Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
File:                     QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json)
Hash identifier:          qDvIc0zVLcGcqouIxGyowL9IuSiSaurAz7iIXOagRQA=
Subject key identifier:   D5:26:62:B3:97:74:9C:C1:C9:7A:5C:06:C4:BD:BC:6E:0D:08:C8:B0
Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
Certificate issuer:       /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Certificate serial:       02D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
Manifest number:          02D3
Signing time:             Sun 05 Apr 2026 01:07:35 +0000
Manifest this update:     Sun 05 Apr 2026 01:07:35 +0000
Manifest next update:     Sun 12 Apr 2026 01:07:35 +0000
Files and hashes:         1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: 8UTAPw2qSMyZm5LDwuLQUB994fgRwTkVigKK21yLqg0=)
                          2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: uZ2kWd7kpQaiTAnnZXgkNaCLyHsmkWGjAKTYejP6cVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
                          rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
        Validity
            Not Before: Apr  5 01:07:35 2026 GMT
            Not After : Apr 12 01:07:35 2026 GMT
        Subject: CN=69d1b5d7-060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:5c:54:44:03:23:ff:5c:d0:24:06:ea:ad:
                    02:47:22:09:c3:52:db:49:0e:5c:e2:39:05:1e:06:
                    ab:8f:95:2f:f4:80:b3:05:84:46:8d:2c:ee:7d:97:
                    4f:40:9b:54:a3:0c:67:a2:47:d8:52:9f:84:52:65:
                    fc:72:51:e3:40:b1:fa:08:a5:92:b7:d0:5d:c8:3a:
                    0c:fe:fb:da:ca:c4:00:1c:d1:d4:b1:75:14:61:5b:
                    e4:26:93:e0:bc:27:3c:73:e8:1c:50:70:14:d7:95:
                    43:0c:29:2c:f2:a3:67:21:5f:1d:63:0d:14:5f:06:
                    5d:54:61:fd:72:31:c1:26:54:f7:4f:c6:72:8d:ef:
                    5a:95:0f:fb:07:fe:d4:93:90:df:9e:cd:82:60:23:
                    38:4f:67:18:62:55:5a:41:22:3a:e3:00:e6:7c:c6:
                    29:f3:95:e5:93:49:4d:87:7e:a8:d9:c9:fa:d4:51:
                    b4:ba:d5:11:a7:ff:9c:14:69:68:e3:00:4a:d6:16:
                    c0:3e:f4:3b:46:26:f0:cc:23:a0:7b:5c:e6:64:e8:
                    08:ee:b4:54:77:e5:7f:aa:f3:61:07:cf:7e:71:68:
                    0c:fc:df:e2:1d:c7:98:55:d8:70:d5:b3:0f:55:a5:
                    54:d8:c2:b5:9d:9f:f6:57:d2:2f:08:7c:61:37:7e:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:26:62:B3:97:74:9C:C1:C9:7A:5C:06:C4:BD:BC:6E:0D:08:C8:B0
            X509v3 Authority Key Identifier:
                keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d7:90:44:09:4a:6a:65:91:13:4e:c9:c6:c3:37:8c:d9:ba:
         46:6d:1f:13:59:e8:0c:ec:6e:4a:03:fd:f4:c2:2d:c2:6d:92:
         4e:ee:56:b6:86:85:f0:17:a5:51:54:ff:92:3a:d7:a3:c0:1e:
         19:a6:f5:14:ec:7c:80:e5:ce:52:50:5b:52:6b:93:da:2f:59:
         34:f2:7c:a4:9a:ed:f3:e7:2d:54:f8:3a:0b:55:90:e1:92:74:
         03:86:42:9c:7f:20:c8:20:03:bd:4c:a7:03:b0:8f:dd:28:41:
         07:0b:52:4b:82:e6:df:36:64:90:19:65:0a:8c:0c:46:5e:59:
         a0:d4:7d:d1:13:c8:cd:8d:ba:16:b6:18:8a:5b:5c:b7:87:38:
         9c:3f:90:af:03:1e:f8:45:02:4f:9c:8c:84:30:58:52:c1:10:
         33:0c:bc:1b:a1:63:51:31:14:6c:77:c5:08:42:dd:3e:37:ca:
         0d:44:51:bb:75:a2:98:0b:41:45:b9:4e:a8:ad:9c:c8:ef:5e:
         cd:64:6d:29:f7:14:9f:85:cb:4e:e9:2b:f5:9e:11:81:66:73:
         75:6d:60:e0:bd:fc:bd:6e:07:e7:e7:ca:a1:7c:40:db:8d:2c:
         2e:7d:5a:26:d9:1d:c1:57:51:9d:1c:d9:3a:a2:64:b0:91:37:
         aa:2c:99:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:00 2026 by rpki-client