Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
File:                     qvquPFcDs5M3_T16lmbFjLjDtQk.mft (raw, json)
Hash identifier:          pQux6CEDqAUt/CYunPfz9uMmBo2LEsJEIlJfCz5kV20=
Subject key identifier:   B3:98:8C:00:85:0A:44:CC:12:F3:78:B6:77:3F:DF:FA:F1:2D:32:B0
Authority key identifier: AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09
Certificate issuer:       /CN=A9117394/serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
Certificate serial:       365F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
Manifest number:          35D4
Signing time:             Tue 28 Jul 2026 14:18:54 +0000
Manifest this update:     Tue 28 Jul 2026 14:18:53 +0000
Manifest next update:     Tue 04 Aug 2026 14:18:53 +0000
Files and hashes:         1: qvquPFcDs5M3_T16lmbFjLjDtQk.crl (hash: 8IBFDapc7n5wBLVj5cykQ5Vx3WhI8HEsQPwNGj2eOhQ=)
                          2: 4D91B0C25ED111EFAFFEA662C4F9AE02.roa (hash: x0LYtT3APJOM1BU3phk/GRsyUAfN6VfKZJ0ccXlvtdg=)
                          3: D52009B06A6311EFA96F023DC4F9AE02.roa (hash: VMik+VP2VW8b9tXPC9B03sMT9ppFEX01lrBrKEr5WZo=)
                          4: 90F73AF40E2511EBBB7F993CC4F9AE02.roa (hash: YjGvu7hS1PYqJK/ZSd5JlS+EEqqiFgJ4Qzr5idGzW0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl
                          rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13919 (0x365f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117394, serialNumber=AAFAAE3C5703B39337FD3D7A9666C58CB8C3B509
        Validity
            Not Before: Jul 28 14:18:53 2026 GMT
            Not After : Aug  4 14:18:53 2026 GMT
        Subject: CN=6a68ba4d-5a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:ed:a2:48:7f:9d:80:8f:84:9e:f1:cc:a7:
                    b2:c2:b4:4b:3e:c5:49:00:0a:f8:79:ab:f0:99:69:
                    69:be:8e:29:01:56:d9:4d:4f:d2:ff:f2:6e:4e:31:
                    2a:84:a6:72:f3:3f:40:91:77:0e:a2:f2:7d:11:8c:
                    c9:18:11:ca:d8:2a:f5:c1:3a:97:38:93:5f:48:45:
                    19:72:40:06:83:b7:16:c6:cb:26:71:89:ea:c8:a4:
                    95:41:53:a1:83:03:b0:d8:7d:a3:ba:74:fd:9a:31:
                    fc:66:5b:20:98:b0:f3:03:95:1d:00:8f:56:c4:be:
                    df:c2:46:48:9e:8d:5e:1b:93:9b:bb:6f:35:da:92:
                    e0:d8:ae:22:00:d5:a1:be:17:18:6a:f7:71:80:83:
                    a0:db:40:9c:04:5e:37:d3:74:48:8c:f9:1b:58:e1:
                    64:7e:3b:20:4c:bf:44:11:6f:2b:25:b1:1d:86:f8:
                    30:0e:91:3b:bf:19:96:bb:92:da:9b:6d:e8:47:c1:
                    de:2d:07:3a:db:5d:e3:51:85:03:2d:79:45:64:8d:
                    25:51:d9:0e:61:97:7e:8a:bd:c7:52:1f:9c:db:fe:
                    ec:06:64:fa:8e:ed:22:ad:80:3f:82:c2:42:88:56:
                    d4:a4:55:bf:f7:9d:32:42:7d:4f:93:29:91:33:cf:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:98:8C:00:85:0A:44:CC:12:F3:78:B6:77:3F:DF:FA:F1:2D:32:B0
