Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File:                     qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier:          LxUvf60zOeqV5JQfdGnplX/KYB+vZVfZJNfvoTK2mNM=
Subject key identifier:   04:6D:2E:63:7D:29:13:C4:BC:40:C2:27:4C:A1:AB:E3:A5:CD:2B:2C
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer:       /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial:       05DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number:          05D6
Signing time:             Mon 02 Mar 2026 01:23:01 +0000
Manifest this update:     Mon 02 Mar 2026 01:22:59 +0000
Manifest next update:     Mon 09 Mar 2026 01:22:59 +0000
Files and hashes:         1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: 5l+O2e+BYRLFzSgrxL77tjdrvaRbQtAWvn1M8VYqvPw=)
                          2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
                          rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
        Validity
            Not Before: Mar  2 01:22:59 2026 GMT
            Not After : Mar  9 01:22:59 2026 GMT
        Subject: CN=69a4e674-2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:b5:d4:db:1f:67:d7:06:60:f2:60:dd:d0:
                    7a:aa:0b:c8:87:9a:a8:84:c9:2b:3f:00:19:4e:22:
                    47:a8:c8:35:9f:be:7b:13:98:44:93:60:61:44:25:
                    3b:33:4c:c4:e1:9b:f1:11:51:97:fb:64:7f:d5:1e:
                    74:d4:ea:a0:da:b7:43:c7:89:c8:b2:9a:26:e3:d7:
                    95:5d:cb:f1:fa:0e:87:97:3c:5b:2f:b3:51:1a:5e:
                    0f:5e:dd:fa:8e:65:c6:84:e3:20:07:d1:58:6a:32:
                    c1:15:42:82:d0:c9:61:2e:0d:dd:70:1d:91:93:49:
                    24:05:b5:91:f4:b4:4d:f8:44:7a:3d:d1:66:cc:b8:
                    00:88:31:06:1c:ea:80:b4:1e:7c:e6:57:71:03:5e:
                    1d:4f:27:ad:b0:66:24:e0:85:95:98:54:9c:14:5d:
                    2c:f0:fb:bf:2c:09:67:bc:14:fe:50:89:e6:8f:fb:
                    7f:70:f5:80:c0:d4:3d:1f:50:30:7b:fc:b0:e7:82:
                    eb:28:81:5d:e5:9d:6a:c7:47:04:cf:61:59:14:49:
                    87:91:9f:78:be:1c:a1:77:29:b7:44:53:60:7e:c8:
                    6c:e7:da:ef:af:98:57:95:0d:de:40:9c:ee:68:a3:
                    db:4f:fb:e7:9b:ba:09:7a:14:dc:94:c0:41:61:8e:
                    54:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6D:2E:63:7D:29:13:C4:BC:40:C2:27:4C:A1:AB:E3:A5:CD:2B:2C
            X509v3 Authority Key Identifier:
                keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:e7:69:42:b1:ed:26:80:b5:ad:c0:be:b2:89:82:38:5b:
         e2:c6:42:54:51:75:86:7f:63:ba:de:2e:28:4a:1c:0a:49:e4:
         d2:08:4f:45:61:54:36:28:9f:df:80:19:05:38:5b:0f:59:20:
         04:d2:d2:60:8d:45:88:e6:22:d0:63:3f:08:6c:cc:3d:a5:95:
         14:99:cc:cb:d2:a1:58:35:d2:a5:b4:d7:ae:a1:cc:88:1a:b3:
         fe:43:e1:8e:51:51:3c:d3:05:d1:a1:e8:73:ed:39:03:36:00:
         44:40:8a:c6:33:e4:e8:cc:9d:f2:b5:40:c5:9c:55:7e:bb:48:
         37:10:7d:c6:da:d7:02:2a:28:94:b6:3c:49:36:30:d1:97:d9:
         c6:81:33:7a:83:c4:1e:a8:79:de:af:09:57:5e:20:a5:50:a2:
         91:a2:16:f1:8a:7b:4e:50:e6:2c:80:a3:2e:c4:c0:6a:98:4d:
         1c:57:5a:dd:79:44:9b:44:8d:f2:e7:e7:1f:0d:f5:80:af:83:
         07:2c:6c:65:2e:68:ea:2f:93:9b:84:31:39:64:f3:39:b6:ff:
         76:3d:58:4b:b6:48:81:5a:21:69:ba:c5:67:5a:3e:d2:68:ae:
         04:52:dc:7e:a9:84:0f:94:00:a7:e7:0c:4e:a7:06:69:3b:c3:
         ac:44:16:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:45:12 2026 by rpki-client