Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
File:                     QMW9PelSuS6VkhpP1t99sHtKKSE.mft (raw, json)
Hash identifier:          9rs/YwVuCujPq47gNQinwXeC0HhopDr8jOd+XhqaYHo=
Subject key identifier:   F4:E0:6C:1B:C3:72:0C:BB:B6:4C:D0:52:C3:DC:51:7F:83:09:49:AC
Authority key identifier: 40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21
Certificate issuer:       /CN=A915D963/serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
Certificate serial:       0716
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
Manifest number:          0912
Signing time:             Tue 28 Jul 2026 22:39:36 +0000
Manifest this update:     Tue 28 Jul 2026 22:39:36 +0000
Manifest next update:     Tue 04 Aug 2026 22:39:36 +0000
Files and hashes:         1: QMW9PelSuS6VkhpP1t99sHtKKSE.crl (hash: reW1CE0y/tPANPHqbAKvpzeV7KITKGAZJRYxhcVJzrA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 22:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1814 (0x716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=40C5BD3DE952B92E95921A4FD6DF7DB07B4A2921
        Validity
            Not Before: Jul 28 22:39:36 2026 GMT
            Not After : Aug  4 22:39:36 2026 GMT
        Subject: CN=6a692fa8-a57d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:39:ba:8d:15:b5:ba:c7:40:43:10:3d:46:da:
                    e9:95:4d:2b:a5:db:d9:9f:7b:79:86:e9:85:b3:0d:
                    00:3d:7d:ba:b7:f3:62:4a:f5:2a:0e:8e:3b:25:c1:
                    09:82:76:70:e0:68:d0:1a:5a:d5:09:e5:cd:5e:19:
                    24:fb:ef:ce:4a:48:f2:33:60:b3:e0:fd:d7:49:2d:
                    0e:a7:dd:1a:f8:26:80:26:26:a7:e1:6f:a2:a2:74:
                    0f:a5:a6:a3:dc:96:64:fe:07:54:65:b0:27:6c:65:
                    03:c3:ac:6c:4a:65:f2:9d:ef:50:76:6e:e6:35:29:
                    7c:4c:13:33:c2:a9:8c:82:16:b0:31:f8:ef:d6:28:
                    5d:35:25:0e:92:cb:d6:b6:96:ff:4e:b2:e0:d2:92:
                    51:13:14:b9:e2:ba:1a:e0:f0:ac:72:12:62:7b:7f:
                    c1:3c:4f:7d:b8:0e:4a:a0:4e:f6:18:a5:f2:d9:88:
                    d6:aa:6c:e2:ef:24:75:84:58:1c:9f:f9:de:fa:a0:
                    f2:df:46:29:9e:da:08:50:92:cc:ba:b1:b6:68:a4:
                    0d:6b:75:45:f2:83:00:2f:21:ce:c0:a5:f7:e1:9b:
                    2d:2c:80:2c:3e:ac:f2:f6:ac:b0:2f:0c:b4:ac:3e:
                    d9:22:fe:25:23:ba:29:c5:b6:21:c4:54:07:ae:ee:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E0:6C:1B:C3:72:0C:BB:B6:4C:D0:52:C3:DC:51:7F:83:09:49:AC
            X509v3 Authority Key Identifier:
