Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
File:                     qJaxcL8NiHI_NsesIIeFSqKEvXE.mft (raw, json)
Hash identifier:          3ZczB4a4E7VnLRcijM8ld0YQpLgnV0l9/cFADr1iX8E=
Subject key identifier:   57:EE:EF:0C:E9:FE:89:C6:80:74:92:BB:72:AC:BB:37:19:4A:38:62
Authority key identifier: A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71
Certificate issuer:       /CN=A913DF3B/serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
Certificate serial:       05F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
Manifest number:          05E8
Signing time:             Sat 04 Apr 2026 22:43:56 +0000
Manifest this update:     Sat 04 Apr 2026 22:43:55 +0000
Manifest next update:     Sat 11 Apr 2026 22:43:55 +0000
Files and hashes:         1: qJaxcL8NiHI_NsesIIeFSqKEvXE.crl (hash: msx97CG0dHFsbLDq7Fjzt2wtt3EAPIy3TNMYXbJc4zU=)
                          2: 8D7E9B7EF03D11EB804DF61FC4F9AE02.roa (hash: ma+DNS3MZoAgjxWhTTX9baQIdHEsD5fkm6hMo1qHO0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl
                          rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DF3B, serialNumber=A896B170BF0D88723F36C7AC2087854AA284BD71
        Validity
            Not Before: Apr  4 22:43:55 2026 GMT
            Not After : Apr 11 22:43:55 2026 GMT
        Subject: CN=69d1942c-4616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:02:e4:c3:37:86:fb:f8:78:4a:02:ad:f6:
                    c4:ce:3e:dd:e5:ac:8b:1b:c1:7b:7d:61:42:86:45:
                    f1:74:47:df:bd:3d:d9:a6:27:5b:9b:6d:6e:a0:59:
                    6a:ec:cb:b1:0f:32:d4:fc:8d:b3:45:6c:a7:ae:8c:
                    65:e3:71:ab:c1:de:5b:b4:98:88:14:a3:69:ff:90:
                    da:74:66:6d:ee:a4:e5:19:32:df:c2:fe:a0:a9:d0:
                    be:8a:93:f2:96:c9:b9:04:92:40:44:20:86:91:79:
                    f0:bd:6d:ca:f0:5b:45:90:9f:ad:1d:ac:94:39:34:
                    6b:61:b8:27:ee:00:c7:28:e0:61:4f:47:4f:97:d8:
                    6b:e8:9b:70:19:6e:19:5e:35:3c:77:58:b8:fb:62:
                    0f:67:b5:d4:f1:9a:1a:7f:03:4d:b2:e7:2d:1d:b3:
                    74:7b:aa:1c:19:d3:2a:ab:18:c0:3d:b9:06:54:19:
                    20:c7:8a:b2:56:29:12:c6:82:2a:3b:50:71:70:74:
                    77:c6:43:89:90:1a:aa:f1:f5:8d:83:c7:9d:13:8f:
                    b6:dd:54:1b:6b:68:22:55:0a:cd:46:32:e4:a3:62:
                    07:04:ea:01:df:ea:ae:d9:47:38:c1:b7:65:9c:e0:
                    01:93:8f:c6:08:cb:c5:04:87:74:c1:cc:85:58:67:
                    d0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:EF:0C:E9:FE:89:C6:80:74:92:BB:72:AC:BB:37:19:4A:38:62
            X509v3 Authority Key Identifier:
                keyid:A8:96:B1:70:BF:0D:88:72:3F:36:C7:AC:20:87:85:4A:A2:84:BD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJaxcL8NiHI_NsesIIeFSqKEvXE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF3B/CDBA812EF03A11EB8D30E058C4F9AE02/qJaxcL8NiHI_NsesIIeFSqKEvXE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5c:dd:1b:36:4a:5b:60:b7:74:fb:11:7e:19:2a:16:55:03:
         b0:8d:83:1f:f3:f7:1f:0f:de:bd:35:80:55:0b:27:4b:7c:5a:
         d9:3b:68:b4:a1:e3:bd:69:b6:a3:e8:6a:1b:74:5e:4b:a4:39:
         3c:c2:f6:de:ec:28:7d:a5:79:6a:29:1a:73:98:e1:04:67:e9:
         b1:0f:c4:b1:9d:88:d0:a4:35:e4:99:70:ff:99:0f:6d:03:4d:
         58:0c:9a:24:44:ce:c1:f2:68:6f:f3:35:df:53:09:55:ce:6a:
         88:2c:5e:a1:e0:3d:2a:2b:55:cd:e8:74:74:25:8f:98:78:7e:
         d4:68:c9:ce:0c:ad:bf:5f:33:07:27:ce:91:59:68:81:a0:2e:
         5a:8e:bf:56:a2:59:12:1e:d8:6f:d1:93:19:2c:3f:85:85:2d:
         33:a0:7c:1e:a3:95:65:ea:be:54:2e:fb:68:fe:0c:08:23:05:
         59:15:3a:f2:05:5e:1c:01:c6:98:ec:09:cc:2b:58:a0:f7:4f:
         a0:9f:71:16:a7:a7:99:e7:f3:8e:be:9e:ea:e2:90:62:01:03:
         0f:68:b2:4c:b6:0a:4c:59:1c:fa:c3:f8:db:da:d2:1d:be:2c:
         65:9a:67:22:c5:23:b8:25:06:03:f6:cb:3a:16:be:3d:91:a7:
         7c:fd:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:15 2026 by rpki-client