Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
File:                     qkybf_t3YNE02jT6MRKd4Rod4q4.mft (raw, json)
Hash identifier:          fCThAqfX2P/GR6aoYHKtUmw67eI/aHp36MKsvzeeaKo=
Subject key identifier:   30:FE:3F:DB:46:39:02:9B:E6:E0:7F:31:6F:A1:26:BD:70:36:C5:C2
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Certificate issuer:       /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial:       2EE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
Manifest number:          2ED4
Signing time:             Tue 28 Jul 2026 15:33:37 +0000
Manifest this update:     Tue 28 Jul 2026 15:33:37 +0000
Manifest next update:     Tue 04 Aug 2026 15:33:37 +0000
Files and hashes:         1: qkybf_t3YNE02jT6MRKd4Rod4q4.crl (hash: 6vr9BAmENW4iNLYyAECwtDgqhGseJGFyEUmDugOi1PM=)
                          2: 5B102332845711EEB3DC4A5EC4F9AE02.roa (hash: oSWS0zrJzdXGwHmrgHH9I5fI7OsRk41AspXzhYBYi10=)
                          3: 3408D944DC0311EC879DE280C4F9AE02.roa (hash: X2TaF3YKM0s8VUzzhEaphXHF/ct0sZDe6tpxxxbTq9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
                          rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12007 (0x2ee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
        Validity
            Not Before: Jul 28 15:33:37 2026 GMT
            Not After : Aug  4 15:33:37 2026 GMT
        Subject: CN=6a68cbd1-9723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:ce:b6:6c:40:26:53:5e:f9:69:28:98:bd:
                    61:97:20:f0:22:e1:bc:17:ab:b5:b3:76:22:b8:bf:
                    a5:c2:6e:e9:41:7c:a0:bb:a2:0f:7b:a6:87:b6:f2:
                    67:64:94:04:2b:21:f9:74:60:a2:88:eb:99:de:eb:
                    16:98:4c:46:b8:d0:a2:7e:d3:86:a3:5d:f7:3e:6e:
                    a4:85:5f:e3:d4:57:27:c8:8e:25:b4:02:3b:55:88:
                    9b:41:f8:05:e3:d9:d9:ae:92:55:36:cd:2a:15:6a:
                    95:51:6e:46:4f:84:c2:d6:6d:95:b6:35:62:ee:1c:
                    a8:21:67:53:00:26:84:eb:aa:9b:5e:d9:a1:be:68:
                    5c:78:69:00:7d:17:d6:33:89:f5:32:04:b2:e0:77:
                    d4:bd:43:06:ba:3b:27:58:0f:d6:2d:24:e6:13:1b:
                    7e:5a:b6:66:86:71:c9:4d:62:04:8b:74:3d:b1:48:
                    2b:47:6e:cc:7c:a3:b8:42:4a:b7:01:3b:0a:a3:01:
                    89:15:a4:85:42:0e:66:3e:d2:f5:de:21:36:2a:5a:
                    e5:2f:5e:d5:7d:2e:8b:f5:5d:6e:c6:30:64:da:ca:
                    2a:43:44:96:a1:61:6b:c9:8b:84:3c:b4:58:ba:d0:
                    3d:11:f1:7a:bd:76:06:b1:66:b2:54:5d:9c:b4:a1:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FE:3F:DB:46:39:02:9B:E6:E0:7F:31:6F:A1:26:BD:70:36:C5:C2