                keyid:40:C5:BD:3D:E9:52:B9:2E:95:92:1A:4F:D6:DF:7D:B0:7B:4A:29:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMW9PelSuS6VkhpP1t99sHtKKSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/QMW9PelSuS6VkhpP1t99sHtKKSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:47:fe:7e:b8:3b:9f:a6:16:7a:f7:b5:44:86:e2:fe:2e:b9:
         75:71:bb:79:98:01:bc:be:5d:f8:6d:50:f8:81:2e:14:46:f9:
         61:be:a8:fe:61:34:a6:23:17:2d:20:5a:f7:7b:8b:d9:a9:37:
         ad:3b:9d:2a:b3:bb:d7:49:69:76:01:4e:4f:0d:b6:6c:5c:e7:
         cb:e9:bd:d0:9f:f7:a3:cf:f6:ea:c0:02:dd:3d:8d:c9:73:a3:
         a7:6e:77:3a:fa:77:25:d2:32:e3:3b:3f:fc:f2:a1:4e:cc:a9:
         49:0f:61:c2:f1:c2:92:92:4e:8c:b8:d1:12:ab:33:b2:16:82:
         a1:d8:3d:62:7d:83:e3:2c:50:85:e1:56:09:f0:1c:96:2d:aa:
         e6:b2:ab:eb:d9:8c:93:ff:00:96:9e:c6:e8:f3:fa:2b:c9:51:
         16:13:18:fc:db:dc:1b:9b:1e:d5:a0:d3:b5:fb:0e:87:db:aa:
         4e:ea:79:52:9d:13:f1:0c:21:cd:9f:95:05:11:10:52:fb:b1:
         57:c8:0a:21:89:15:25:42:71:3a:ef:74:1d:72:57:ab:3e:70:
         33:9d:cb:e2:83:61:6b:3b:64:63:46:e1:36:84:80:1c:b6:4b:
         8d:e9:2f:14:35:08:f2:fa:65:c1:e8:96:a1:ab:55:06:d7:4e:
         a1:91:60:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ5NjMxMTAvBgNVBAUTKDQwQzVCRDNERTk1MkI5MkU5NTkyMUE0RkQ2REY3REIw
N0I0QTI5MjEwHhcNMjYwNzI4MjIzOTM2WhcNMjYwODA0MjIzOTM2WjAYMRYwFAYD
VQQDEw02YTY5MmZhOC1hNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuDm6jRW1usdAQxA9RtrplU0rpdvZn3t5humFsw0APX26t/NiSvUqDo47JcEJ
gnZw4GjQGlrVCeXNXhkk++/OSkjyM2Cz4P3XSS0Op90a+CaAJian4W+ionQPpaaj
3JZk/gdUZbAnbGUDw6xsSmXyne9Qdm7mNSl8TBMzwqmMghawMfjv1ihdNSUOksvW
tpb/TrLg0pJRExS54roa4PCschJie3/BPE99uA5KoE72GKXy2YjWqmzi7yR1hFgc
n/ne+qDy30YpntoIUJLMurG2aKQNa3VF8oMALyHOwKX34ZstLIAsPqzy9qywLwy0
rD7ZIv4lI7opxbYhxFQHru6ZkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPTgbBvD
cgy7tkzQUsPcUX+DCUmsMB8GA1UdIwQYMBaAFEDFvT3pUrkulZIaT9bffbB7Sikh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDk2My85MEU4MEJDODk3
RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VTNlZraHBQMXQ5OXNIdEtL
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FNVzlQZWxTdVM2VmtocFAxdDk5c0h0S0tTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDk2My85MEU4MEJDODk3RTIxMUVCOUIzOUQ1MzFDNEY5QUUwMi9RTVc5UGVsU3VT
NlZraHBQMXQ5OXNIdEtLU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfUf+frg7n6YWeve1RIbi/i65dXG7eZgBvL5d+G1Q+IEuFEb5Yb6o/mE0piMX
LSBa93uL2ak3rTudKrO710lpdgFOTw22bFzny+m90J/3o8/26sAC3T2NyXOjp253
Ovp3JdIy4zs//PKhTsypSQ9hwvHCkpJOjLjREqszshaCodg9Yn2D4yxQheFWCfAc
li2q5rKr69mMk/8Alp7G6PP6K8lRFhMY/NvcG5se1aDTtfsOh9uqTup5Up0T8Qwh
zZ+VBREQUvuxV8gKIYkVJUJxOu90HXJXqz5wM53L4oNhaztkY0bhNoSAHLZLjekv
FDUI8vplweiWoatVBtdOoZFgOg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:55:00 2026 by rpki-client