Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
File:                     QRX9yGsnZiNgOztkXUcIQLgDm8g.mft (raw, json)
Hash identifier:          mMxeh2GCHW7Mhpiz2b725rhwF97U2G6nR/uFnFwpZy4=
Subject key identifier:   29:B1:64:BD:13:EA:19:4B:37:7F:8B:E6:F2:20:FF:35:CF:97:59:B4
Authority key identifier: 41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8
Certificate issuer:       /CN=A916E9E3/serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
Manifest number:          80
Signing time:             Sat 13 Jun 2026 07:41:53 +0000
Manifest this update:     Sat 13 Jun 2026 07:41:53 +0000
Manifest next update:     Sat 20 Jun 2026 07:41:53 +0000
Files and hashes:         1: QRX9yGsnZiNgOztkXUcIQLgDm8g.crl (hash: ZTZIPjrNiZ6X8uYMfFkh0x9/pnxFPL2gagQyJy96OZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl
                          rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9E3, serialNumber=4115FDC86B276623603B3B645D470840B8039BC8
        Validity
            Not Before: Jun 13 07:41:53 2026 GMT
            Not After : Jun 20 07:41:53 2026 GMT
        Subject: CN=6a2d09c1-569f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:21:a0:22:28:b7:17:f2:e8:11:12:fa:0f:
                    5f:66:6e:f8:12:00:b4:15:4d:ca:e7:8e:cf:52:57:
                    cc:48:b1:40:73:bc:a5:9b:7e:3e:d4:b0:c7:eb:76:
                    cb:e3:87:20:69:dd:95:df:98:b8:76:3d:55:3e:86:
                    e4:ce:88:30:74:91:c9:c4:12:09:a8:e1:3b:17:b6:
                    e1:39:97:58:57:ba:01:6b:ac:71:00:fe:57:ca:94:
                    bf:7c:2c:be:f3:65:56:6f:dc:77:63:11:14:84:88:
                    4b:40:0b:ac:c0:42:8f:d3:dd:20:40:34:ea:0b:5c:
                    a5:2f:29:52:e4:5f:42:8e:2e:b2:6c:bb:e9:4a:9a:
                    29:82:8b:85:8b:20:ce:87:26:58:72:7a:31:61:d5:
                    de:31:44:7a:20:65:3f:68:1c:68:ef:f5:9c:1c:65:
                    d3:85:14:b6:88:05:a3:a2:62:3d:76:d3:31:a0:48:
                    ae:0f:66:03:3e:d3:ef:eb:0b:4d:96:77:01:35:9b:
                    5a:4c:51:8b:06:4b:0d:f0:3d:e2:aa:e2:44:40:27:
                    48:e3:31:55:e2:6e:8a:6c:2a:8f:1c:47:a2:83:ea:
                    ee:04:e4:3b:77:8a:bb:20:f0:69:57:ae:a4:ff:17:
                    70:d9:8c:72:e3:22:5e:21:02:fe:5a:58:f9:ff:11:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B1:64:BD:13:EA:19:4B:37:7F:8B:E6:F2:20:FF:35:CF:97:59:B4
            X509v3 Authority Key Identifier:
                keyid:41:15:FD:C8:6B:27:66:23:60:3B:3B:64:5D:47:08:40:B8:03:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRX9yGsnZiNgOztkXUcIQLgDm8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/4E0E3714A3A411F092013E29C4F9AE02/QRX9yGsnZiNgOztkXUcIQLgDm8g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:42:16:d0:4f:ba:e5:32:53:d3:1a:4c:5b:05:bd:1d:88:
         09:0c:39:56:93:99:ea:8e:1e:fc:1e:73:0c:6f:41:5b:a0:67:
         fc:06:57:db:60:16:fd:a5:39:90:fc:cc:c5:60:de:41:40:2a:
         c9:f0:ba:21:36:82:4a:27:cf:30:13:71:e2:6c:14:bc:14:b9:
         56:7f:18:a3:5e:5c:14:3f:fd:41:69:fb:33:93:60:ba:8e:51:
         1d:9c:1e:4e:d3:9a:1a:f3:9b:7c:6c:7a:61:19:32:8f:c7:ca:
         63:f2:48:bd:a2:2d:d9:f9:77:ec:d7:1c:7f:1b:3f:c1:e3:d5:
         19:e9:cb:54:29:2f:9f:12:e9:ca:81:16:61:c0:22:02:46:05:
         af:3b:e6:82:c7:f3:cb:85:e4:11:3b:d8:22:78:3b:5c:40:fb:
         b6:dd:f9:9e:b7:10:e8:44:c6:eb:75:51:d1:10:80:ad:cb:bb:
         29:d4:d8:de:5f:74:0b:a7:34:b1:23:9e:17:6e:78:5d:b4:f8:
         97:c5:d1:40:47:6c:57:50:e0:6e:d8:3f:ae:87:4d:37:3d:68:
         f6:58:5e:b6:af:10:86:bc:56:b6:d9:95:f6:d2:6e:ab:f0:ad:
         29:bd:67:a9:e9:b1:74:1e:53:e3:b9:0e:6d:8d:15:f9:4b:72:
         c9:93:44:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU5RTMxMTAvBgNVBAUTKDQxMTVGREM4NkIyNzY2MjM2MDNCM0I2NDVENDcwODQw
QjgwMzlCQzgwHhcNMjYwNjEzMDc0MTUzWhcNMjYwNjIwMDc0MTUzWjAYMRYwFAYD
VQQDEw02YTJkMDljMS01NjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLIhoCIotxfy6BES+g9fZm74EgC0FU3K547PUlfMSLFAc7ylm34+1LDH63bL
44cgad2V35i4dj1VPobkzogwdJHJxBIJqOE7F7bhOZdYV7oBa6xxAP5XypS/fCy+
82VWb9x3YxEUhIhLQAuswEKP090gQDTqC1ylLylS5F9Cji6ybLvpSpopgouFiyDO
hyZYcnoxYdXeMUR6IGU/aBxo7/WcHGXThRS2iAWjomI9dtMxoEiuD2YDPtPv6wtN
lncBNZtaTFGLBksN8D3iquJEQCdI4zFV4m6KbCqPHEeig+ruBOQ7d4q7IPBpV66k
/xdw2Yxy4yJeIQL+Wlj5/xEWywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCmxZL0T
6hlLN3+L5vIg/zXPl1m0MB8GA1UdIwQYMBaAFEEV/chrJ2YjYDs7ZF1HCEC4A5vI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlFMy80RTBFMzcxNEEz
QTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9RUlg5eUdzblppTmdPenRrWFVjSVFMZ0Rt
OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FSWDl5R3NuWmlOZ096dGtYVWNJUUxnRG04Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTlFMy80RTBFMzcxNEEzQTQxMUYwOTIwMTNFMjlDNEY5QUUwMi9RUlg5eUdzblpp
TmdPenRrWFVjSVFMZ0RtOGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACcxCFtBPuuUyU9MaTFsFvR2ICQw5VpOZ6o4e/B5zDG9BW6Bn/AZX22AW/aU5
kPzMxWDeQUAqyfC6ITaCSifPMBNx4mwUvBS5Vn8Yo15cFD/9QWn7M5Nguo5RHZwe
TtOaGvObfGx6YRkyj8fKY/JIvaIt2fl37Nccfxs/wePVGenLVCkvnxLpyoEWYcAi
AkYFrzvmgsfzy4XkETvYIng7XED7tt35nrcQ6ETG63VR0RCArcu7KdTY3l90C6c0
sSOeF254XbT4l8XRQEdsV1Dgbtg/rodNNz1o9lhetq8QhrxWttmV9tJuq/CtKb1n
qemxdB5T47kObY0V+UtyyZNEQw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:12 2026 by rpki-client