            X509v3 Authority Key Identifier:
                keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:d1:79:94:c6:a0:de:fa:c7:19:10:25:f1:92:b8:02:b1:
         82:2f:6e:9a:ee:d1:ce:fa:bd:f3:49:cc:fe:fd:74:19:a4:01:
         20:ca:57:d2:78:cf:dc:c9:1b:75:64:63:93:50:3d:88:67:d0:
         9a:a5:cb:90:20:de:01:1a:ec:a8:46:1b:a6:8f:35:e9:1c:8d:
         d6:fb:5f:59:13:03:4e:42:9a:11:a6:b9:1e:b7:33:f5:fb:4f:
         78:16:d6:f7:8f:7d:97:53:ec:5e:20:67:88:55:28:58:b7:91:
         d0:76:98:ae:39:04:f6:23:95:d6:ce:9b:ca:85:4e:cd:4f:a8:
         54:96:47:49:cc:58:82:a9:65:86:f3:26:d0:d9:d1:11:79:42:
         30:05:5f:84:73:fe:d7:6c:7c:a6:cd:4e:e0:9a:f7:ae:87:65:
         78:5c:9c:a4:16:d8:91:4e:ec:b4:52:f9:aa:f1:d8:fb:64:9d:
         91:57:22:38:f7:0f:13:c6:a2:50:ce:1f:4c:25:a9:50:70:44:
         c7:2a:ca:24:c1:ad:ba:53:7a:64:a4:d6:14:4d:21:c8:00:bd:
         e4:f2:de:cb:ec:48:3f:55:49:33:af:2a:d9:72:33:2b:40:11:
         70:1e:d2:f4:43:5a:90:42:2b:b9:84:c0:44:47:39:11:c0:e2:
         db:3c:6c:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYwMjExMTAvBgNVBAUTKEFBNEM5QjdGRkI3NzYwRDEzNERBMzRGQTMxMTI5REUx
MUExREUyQUUwHhcNMjYwNzI4MTUzMzM3WhcNMjYwODA0MTUzMzM3WjAYMRYwFAYD
VQQDEw02YTY4Y2JkMS05NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzWnOtmxAJlNe+WkomL1hlyDwIuG8F6u1s3YiuL+lwm7pQXygu6IPe6aHtvJn
ZJQEKyH5dGCiiOuZ3usWmExGuNCiftOGo133Pm6khV/j1FcnyI4ltAI7VYibQfgF
49nZrpJVNs0qFWqVUW5GT4TC1m2VtjVi7hyoIWdTACaE66qbXtmhvmhceGkAfRfW
M4n1MgSy4HfUvUMGujsnWA/WLSTmExt+WrZmhnHJTWIEi3Q9sUgrR27MfKO4Qkq3
ATsKowGJFaSFQg5mPtL13iE2KlrlL17VfS6L9V1uxjBk2soqQ0SWoWFryYuEPLRY
utA9EfF6vXYGsWayVF2ctKE6SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDD+P9tG
OQKb5uB/MW+hJr1wNsXCMB8GA1UdIwQYMBaAFKpMm3/7d2DRNNo0+jESneEaHeKu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjAyMS9EOTg3NjFENDY5
MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lORTAyalQ2TVJLZDRSb2Q0
cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FreWJmX3QzWU5FMDJqVDZNUktkNFJvZDRxNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjAyMS9EOTg3NjFENDY5MkUxMUUzODhDODI1MkU1OTExRUEzMi9xa3liZl90M1lO
RTAyalQ2TVJLZDRSb2Q0cTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAa7ReZTGoN76xxkQJfGSuAKxgi9umu7Rzvq980nM/v10GaQBIMpX0njP3Mkb
dWRjk1A9iGfQmqXLkCDeARrsqEYbpo816RyN1vtfWRMDTkKaEaa5Hrcz9ftPeBbW
9499l1PsXiBniFUoWLeR0HaYrjkE9iOV1s6byoVOzU+oVJZHScxYgqllhvMm0NnR
EXlCMAVfhHP+12x8ps1O4Jr3rodleFycpBbYkU7stFL5qvHY+2SdkVciOPcPE8ai
UM4fTCWpUHBExyrKJMGtulN6ZKTWFE0hyAC95PLey+xIP1VJM68q2XIzK0ARcB7S
9ENakEIruYTAREc5EcDi2zxsMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:05 2026 by rpki-client