Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
File:                     QJOHCXJ0OMjB3r_9BBWQWEggxug.mft (raw, json)
Hash identifier:          Zfyc7B+agqHiaH6TH92735wBBseV9gCQizMFDQ9m4nU=
Subject key identifier:   9E:82:54:21:94:76:D6:47:55:26:71:2B:F1:40:44:4A:2F:6A:CB:0A
Authority key identifier: 40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8
Certificate issuer:       /CN=A917618F/serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
Certificate serial:       1359
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
Manifest number:          134D
Signing time:             Sat 04 Apr 2026 16:53:26 +0000
Manifest this update:     Sat 04 Apr 2026 16:53:25 +0000
Manifest next update:     Sat 11 Apr 2026 16:53:25 +0000
Files and hashes:         1: QJOHCXJ0OMjB3r_9BBWQWEggxug.crl (hash: MggezEHkdjjHzQhVQzkPcsQabs3JWXLkFYfCpXnq188=)
                          2: 2FE4DA1EC2E111E8A19CB72FC4F9AE02.roa (hash: xtqs23pEGpn+9A+WHIc8NfV6fN9kv4Vyj6xQTqFc8lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl
                          rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4953 (0x1359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917618F, serialNumber=40938709727438C8C1DEBFFD041590584820C6E8
        Validity
            Not Before: Apr  4 16:53:25 2026 GMT
            Not After : Apr 11 16:53:25 2026 GMT
        Subject: CN=69d14205-435d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:d3:3e:b4:46:a0:1c:61:a2:56:82:87:7f:
                    6b:ea:07:2d:d1:2f:e6:60:65:1c:bb:f7:6b:67:27:
                    b7:17:5a:f0:38:f0:3e:68:22:e8:24:3b:ff:b0:72:
                    05:e7:7c:1f:bb:a6:48:54:ad:03:ed:d0:cf:8a:a7:
                    7a:e3:e8:21:6c:95:50:f2:df:29:34:25:c7:0a:d8:
                    e3:47:ad:96:d3:4c:57:b3:81:32:c2:ca:ef:e7:54:
                    d9:11:4b:4f:2c:22:dc:f8:e6:89:89:06:47:67:d1:
                    25:33:57:bd:bc:15:7b:76:ec:34:61:8a:aa:cb:03:
                    71:9f:c5:b2:33:64:e9:ad:4c:11:97:cc:a1:a7:45:
                    88:b8:1c:cd:66:ea:de:b1:77:f5:4b:a8:57:34:a9:
                    97:59:b9:e2:cd:56:b9:27:21:39:35:0e:81:40:9e:
                    ac:79:a6:0f:32:bf:fc:74:46:90:0d:1b:76:aa:2c:
                    08:62:73:cb:72:02:39:bb:41:e3:26:91:76:e3:7c:
                    8e:64:12:5f:5a:b8:9d:2d:4a:53:17:b3:73:2e:37:
                    e7:55:db:01:bb:25:08:2c:aa:35:4a:c9:3e:c2:d9:
                    94:17:cc:44:17:46:5e:c1:ff:01:d5:5d:e1:9c:f2:
                    0c:1e:95:16:96:e2:a0:cd:2d:44:ff:67:d7:fc:21:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:82:54:21:94:76:D6:47:55:26:71:2B:F1:40:44:4A:2F:6A:CB:0A
            X509v3 Authority Key Identifier:
                keyid:40:93:87:09:72:74:38:C8:C1:DE:BF:FD:04:15:90:58:48:20:C6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJOHCXJ0OMjB3r_9BBWQWEggxug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917618F/D28D75C0C2DF11E8A64EFD2CC4F9AE02/QJOHCXJ0OMjB3r_9BBWQWEggxug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c4:0d:63:d2:f1:45:45:51:1a:4c:fa:43:fb:5a:94:23:bc:
         33:2b:a0:66:a0:3e:53:d3:46:45:eb:66:fb:8d:d9:f4:96:80:
         6d:a2:71:13:9a:6c:99:25:8d:0b:78:e2:e6:3c:97:5c:09:3b:
         4f:fc:65:8c:b6:7a:fa:8c:d5:60:4e:43:4f:b7:d3:08:82:04:
         6c:38:58:e1:5c:67:24:2e:84:40:27:e0:c2:b9:63:8c:b7:5e:
         f0:d3:2c:d3:80:aa:42:1b:c4:1b:47:13:89:28:6e:c8:04:99:
         6e:2e:38:fb:f0:a5:8f:7e:ad:e4:3a:66:1c:59:0a:1e:33:17:
         b1:34:35:b0:74:44:f3:b7:58:69:64:88:e0:c2:f3:f3:c5:26:
         5d:85:00:c7:b0:39:b9:7d:f7:08:b9:dc:2d:e7:32:88:d6:40:
         12:d6:a5:10:56:d7:8d:b7:3f:7d:79:dd:41:67:40:c2:66:64:
         53:d4:db:bb:0f:f3:45:5c:5a:fa:25:a5:4c:5d:db:e1:3c:66:
         33:a4:a6:cf:d8:d1:da:b7:bd:7a:07:94:58:48:a9:20:df:2b:
         e2:16:da:e6:d5:d4:d0:b8:b6:60:36:3b:a8:50:a5:1a:1e:d2:
         29:db:82:f2:15:e8:03:73:16:f8:d8:8c:46:ab:bc:a9:5c:dd:
         00:a6:9a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:07 2026 by rpki-client