mMaDxN7+7aDymsB/3fZ9thOtHE=)
                          2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=)
                          3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl
                          rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3370 (0xd2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A
        Validity
            Not Before: May 12 18:07:58 2026 GMT
            Not After : May 19 18:07:58 2026 GMT
        Subject: CN=6a036c7e-cca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:2d:92:d8:a0:95:a0:ed:06:aa:9d:e1:be:
                    29:28:61:09:ee:06:1e:c4:81:59:56:01:db:09:2f:
                    96:ff:3e:e7:b8:af:da:7d:93:57:c3:c7:70:97:94:
                    18:db:5d:33:09:cd:f3:00:de:5f:5c:ca:f9:7d:e8:
                    21:81:42:65:68:01:67:e0:7d:42:a9:91:96:90:56:
                    a9:8e:39:5b:f9:f4:c0:92:21:54:54:2b:84:ff:a9:
                    d3:ee:75:5d:89:c9:32:fd:65:e9:83:cc:48:27:94:
                    b8:27:db:0c:0e:df:a8:4c:d9:57:b7:ee:48:29:fa:
                    17:d0:97:29:00:f1:61:95:6e:bc:1d:9b:5d:77:ef:
                    80:c4:19:e4:5b:9c:7d:42:63:af:b4:07:07:c1:e1:
                    99:48:6f:9b:bd:d5:03:c1:87:cb:e6:f6:64:21:05:
                    29:5e:35:36:c5:28:ba:28:94:fe:50:aa:ed:95:1e:
                    03:e5:7f:1d:18:26:43:96:8a:52:ee:28:69:6b:46:
                    30:d4:4a:5d:d8:38:1f:98:cb:b0:a2:e1:89:0b:71:
                    3c:39:bd:ed:97:99:5b:dc:b4:23:0c:e6:8f:ad:2a:
                    e2:a6:3c:b1:b0:ec:b6:2a:2a:94:b1:5a:09:10:7b:
                    a2:a6:b6:c6:ef:06:70:2c:18:12:b9:d2:7b:31:77:
                    0f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3D:9D:2B:4B:EF:9E:09:CE:1F:8F:AA:17:E0:CC:A8:8C:CC:9F:05
            X509v3 Authority Key Identifier:
                keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6a:10:89:91:14:ab:9a:6d:99:f3:7c:bb:e1:e3:f9:3f:59:
         39:bc:9c:81:ea:0b:d1:e2:fb:7e:a0:6a:a3:95:33:c8:b1:f3:
         59:fd:a2:6a:2c:3b:13:a4:7e:b3:92:9a:93:4a:27:62:a9:0f:
         e7:0a:65:09:05:4c:c3:51:54:ef:1e:63:8d:e7:8b:95:b8:1b:
         00:25:20:8c:20:70:7f:32:9b:dc:7b:5b:c5:7d:7a:dd:c0:3f:
         8e:56:cd:4d:72:a6:64:5d:9a:45:d1:12:9c:5d:b6:56:7d:89:
         b8:5a:97:3c:66:b9:4c:5b:7a:e8:68:8e:43:1c:88:93:0d:05:
         42:cf:ea:da:ca:03:d8:06:18:87:82:db:25:a3:f3:13:70:34:
         4d:0b:de:7f:60:14:6c:f9:91:7d:4d:a7:bd:64:69:0a:63:29:
         6d:03:d3:0b:0e:98:9c:0a:15:5b:33:9e:a8:1d:71:9f:8d:19:
         ed:06:2c:30:21:3f:2b:96:ae:c8:15:82:d1:11:6a:c6:6c:34:
         38:a2:c9:a9:19:02:48:bf:0d:52:6a:63:31:1c:ef:4a:25:1c:
         b3:a7:2f:12:51:da:72:86:dc:96:ee:85:18:e2:38:26:da:ea:
         f1:75:e7:0d:91:10:ff:b3:ed:cd:d2:e7:6c:d3:79:22:96:07:
         99:6d:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:31 2026 by rpki-client