Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          VckdmrYt52EBuGFlN9EgY5Vk8lT0k6gAiLc44oCRsW8=
Subject key identifier:   67:00:CB:86:4B:E4:36:5B:92:67:21:04:BB:F4:1E:3D:5F:38:EF:C8
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1B40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1B29
Signing time:             Wed 18 Mar 2026 15:33:38 +0000
Manifest this update:     Wed 18 Mar 2026 15:33:38 +0000
Manifest next update:     Wed 25 Mar 2026 15:33:38 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: r5zjFyQvhbhlr2Ek+HG1QkRDDV+gMI73B7FTs2Kzmwo=)
                          2: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: QIeEwJm55ZcZzI7KhRs53tpp9RHw/dtleQOxkrbNGvg=)
                          3: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: O5gqS4NNOI05UQqMR9lNiHVk+hGRQCkED61BdghCLKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 15:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6976 (0x1b40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: Mar 18 15:33:38 2026 GMT
            Not After : Mar 25 15:33:38 2026 GMT
        Subject: CN=69bac5d2-4a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5c:50:48:94:5c:36:ea:3c:5d:69:dc:1e:0a:
                    7e:fa:0a:64:e2:7e:d1:5a:a0:11:ed:10:b6:78:5c:
                    4f:50:59:2c:3e:f9:d7:c8:c4:98:ef:e9:8b:d5:f4:
                    42:ab:ca:54:b0:df:b1:c4:b4:19:32:a6:42:8c:35:
                    02:ee:95:59:8f:b5:aa:d8:29:51:63:c1:75:bd:ab:
                    97:b4:2c:83:47:30:18:06:35:96:56:b8:59:07:ca:
                    29:d2:3f:af:15:0e:64:58:13:0d:63:4f:94:77:c4:
                    3d:1b:e5:7a:11:00:f6:7e:e5:02:f2:9c:f5:6d:b2:
                    52:ac:22:0b:41:c5:23:85:c5:d1:f8:c8:01:77:c6:
                    36:65:2c:10:da:19:6a:38:49:af:ba:e5:be:40:e3:
                    87:49:e2:26:8f:22:38:11:2e:64:c0:e9:b1:ef:3b:
                    b7:41:d5:86:f7:1b:39:46:a8:f7:53:27:e1:74:62:
                    84:fc:f0:e9:7e:2e:99:d3:86:7b:99:9b:da:b8:9e:
                    f1:ee:03:2d:00:2c:86:69:7c:57:5f:24:8b:49:17:
                    db:ac:02:cf:46:7b:30:c7:21:3e:c7:8b:b1:34:bb:
                    c5:e4:42:f9:10:c2:e3:55:f9:02:25:7f:ac:81:07:
                    6d:ea:ef:37:4a:0f:03:cf:3b:dd:2d:ad:3d:c0:dd:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:00:CB:86:4B:E4:36:5B:92:67:21:04:BB:F4:1E:3D:5F:38:EF:C8
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:c1:a7:f2:55:26:2a:1f:96:73:73:94:61:ba:1a:5d:31:c3:
         bb:96:87:52:95:fa:ec:e2:d4:f5:c0:05:d0:6f:82:4e:2e:c0:
         b3:bc:d1:59:47:db:6e:75:43:31:7f:22:93:76:ea:36:bf:6c:
         c0:5d:0e:4b:ed:c1:1a:34:6a:1b:52:26:89:7a:6e:44:a0:94:
         1d:e8:58:2d:66:87:a6:7d:e0:f5:7d:62:bd:4e:81:d3:3a:01:
         f4:97:47:1b:ca:fc:1f:1e:35:cd:93:e6:2c:ed:27:0a:aa:cb:
         d5:c4:c9:f3:78:9a:f7:17:45:9c:d6:af:35:93:d8:c7:66:cd:
         f0:83:61:b5:1d:f3:6e:45:a5:89:46:41:11:f9:f9:07:56:9c:
         d5:26:de:fb:56:6b:61:9a:76:e5:e0:86:be:5a:ca:9b:2a:7e:
         b6:09:7c:05:37:b5:d9:08:e2:70:bc:fa:e0:48:0a:c4:fe:47:
         ee:d3:be:7c:87:0e:2a:67:4f:61:12:a7:d7:35:54:c6:05:34:
         f6:42:07:4d:2e:d3:4d:13:8f:d6:4b:b3:81:e3:f9:95:0d:05:
         f4:a8:9d:3f:c4:0d:b0:5c:a0:62:82:58:44:b8:a9:32:1a:6a:
         8d:92:e6:7d:35:6a:34:77:ac:9d:69:50:93:40:c4:fb:d7:20:
         18:91:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:46:51 2026 by rpki-client