Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
File:                     QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json)
Hash identifier:          g8Aaep4TkPEheFawzwNb0N3SxBMIImqRdMcjUQzWU6M=
Subject key identifier:   F6:22:7A:F6:0D:B4:B8:C3:41:DB:51:7C:43:AD:CD:B9:0F:F6:77:72
Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11
Certificate issuer:       /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
Certificate serial:       0320
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
Manifest number:          031A
Signing time:             Wed 19 Aug 2026 01:29:13 +0000
Manifest this update:     Wed 19 Aug 2026 01:29:12 +0000
Manifest next update:     Wed 26 Aug 2026 01:29:12 +0000
Files and hashes:         1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: VcSTX/b8aq/+tkd72fBHWfmbzVX8kabYAx94XrKYBGY=)
                          2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: KjdHFdT4hMQndSJL6UoMqkq2ZW2qsfB7WspT9fMf+Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl
                          rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011
        Validity
            Not Before: Aug 19 01:29:12 2026 GMT
            Not After : Aug 26 01:29:12 2026 GMT
        Subject: CN=6a8506e9-d616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:c9:12:0b:91:fb:d9:65:b4:ed:ef:d3:4d:
                    94:95:fa:1c:26:9d:f4:ce:ed:b8:c0:5e:45:14:50:
                    0b:7c:c1:01:7a:fe:cf:f2:54:a3:d3:29:f0:01:86:
                    44:48:e2:3a:47:ac:03:4d:31:6b:32:a7:39:d2:7e:
                    38:02:0a:94:cc:45:d9:bf:95:6f:7d:19:25:ba:2e:
                    c7:60:d0:f6:29:fe:9c:09:a6:51:3d:5b:34:e9:86:
                    04:bd:31:46:9e:ab:a2:39:c5:64:a8:eb:1b:f0:e5:
                    a4:cb:26:a3:35:4a:e1:90:b7:42:d9:93:ad:91:22:
                    ec:69:b6:51:8d:ca:a0:fe:01:44:d9:c8:49:f4:2f:
                    24:b5:9c:0c:b9:97:e2:ea:e8:05:51:66:2a:5c:dd:
                    47:31:8e:95:3e:bc:1a:91:c3:04:fa:dd:81:8d:2b:
                    a1:17:b3:d7:3c:e0:c0:73:91:30:0e:d4:7e:76:9f:
                    9d:6e:d8:df:98:56:5c:46:a8:49:ce:e8:89:3e:5e:
                    4a:17:4c:52:85:6b:4d:c9:9a:0f:03:da:33:4a:5a:
                    0b:46:b9:78:c9:10:21:68:09:af:a8:d2:8a:4d:45:
                    3c:ce:b4:c2:e5:52:71:7c:5a:21:58:0c:88:0d:46:
                    63:4d:0a:23:73:15:cb:52:a5:4a:da:bb:de:90:54:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:22:7A:F6:0D:B4:B8:C3:41:DB:51:7C:43:AD:CD:B9:0F:F6:77:72
            X509v3 Authority Key Identifier:
                keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ed:df:3c:d0:30:2d:ac:5a:80:14:8c:82:5c:57:8b:93:d9:
         4f:92:2f:c7:9c:72:e1:26:f0:e3:b0:6f:82:1d:b7:5b:1d:00:
         80:43:1b:f1:0d:2b:98:d5:52:38:91:27:73:c5:6d:6e:e7:af:
         2d:b1:1d:0c:b8:1b:e4:a6:8a:a0:a9:af:37:bb:e1:0d:b0:75:
         af:90:a6:0b:cd:5f:e7:0f:00:f8:a0:5e:d4:78:e2:7d:be:2d:
         5f:bf:23:ff:b5:1c:4c:21:55:b7:9c:96:04:b7:c2:a2:be:da:
         6e:31:7d:09:a6:26:a2:7a:cc:5d:15:e2:d4:7d:07:30:5a:67:
         7b:88:66:53:6e:e1:42:92:e6:ca:8b:39:80:e5:57:3a:12:b5:
         e2:46:5b:7c:59:13:a6:7f:d3:84:f6:24:a9:b3:81:b6:63:77:
         eb:40:a6:c1:f3:b5:dc:82:88:34:74:4a:78:ad:1e:1c:a4:9c:
         e8:0f:d3:0f:e3:99:84:80:57:bf:ee:17:96:21:af:01:9f:68:
         80:cc:e8:8d:14:b0:61:f2:82:6b:5e:b1:25:b8:0f:66:49:67:
         27:f0:ce:b7:27:e4:29:b7:e5:68:8c:08:88:f8:c6:66:e2:ba:
         31:d3:2d:ee:4b:22:94:2c:17:3e:0d:06:5c:bd:73:28:33:13:
         f6:62:2b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:29 2026 by rpki-client