            X509v3 Authority Key Identifier:
                keyid:AA:FA:AE:3C:57:03:B3:93:37:FD:3D:7A:96:66:C5:8C:B8:C3:B5:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qvquPFcDs5M3_T16lmbFjLjDtQk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117394/4F59186A1D6F11E29B5446B108B02CD2/qvquPFcDs5M3_T16lmbFjLjDtQk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b0:a8:2b:e9:c9:7c:c2:b8:76:36:f2:6c:25:f6:47:65:ff:
         09:77:6e:98:74:0c:72:5d:02:5f:a4:09:84:6c:18:2e:92:f9:
         b1:08:2f:e8:95:b4:74:01:9b:cd:e1:26:80:de:83:fd:b8:31:
         53:1d:68:2b:f9:cb:55:c0:4d:6b:70:45:8a:56:9f:79:81:ff:
         14:58:08:69:1e:6e:6a:d9:c1:f1:ec:4b:e8:59:9e:43:ed:67:
         e4:75:a0:9f:f9:a3:36:40:86:c5:e2:e3:15:13:56:89:f0:1c:
         c9:54:0c:31:db:1a:bb:5f:0e:e4:bc:cb:61:8a:0b:31:e0:5a:
         8e:ef:58:53:dc:a4:c9:ae:e4:e6:f9:9b:f9:90:d5:16:83:3c:
         38:d7:ba:8e:01:64:1e:7f:04:ef:ed:99:c0:11:e7:ee:3d:d0:
         14:23:fb:6d:6f:86:0c:cb:1b:b7:fb:90:ee:9d:23:bd:6b:0d:
         b8:ed:a7:dc:43:dd:30:e9:80:82:ca:a5:e0:53:66:21:41:d0:
         d1:4a:af:d2:f7:80:ab:f9:05:cd:15:41:03:1d:55:87:55:ba:
         d7:de:cf:59:de:1c:05:ee:35:30:b2:9f:bc:63:6e:6d:d3:1b:
         f3:20:64:3d:4a:ed:cd:5f:5d:22:08:58:d2:14:3b:9b:04:7b:
         5d:90:3f:26
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTczOTQxMTAvBgNVBAUTKEFBRkFBRTNDNTcwM0IzOTMzN0ZEM0Q3QTk2NjZDNThD
QjhDM0I1MDkwHhcNMjYwNzI4MTQxODUzWhcNMjYwODA0MTQxODUzWjAYMRYwFAYD
VQQDEw02YTY4YmE0ZC01YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsOntokh/nYCPhJ7xzKeywrRLPsVJAAr4eavwmWlpvo4pAVbZTU/S//JuTjEq
hKZy8z9AkXcOovJ9EYzJGBHK2Cr1wTqXOJNfSEUZckAGg7cWxssmcYnqyKSVQVOh
gwOw2H2junT9mjH8ZlsgmLDzA5UdAI9WxL7fwkZIno1eG5Obu2812pLg2K4iANWh
vhcYavdxgIOg20CcBF4303RIjPkbWOFkfjsgTL9EEW8rJbEdhvgwDpE7vxmWu5La
m23oR8HeLQc6213jUYUDLXlFZI0lUdkOYZd+ir3HUh+c2/7sBmT6ju0irYA/gsJC
iFbUpFW/950yQn1PkymRM8+3WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOYjACF
CkTMEvN4tnc/3/rxLTKwMB8GA1UdIwQYMBaAFKr6rjxXA7OTN/09epZmxYy4w7UJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzM5NC80RjU5MTg2QTFE
NkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1TTNfVDE2bG1iRmpMakR0
UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3F2cXVQRmNEczVNM19UMTZsbWJGakxqRHRRay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzM5NC80RjU5MTg2QTFENkYxMUUyOUI1NDQ2QjEwOEIwMkNEMi9xdnF1UEZjRHM1
TTNfVDE2bG1iRmpMakR0UWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAs7CoK+nJfMK4djbybCX2R2X/CXdumHQMcl0CX6QJhGwYLpL5sQgv6JW0dAGb
zeEmgN6D/bgxUx1oK/nLVcBNa3BFilafeYH/FFgIaR5uatnB8exL6FmeQ+1n5HWg
n/mjNkCGxeLjFRNWifAcyVQMMdsau18O5LzLYYoLMeBaju9YU9ykya7k5vmb+ZDV
FoM8ONe6jgFkHn8E7+2ZwBHn7j3QFCP7bW+GDMsbt/uQ7p0jvWsNuO2n3EPdMOmA
gsql4FNmIUHQ0Uqv0veAq/kFzRVBAx1Vh1W6197PWd4cBe41MLKfvGNubdMb8yBk
PUrtzV9dIghY0hQ7mwR7XZA/Jg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:44 2026 by rpki-client