Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File:                     QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier:          WIxe1YTRzwZLcbqfN90kCf30TNPPFa40p57HNu5gf44=
Subject key identifier:   D1:4F:3F:EC:CA:8E:9B:75:12:6E:4A:3E:5D:5B:4D:4F:2F:47:A9:14
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer:       /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial:       061E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number:          0616
Signing time:             Sat 28 Feb 2026 23:22:56 +0000
Manifest this update:     Sat 28 Feb 2026 23:22:56 +0000
Manifest next update:     Sat 07 Mar 2026 23:22:56 +0000
Files and hashes:         1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: KvT55NWP0c3iKAt1Mw5Z4dlG50o78oBji4vVG2hNc0g=)
                          2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: NdeCQAWI57TR1prRAjKyS139sDymB99f2VGK6TxtMaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
                          rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 23:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
        Validity
            Not Before: Feb 28 23:22:56 2026 GMT
            Not After : Mar  7 23:22:56 2026 GMT
        Subject: CN=69a378d0-8ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:fd:c2:db:81:e6:2c:ec:f8:23:1a:3d:cc:
                    c0:b7:7c:88:4b:11:41:3d:01:b0:53:c5:d8:54:01:
                    36:42:ab:fa:1f:34:ca:e4:4f:80:d2:46:36:50:8a:
                    62:6f:3d:17:fc:b0:33:a5:19:33:21:66:6e:d9:d5:
                    b9:28:10:a2:a7:2d:46:56:fb:35:e6:6f:a2:7b:2a:
                    06:b8:41:b8:71:48:53:1c:c6:45:bc:a9:cc:8f:ff:
                    de:89:62:d6:d3:d8:a1:c6:92:18:1b:ef:e9:da:fc:
                    3a:bf:c5:8a:56:61:44:99:22:18:e1:c3:f1:01:b4:
                    13:54:f9:22:38:4e:23:9e:61:04:8d:a2:dd:45:81:
                    2f:95:f7:93:86:c9:6a:e1:11:de:d7:b4:17:c9:a9:
                    a3:9c:4a:0e:89:70:98:82:bb:3d:bf:c1:5d:4f:36:
                    60:69:28:b8:e6:89:24:e1:f6:90:2c:6d:c9:4f:b7:
                    e8:30:2c:ed:05:f5:95:8e:1b:6c:ea:f0:cd:17:d3:
                    4c:a9:a7:79:84:66:ad:47:ed:2b:e5:db:8c:e3:eb:
                    c0:19:77:50:62:6c:7a:31:99:d9:54:be:26:44:de:
                    84:54:12:3f:18:b1:c0:2e:1e:3f:96:4f:22:37:e2:
                    49:4f:1f:a5:5a:b4:2a:90:cd:2e:33:57:81:11:24:
                    82:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4F:3F:EC:CA:8E:9B:75:12:6E:4A:3E:5D:5B:4D:4F:2F:47:A9:14
            X509v3 Authority Key Identifier:
                keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:14:15:c2:bb:e2:a3:73:4d:04:b4:7a:7f:96:32:d2:bd:bb:
         39:61:3f:33:53:01:8c:0f:ca:04:85:f4:b6:0a:58:1c:91:f1:
         2b:d1:72:d2:6d:d2:21:78:9f:a9:ef:01:52:ea:bb:2f:7a:8f:
         d6:11:0e:8e:62:0b:45:4e:7e:49:9e:7e:4d:b6:53:3a:4b:ad:
         57:d0:52:f6:c5:31:81:25:01:80:60:a1:6d:69:32:c8:df:e0:
         5f:2c:dd:07:94:2d:24:21:0e:e6:b9:c2:53:52:ff:ff:c3:b7:
         21:df:a4:25:ce:db:0a:40:37:80:c0:b2:25:9a:e9:f7:91:a2:
         67:74:22:b7:9c:09:eb:d2:cb:76:09:9a:b4:93:08:9b:d0:0a:
         99:0b:2b:7f:3f:f0:82:42:25:23:89:80:50:c7:57:bf:a7:72:
         a5:f4:89:da:b3:c7:35:3f:8f:1f:41:4c:28:13:46:14:8e:a3:
         28:4f:35:cf:ac:4e:32:02:22:f8:94:f7:4d:b3:1e:ad:10:d9:
         c2:e2:52:50:e2:f7:d4:fa:d8:24:75:14:48:0f:24:45:9c:c4:
         34:c7:c5:9a:61:2c:53:56:20:ff:55:6f:18:f7:c3:95:3c:1f:
         76:51:92:ea:63:a8:a6:6f:2d:04:db:67:4e:ea:b9:82:d5:02:
         c5:b5:eb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:31:39 2026 by rpki-client