Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
File:                     qjJWJCn4lsCly95WRDFIAzm-upc.mft (raw, json)
Hash identifier:          +luwbE2zRyOIGzNqUgFor35BAFd0bvKCqkoXxtmMGzI=
Subject key identifier:   85:3F:A3:88:EA:FE:50:BD:14:65:06:4A:7E:60:93:43:7B:A7:8D:99
Authority key identifier: AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97
Certificate issuer:       /CN=A9150F66/serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
Certificate serial:       1B59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
Manifest number:          1B42
Signing time:             Mon 04 May 2026 15:38:10 +0000
Manifest this update:     Mon 04 May 2026 15:38:10 +0000
Manifest next update:     Mon 11 May 2026 15:38:10 +0000
Files and hashes:         1: qjJWJCn4lsCly95WRDFIAzm-upc.crl (hash: FqxzeyYvzrZH/ZdPqT6Q1u5PI6Lq8og5gTQA8G03bOo=)
                          2: 7A1D009C0EB611ECB5408277C4F9AE02.roa (hash: O5gqS4NNOI05UQqMR9lNiHVk+hGRQCkED61BdghCLKA=)
                          3: 753F0A48CFB611EE83724A58C4F9AE02.roa (hash: QIeEwJm55ZcZzI7KhRs53tpp9RHw/dtleQOxkrbNGvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl
                          rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7001 (0x1b59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F66, serialNumber=AA32562429F896C0A5CBDE564431480339BEBA97
        Validity
            Not Before: May  4 15:38:10 2026 GMT
            Not After : May 11 15:38:10 2026 GMT
        Subject: CN=69f8bd62-6a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:22:98:e2:aa:23:8d:84:cc:57:df:d5:7c:
                    45:a7:a9:f2:d7:5a:47:5c:88:4a:63:f6:21:59:b0:
                    54:f7:d5:34:dd:e8:52:8c:4c:72:46:0e:b7:b4:56:
                    1e:42:ea:06:4c:08:81:42:f7:ff:57:3e:64:2b:d7:
                    61:15:c0:1c:d1:26:ef:f5:d2:68:43:3a:da:77:f1:
                    f7:3c:63:09:5e:9c:f6:35:0a:a3:85:1e:7c:5e:18:
                    1a:7a:78:ab:9d:78:09:07:24:1f:e9:72:0b:95:48:
                    e1:0a:87:38:12:47:0e:c5:4a:06:c0:ea:5a:18:ce:
                    5e:b7:bb:d7:e2:65:5a:f7:9e:ee:8b:2e:05:fa:f6:
                    b9:2c:c2:29:9e:53:f1:0a:4e:82:9f:68:56:75:59:
                    4b:c4:b9:ac:32:c3:b3:db:20:01:ee:4c:38:d1:60:
                    61:22:37:97:51:1f:9c:e9:0f:4c:fa:6e:f6:a3:5c:
                    62:47:85:3c:0f:7a:a6:16:25:c0:ae:19:e4:48:19:
                    04:c3:be:0c:11:3e:ad:6a:4a:0d:40:86:c1:5e:98:
                    ee:71:c5:b5:e5:99:10:71:e9:49:34:e7:d6:5e:0b:
                    2d:86:6e:fd:5d:d8:8f:63:63:90:24:62:66:3b:0a:
                    59:80:ac:a4:fc:24:5c:2e:54:97:82:b2:da:5d:0d:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3F:A3:88:EA:FE:50:BD:14:65:06:4A:7E:60:93:43:7B:A7:8D:99
            X509v3 Authority Key Identifier:
