Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
File:                     QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json)
Hash identifier:          AziarDr28Hcx6Mn1g760nACEyhjorf2B536bNWDAT0A=
Subject key identifier:   24:83:0B:18:DB:BA:2C:66:20:FE:83:8E:A0:66:C7:CF:90:5C:52:C2
Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C
Certificate issuer:       /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
Certificate serial:       2595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
Manifest number:          2569
Signing time:             Tue 28 Jul 2026 15:50:35 +0000
Manifest this update:     Tue 28 Jul 2026 15:50:35 +0000
Manifest next update:     Tue 04 Aug 2026 15:50:35 +0000
Files and hashes:         1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: vT7VEBOtBrbTQbblYV1S8N2oqWkYKjQZmSyvEvTq2z4=)
                          2: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: /w4t5dhbmQEa84JEDJ39VitjjFskPm/mEpnYuZ0T6wQ=)
                          3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: l+zP+x/ZY9cq3nbV4r5XpYolKqUr/0Lu8hDJSfvQgkI=)
                          4: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: 6oC3s9zXSmCynBY9z0T8TeaSrJ6gHinauk9Zr2y+ucg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl
                          rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9621 (0x2595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C
        Validity
            Not Before: Jul 28 15:50:35 2026 GMT
            Not After : Aug  4 15:50:35 2026 GMT
        Subject: CN=6a68cfcb-2b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:01:95:98:45:ac:9b:57:5e:bf:c0:4b:5f:
                    8a:6e:3e:a4:98:24:e3:c4:dd:71:95:b8:8d:37:93:
                    e7:43:a7:de:a2:ba:07:18:01:8e:00:ab:a7:cc:c0:
                    cb:c4:d4:81:59:98:26:6a:79:e2:72:cd:5f:f0:e6:
                    2a:61:87:3d:5d:40:be:5f:9e:f5:8e:8c:c6:21:8e:
                    ee:d0:4d:b5:31:36:01:2c:2a:fc:5a:88:f8:c4:a6:
                    0b:a3:98:0c:a0:a9:f1:a4:3e:f8:b2:fc:ce:36:85:
                    83:a1:c9:d8:17:60:dc:d5:9c:15:79:a9:3e:89:0f:
                    ab:ed:1e:e5:0a:39:ab:1c:72:41:be:f4:d1:f5:38:
                    a0:0f:21:70:d4:8f:eb:53:6a:e9:f6:50:5c:55:e7:
                    73:21:1a:bd:1d:3b:8c:e3:a0:16:b3:08:cf:98:e1:
                    75:28:bd:91:ed:0d:a0:85:5b:93:14:5c:42:b1:ac:
                    6a:3b:1b:40:0d:df:5a:28:3a:bb:d3:45:d1:e8:10:
                    2a:d6:bb:55:36:34:da:20:50:0e:ba:5f:ba:a0:c9:
                    6b:c7:7a:7f:43:e0:69:ee:49:fb:44:c2:c4:3f:af:
                    bf:82:d0:2f:7d:05:7c:7b:10:ef:bf:0b:4f:00:1b:
                    38:26:c2:38:9b:3b:31:72:91:a6:0e:f8:39:cc:28:
                    cb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:83:0B:18:DB:BA:2C:66:20:FE:83:8E:A0:66:C7:CF:90:5C:52:C2
            X509v3 Authority Key Identifier:
                keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:df:d4:a2:14:94:00:c7:02:66:7c:e8:10:81:8d:49:e1:3c:
         7a:f7:71:f9:32:fb:84:30:cf:d3:d5:a2:40:af:b2:32:d2:e0:
         5f:fd:06:47:a5:c8:3b:36:be:03:1d:d9:dd:f8:f7:b2:df:37:
         c4:41:8e:41:95:03:89:92:fd:14:fe:d1:0f:ca:c2:a7:96:52:
         81:4b:57:d5:9c:de:ed:5d:e5:cf:49:fa:e9:39:05:d7:8c:ae:
         03:0f:3c:21:55:28:0e:19:03:cf:f3:c8:00:ed:d5:38:50:4d:
         d4:3e:2f:3a:31:7a:3c:6a:77:ad:3c:6a:fc:3b:6f:ec:d1:3b:
         44:e7:be:ac:88:18:a2:e6:fb:79:65:7f:02:77:34:ef:eb:de:
         53:1d:38:ea:a6:85:56:72:10:8b:df:12:2e:c8:cc:ba:65:8c:
         65:0e:fa:43:c6:2c:d5:4a:72:81:86:94:3c:dd:72:2a:d3:06:
         9b:a3:54:5b:69:48:23:7c:68:fb:c5:0d:80:f5:04:d8:17:00:
         4d:64:c7:e2:f7:fd:50:22:20:9f:e4:4c:89:13:65:9f:d3:9e:
         9d:cb:aa:a2:71:87:f2:95:fe:ce:5f:0b:fa:38:8c:e2:d8:df:
         25:93:db:be:40:03:35:2e:ff:af:fd:85:6d:0c:bb:2d:06:ff:
         56:25:49:f5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz
NEVCNTc5MUMwHhcNMjYwNzI4MTU1MDM1WhcNMjYwODA0MTU1MDM1WjAYMRYwFAYD
VQQDEw02YTY4Y2ZjYi0yYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArXEBlZhFrJtXXr/AS1+Kbj6kmCTjxN1xlbiNN5PnQ6feoroHGAGOAKunzMDL
xNSBWZgmannics1f8OYqYYc9XUC+X571jozGIY7u0E21MTYBLCr8Woj4xKYLo5gM
oKnxpD74svzONoWDocnYF2Dc1ZwVeak+iQ+r7R7lCjmrHHJBvvTR9TigDyFw1I/r
U2rp9lBcVedzIRq9HTuM46AWswjPmOF1KL2R7Q2ghVuTFFxCsaxqOxtADd9aKDq7
00XR6BAq1rtVNjTaIFAOul+6oMlrx3p/Q+Bp7kn7RMLEP6+/gtAvfQV8exDvvwtP
ABs4JsI4mzsxcpGmDvg5zCjLuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSDCxjb
uixmIP6DjqBmx8+QXFLCMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2
RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl
UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTBBNS8xN0RGQjM1QTQ2RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdC
WkVsRnMwZDZueUkwNjFlUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABt/UohSUAMcCZnzoEIGNSeE8evdx+TL7hDDP09WiQK+yMtLgX/0GR6XIOza+
Ax3Z3fj3st83xEGOQZUDiZL9FP7RD8rCp5ZSgUtX1Zze7V3lz0n66TkF14yuAw88
IVUoDhkDz/PIAO3VOFBN1D4vOjF6PGp3rTxq/Dtv7NE7ROe+rIgYoub7eWV/Anc0
7+veUx046qaFVnIQi98SLsjMumWMZQ76Q8Ys1UpygYaUPN1yKtMGm6NUW2lII3xo
+8UNgPUE2BcATWTH4vf9UCIgn+RMiRNln9OencuqonGH8pX+zl8L+jiM4tjfJZPb
vkADNS7/r/2FbQy7LQb/ViVJ9Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:24:26 2026 by rpki-client