Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
File:                     QeLjUgZMov-eIcSENVrALkQHJY0.mft (raw, json)
Hash identifier:          Es/2AT9Ouqr9bA9+O0Z+fSEyAfQAHqUdrIq3eHmTqBM=
Subject key identifier:   D6:56:AC:E8:52:72:54:F3:73:10:B1:D0:4D:EB:4A:25:C8:DA:BA:15
Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D
Certificate issuer:       /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
Certificate serial:       064B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
Manifest number:          0641
Signing time:             Wed 20 May 2026 22:45:33 +0000
Manifest this update:     Wed 20 May 2026 22:45:33 +0000
Manifest next update:     Wed 27 May 2026 22:45:33 +0000
Files and hashes:         1: QeLjUgZMov-eIcSENVrALkQHJY0.crl (hash: WGkz0RdXBMLUp2EPDrQSFOuWfsLW246GowGqUqm7IOk=)
                          2: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (hash: APtBc0Fg5uoB90s7FYUbm7HkOE2poEQup95WnZBKZc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl
                          rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D
        Validity
            Not Before: May 20 22:45:33 2026 GMT
            Not After : May 27 22:45:33 2026 GMT
        Subject: CN=6a0e398d-16b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:db:42:5c:13:d5:0f:e0:f9:a5:96:ca:2c:
                    8e:d6:e1:f2:ad:84:29:df:c9:09:c0:23:d7:52:4a:
                    35:d7:33:bc:16:62:8b:58:48:93:04:93:c3:21:b3:
                    17:d4:8e:fc:dc:d9:7e:dc:d5:0f:95:9a:ec:d1:de:
                    c8:bc:ab:c9:a0:47:79:23:82:62:5c:a0:cc:4f:82:
                    09:df:c2:be:2c:69:c0:1a:42:20:b2:c5:7d:4f:b4:
                    ec:13:19:6b:2f:a9:b2:e8:0c:9e:9a:38:78:eb:a2:
                    fd:7b:10:d6:92:aa:fc:d7:49:07:37:d1:af:db:a4:
                    5a:70:3f:3a:8f:1b:31:ea:1e:2b:d8:c0:54:5e:2f:
                    65:a4:e8:75:e7:d1:7b:ee:60:93:ff:f4:a7:88:68:
                    dd:68:20:dc:52:90:25:0e:dc:28:e5:e6:56:07:a6:
                    fe:f0:69:39:30:bf:05:c7:09:91:50:77:fd:18:b8:
                    6d:e6:e4:67:48:bc:a0:89:bf:42:ef:14:f5:55:0e:
                    4e:15:a2:34:f8:3f:94:e4:11:78:6e:93:e6:ae:e2:
                    80:80:5f:e4:3e:5e:18:2a:81:d6:49:f2:01:e0:07:
                    64:30:7c:d9:52:b7:89:51:a8:76:16:9c:19:fe:73:
                    94:3a:c9:36:10:9e:ac:ae:a0:94:d7:c2:d0:6a:f5:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:AC:E8:52:72:54:F3:73:10:B1:D0:4D:EB:4A:25:C8:DA:BA:15
            X509v3 Authority Key Identifier:
                keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:2e:dc:ea:3e:eb:aa:05:d0:4d:27:a3:f7:41:9d:96:dc:
         50:f7:1b:88:53:45:4f:99:c6:2c:44:bb:56:7b:0a:1f:33:14:
         5b:0f:f9:32:ca:cc:8b:6f:6d:a1:be:82:82:06:0e:92:0d:e9:
         41:90:5d:e9:be:68:4c:48:84:93:ef:29:28:9d:86:e3:41:4b:
         74:f0:84:b9:eb:29:f0:1c:5f:71:87:0b:3f:6b:67:0d:74:d7:
         47:e2:6d:c8:57:20:7e:90:37:a7:2c:99:5e:42:c1:9a:3a:09:
         79:23:a4:6a:6d:6b:0a:3a:3a:02:00:33:5e:70:6c:04:2a:cb:
         e2:6b:28:5b:ee:7f:8e:e2:57:4e:ee:2e:d1:78:e3:57:9d:d5:
         25:c4:fa:b5:c4:56:87:f2:dd:0d:c5:8b:de:55:67:d2:bf:cc:
         62:9a:e1:eb:1c:d0:a5:f9:0a:7a:fe:4a:b4:fb:c9:62:cb:7a:
         49:4e:57:f3:5a:e6:f5:fc:21:a3:3d:1d:83:f2:0d:77:2e:28:
         5d:94:f7:6e:ea:55:2f:b3:23:bc:7e:07:6a:62:ba:c5:cc:ad:
         89:f7:93:cf:04:5d:75:60:6d:a8:a3:6d:16:dc:ee:88:7f:bf:
         00:4e:12:b6:71:59:e7:7e:87:a4:78:43:9c:af:c0:20:f8:21:
         45:04:ac:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:41 2026 by rpki-client