Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
File:                     jQmbFr6Vddy0uwaFh5eZn1XmA18.mft (raw, json)
Hash identifier:          ajXYttzd6c/OmVGSKIxGvqPR39Hg+UvsvqXXwe2T/+4=
Subject key identifier:   73:66:CE:5A:4C:5B:DA:01:53:76:B9:76:32:D5:F2:8E:D7:81:42:90
Authority key identifier: 8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F
Certificate issuer:       /CN=A912AEFA/serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
Certificate serial:       3578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
Manifest number:          354E
Signing time:             Sat 04 Apr 2026 15:13:23 +0000
Manifest this update:     Sat 04 Apr 2026 15:13:22 +0000
Manifest next update:     Sat 11 Apr 2026 15:13:22 +0000
Files and hashes:         1: jQmbFr6Vddy0uwaFh5eZn1XmA18.crl (hash: OyPsqRVq0wRKqhoQVHaNZJ7MjBRJ84du6sSiCNxtr+E=)
                          2: E92E6ACA025411F1B5CF90C0233D8C67.roa (hash: UV8f86HTjxEJSP4uwYb5rWdL2gxSvjECKlRWXIr/6K8=)
                          3: 7192AD9E071211EAAD4E340AC4F9AE02.roa (hash: 8Jonk83mWaohXzy8u3pliKQ5Lui9A89G4dRwvaO5ka8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl
                          rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13688 (0x3578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AEFA, serialNumber=8D099B16BE9575DCB4BB06858797999F55E6035F
        Validity
            Not Before: Apr  4 15:13:22 2026 GMT
            Not After : Apr 11 15:13:22 2026 GMT
        Subject: CN=69d12a93-e7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:85:ad:2f:e1:95:e8:c5:e7:59:71:33:93:
                    52:6a:f7:43:3b:95:d0:34:23:7b:4e:25:f9:29:d4:
                    51:2b:38:56:cb:02:c1:48:cb:f0:b8:24:de:ae:2e:
                    36:11:f3:88:97:16:83:91:5d:29:ab:45:65:43:8f:
                    45:26:e2:11:09:d4:7b:f5:3c:6a:79:4b:c6:a4:9e:
                    d4:27:8a:a4:a8:23:8e:37:10:a1:32:33:71:9c:a7:
                    9c:5a:0b:eb:8d:6e:c9:ef:2c:bc:bf:ab:a4:a2:4d:
                    f6:4c:34:68:9c:7a:be:a6:fd:47:7d:14:c1:50:74:
                    d4:9f:1e:35:f0:03:8e:9c:15:24:3e:75:77:fb:25:
                    d9:0b:90:af:da:52:1c:b8:6d:3d:eb:1a:9f:3b:03:
                    7b:5a:d2:29:02:c1:3d:39:86:00:8f:a7:11:9d:b2:
                    53:cb:f6:9c:ed:ad:ed:c0:b9:56:3e:54:ce:fc:dd:
                    b8:b7:dc:7c:4a:8e:88:ba:2a:91:fc:6e:95:1f:27:
                    b9:92:fb:a0:e0:79:be:26:29:ae:07:51:08:b6:91:
                    50:2e:cd:a8:98:0b:13:a8:88:e8:42:bf:c0:7f:70:
                    fd:25:cb:0d:0a:71:e0:55:f2:74:76:89:85:a4:60:
                    3a:75:06:93:17:5f:18:1c:95:f3:c4:2b:44:f2:67:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:66:CE:5A:4C:5B:DA:01:53:76:B9:76:32:D5:F2:8E:D7:81:42:90
            X509v3 Authority Key Identifier:
                keyid:8D:09:9B:16:BE:95:75:DC:B4:BB:06:85:87:97:99:9F:55:E6:03:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jQmbFr6Vddy0uwaFh5eZn1XmA18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AEFA/C4B592661DA911E296BBFEA408B02CD2/jQmbFr6Vddy0uwaFh5eZn1XmA18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:bc:43:94:24:f3:a2:ef:c4:ae:c5:a5:68:07:7c:9a:ae:3b:
         9f:d1:00:e3:f5:f7:76:58:b2:59:15:d6:64:1e:9e:fa:2b:41:
         52:b2:c1:4b:e6:66:b1:08:1e:6b:c7:03:a0:41:e2:be:35:27:
         c4:02:9c:22:c4:c0:d6:36:4d:6a:2c:c4:f4:73:14:91:d6:bc:
         f1:92:3d:12:cf:26:64:9a:ce:d7:dd:e8:45:2d:b4:60:12:bc:
         19:11:ff:19:1b:f1:48:2b:fa:e4:c4:4f:c4:53:9f:cc:26:9f:
         91:e0:70:2d:47:b9:63:cd:43:85:1b:02:5f:4c:b1:40:b4:93:
         91:d9:ff:b1:19:e6:0f:5f:f0:ab:8c:5f:d6:c4:f7:da:2f:fe:
         9d:25:fb:4f:5b:f2:8a:29:d7:fe:ad:a2:c7:22:82:ef:38:4e:
         35:22:d5:6e:a5:9f:f7:e4:87:ee:c9:62:62:88:76:27:c3:98:
         ea:27:fd:e6:8f:08:02:1c:a0:29:e6:33:d5:97:42:8a:4d:15:
         87:f8:dd:b3:d4:97:87:5a:f9:74:e0:aa:c7:85:d5:b3:a8:d3:
         84:81:2b:fc:23:2c:92:1a:ba:99:4f:bc:b5:c6:de:ff:38:62:
         39:b7:36:b6:c4:d1:86:5d:8c:67:88:6d:8d:45:2b:02:78:9d:
         c5:09:a6:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRkExMTAvBgNVBAUTKDhEMDk5QjE2QkU5NTc1RENCNEJCMDY4NTg3OTc5OTlG
NTVFNjAzNUYwHhcNMjYwNDA0MTUxMzIyWhcNMjYwNDExMTUxMzIyWjAYMRYwFAYD
VQQDEw02OWQxMmE5My1lN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIWFrS/hlejF51lxM5NSavdDO5XQNCN7TiX5KdRRKzhWywLBSMvwuCTeri42
EfOIlxaDkV0pq0VlQ49FJuIRCdR79TxqeUvGpJ7UJ4qkqCOONxChMjNxnKecWgvr
jW7J7yy8v6ukok32TDRonHq+pv1HfRTBUHTUnx418AOOnBUkPnV3+yXZC5Cv2lIc
uG096xqfOwN7WtIpAsE9OYYAj6cRnbJTy/ac7a3twLlWPlTO/N24t9x8So6IuiqR
/G6VHye5kvug4Hm+JimuB1EItpFQLs2omAsTqIjoQr/Af3D9JcsNCnHgVfJ0domF
pGA6dQaTF18YHJXzxCtE8mdbuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNmzlpM
W9oBU3a5djLV8o7XgUKQMB8GA1UdIwQYMBaAFI0Jmxa+lXXctLsGhYeXmZ9V5gNf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVGQS9DNEI1OTI2NjFE
QTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRkeTB1d2FGaDVlWm4xWG1B
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pRbWJGcjZWZGR5MHV3YUZoNWVabjFYbUExOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUVGQS9DNEI1OTI2NjFEQTkxMUUyOTZCQkZFQTQwOEIwMkNEMi9qUW1iRnI2VmRk
eTB1d2FGaDVlWm4xWG1BMTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADrxDlCTzou/ErsWlaAd8mq47n9EA4/X3dliyWRXWZB6e+itBUrLBS+ZmsQge
a8cDoEHivjUnxAKcIsTA1jZNaizE9HMUkda88ZI9Es8mZJrO193oRS20YBK8GRH/
GRvxSCv65MRPxFOfzCafkeBwLUe5Y81DhRsCX0yxQLSTkdn/sRnmD1/wq4xf1sT3
2i/+nSX7T1vyiinX/q2ixyKC7zhONSLVbqWf9+SH7sliYoh2J8OY6if95o8IAhyg
KeYz1ZdCik0Vh/jds9SXh1r5dOCqx4XVs6jThIEr/CMskhq6mU+8tcbe/zhiObc2
tsTRhl2MZ4htjUUrAnidxQmmAw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client