                keyid:AA:32:56:24:29:F8:96:C0:A5:CB:DE:56:44:31:48:03:39:BE:BA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjJWJCn4lsCly95WRDFIAzm-upc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F66/3D981CCC3A1E11E79AA0D51CC4F9AE02/qjJWJCn4lsCly95WRDFIAzm-upc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:43:ec:a6:0b:a0:65:25:6e:71:ec:b8:6c:ee:fb:32:ef:7e:
         3f:5a:b8:04:d5:2b:1e:f2:1c:37:89:6e:af:0c:f4:1e:45:26:
         97:80:79:ef:36:59:94:40:4b:b4:58:77:78:1a:ff:57:2b:99:
         ec:36:dd:53:3c:60:a3:79:7b:0e:5e:f8:a1:5e:ee:b5:30:ae:
         f9:5c:38:6b:b7:57:8d:db:9f:68:ff:aa:45:5f:69:6d:84:05:
         84:b1:0b:64:4e:f1:0b:69:bf:46:dc:21:6d:6a:df:5e:1b:42:
         32:02:02:21:b6:b7:a3:a7:47:d8:56:97:02:ba:59:15:f3:31:
         95:e3:ce:60:eb:14:d3:2b:28:50:e9:f2:a8:89:00:28:91:2c:
         89:46:0b:3e:d5:2a:b6:23:8c:cf:36:b4:be:03:b4:50:82:55:
         1a:4d:72:c0:d5:5b:8e:70:ec:fa:17:b3:8e:66:7d:d3:4e:6c:
         be:f2:eb:47:c5:7b:3f:45:3a:79:ac:bd:8e:fc:37:60:71:37:
         86:24:e7:d2:cb:93:e2:7b:0f:c8:e6:9a:fd:2e:41:19:79:e2:
         3e:9a:95:b1:82:bf:13:9a:c9:7d:4a:73:13:27:de:39:3b:16:
         fd:b4:99:71:ec:fa:ce:ed:0f:4c:be:a6:99:6a:b9:a9:d2:1b:
         29:42:27:48
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICG1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBGNjYxMTAvBgNVBAUTKEFBMzI1NjI0MjlGODk2QzBBNUNCREU1NjQ0MzE0ODAz
MzlCRUJBOTcwHhcNMjYwNTA0MTUzODEwWhcNMjYwNTExMTUzODEwWjAYMRYwFAYD
VQQDEw02OWY4YmQ2Mi02YTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukEimOKqI42EzFff1XxFp6ny11pHXIhKY/YhWbBU99U03ehSjExyRg63tFYe
QuoGTAiBQvf/Vz5kK9dhFcAc0Sbv9dJoQzrad/H3PGMJXpz2NQqjhR58Xhgaenir
nXgJByQf6XILlUjhCoc4EkcOxUoGwOpaGM5et7vX4mVa957uiy4F+va5LMIpnlPx
Ck6Cn2hWdVlLxLmsMsOz2yAB7kw40WBhIjeXUR+c6Q9M+m72o1xiR4U8D3qmFiXA
rhnkSBkEw74MET6takoNQIbBXpjuccW15ZkQcelJNOfWXgsthm79XdiPY2OQJGJm
OwpZgKyk/CRcLlSXgrLaXQ3hfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIU/o4jq
/lC9FGUGSn5gk0N7p42ZMB8GA1UdIwQYMBaAFKoyViQp+JbApcveVkQxSAM5vrqX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEY2Ni8zRDk4MUNDQzNB
MUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxzQ2x5OTVXUkRGSUF6bS11
cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FqSldKQ240bHNDbHk5NVdSREZJQXptLXVwYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEY2Ni8zRDk4MUNDQzNBMUUxMUU3OUFBMEQ1MUNDNEY5QUUwMi9xakpXSkNuNGxz
Q2x5OTVXUkRGSUF6bS11cGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARkPspgugZSVucey4bO77Mu9+P1q4BNUrHvIcN4lurwz0HkUml4B57zZZlEBL
tFh3eBr/VyuZ7DbdUzxgo3l7Dl74oV7utTCu+Vw4a7dXjdufaP+qRV9pbYQFhLEL
ZE7xC2m/RtwhbWrfXhtCMgICIba3o6dH2FaXArpZFfMxlePOYOsU0ysoUOnyqIkA
KJEsiUYLPtUqtiOMzza0vgO0UIJVGk1ywNVbjnDs+hezjmZ9005svvLrR8V7P0U6
eay9jvw3YHE3hiTn0suT4nsPyOaa/S5BGXniPpqVsYK/E5rJfUpzEyfeOTsW/bSZ
cez6zu0PTL6mmWq5qdIbKUInSA==
-----END CERTIFICATE-----
Generated at Tue May 5 05:45:16 2026 by rpki-client