Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
File:                     qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft (raw, json)
Hash identifier:          FP8bSxECf1vqes2V4Cx8uy+9C3E0Rt1dnZE+ggjoUaA=
Subject key identifier:   48:6A:BF:17:ED:F5:0C:09:CA:1D:47:86:93:07:67:0E:22:DB:86:64
Authority key identifier: AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E
Certificate issuer:       /CN=A917E4BA/serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
Certificate serial:       0BB3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
Manifest number:          0BA2
Signing time:             Tue 28 Jul 2026 19:22:58 +0000
Manifest this update:     Tue 28 Jul 2026 19:22:58 +0000
Manifest next update:     Tue 04 Aug 2026 19:22:58 +0000
Files and hashes:         1: qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl (hash: bi7DpuNR7tWdj+3is/JzXLjq7fjNAXKb23kMmIc7uYc=)
                          2: 2512D04C22BE11EC9240097DC4F9AE02.roa (hash: PPFiA6qNq6GDtkUBy0eT9Y5FpJTkF5X4pnd1msh8TAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl
                          rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4BA, serialNumber=AA436AAFC688045BF5148861546FA3FDCA98408E
        Validity
            Not Before: Jul 28 19:22:58 2026 GMT
            Not After : Aug  4 19:22:58 2026 GMT
        Subject: CN=6a690192-7bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:26:0e:44:c4:61:cb:29:24:da:67:b7:4c:
                    d3:da:34:de:42:cb:6d:1c:77:9e:b9:a0:49:a3:a5:
                    50:73:c5:9a:58:e3:91:c7:4a:4e:12:47:cb:19:7a:
                    45:d0:b9:4c:a9:40:54:4b:bc:bb:66:63:fb:e3:cf:
                    75:5d:d8:ee:07:1a:f1:9a:1c:23:ba:65:3b:99:03:
                    2a:6b:5e:78:3f:df:20:0b:df:18:a3:cb:2c:e1:3e:
                    cc:7b:95:b1:56:db:84:5b:2f:37:76:58:3e:72:4d:
                    10:89:69:76:4c:ee:f3:57:77:57:40:22:8d:53:87:
                    b3:25:a0:56:26:58:85:19:c4:eb:19:63:f8:c4:2f:
                    fb:fb:71:15:c7:c3:83:b3:64:d0:25:48:f3:35:31:
                    2a:48:eb:c0:5f:39:7e:8d:4a:19:09:73:8d:4a:91:
                    ea:76:f5:2b:ef:a1:3c:a0:45:a6:be:f6:3e:f1:5c:
                    5f:12:90:35:63:34:f4:67:97:cc:0c:ce:63:7e:c9:
                    84:2f:dc:6b:d0:27:94:4a:3e:8c:c1:73:f9:7b:4f:
                    f1:d7:4c:c6:7a:be:f1:48:06:10:c4:f9:ff:f4:04:
                    af:7b:6d:64:ff:a6:8d:ce:40:ad:d3:e8:72:21:e3:
                    53:96:4b:7f:21:13:21:85:e0:99:a7:e7:f2:26:97:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:BF:17:ED:F5:0C:09:CA:1D:47:86:93:07:67:0E:22:DB:86:64
            X509v3 Authority Key Identifier:
                keyid:AA:43:6A:AF:C6:88:04:5B:F5:14:88:61:54:6F:A3:FD:CA:98:40:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkNqr8aIBFv1FIhhVG-j_cqYQI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4BA/D06BF32852DC11EA82601B0FC4F9AE02/qkNqr8aIBFv1FIhhVG-j_cqYQI4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:92:4a:23:9a:f7:62:8f:b7:e1:e7:3d:ab:5b:a0:de:81:af:
         ee:0f:bb:e3:9c:58:10:e9:15:48:67:36:f4:ab:3c:74:a2:0d:
         c7:87:d9:88:b8:d8:d2:73:72:8e:6f:91:98:ed:fb:83:cf:da:
         e1:48:d3:4d:08:cd:18:20:5d:3c:8e:17:2c:0f:93:e5:31:e3:
         51:46:a3:e1:4b:d4:8f:35:4d:2f:c0:37:2a:49:72:c8:a4:91:
         6a:9e:64:36:82:55:e5:d5:7f:c6:d8:ef:22:ab:43:42:6b:d1:
         69:f6:37:47:5a:53:1c:0f:2c:de:d2:f6:3d:16:34:ca:6b:22:
         6c:97:b4:3b:53:d7:1a:12:1c:2f:8a:d5:fa:f9:03:01:9c:78:
         fd:8d:cc:f6:c0:46:18:7b:4c:c1:dd:ee:15:23:e2:64:ac:de:
         31:5a:a8:83:38:83:96:b3:38:ab:81:3c:a3:b9:67:18:3a:d9:
         b1:b6:b7:e1:e3:7e:6c:0c:71:1f:17:31:3a:56:01:bf:ec:5b:
         c4:b6:5b:00:2f:01:18:7b:43:74:08:ce:59:4d:db:d4:39:2f:
         7b:7a:6a:30:2e:0e:5e:cd:23:85:b7:d8:cc:16:67:9a:4f:53:
         c0:08:47:9e:e8:12:bb:cf:e7:e7:06:3f:63:73:90:62:7b:9e:
         7c:8e:c4:75
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0QkExMTAvBgNVBAUTKEFBNDM2QUFGQzY4ODA0NUJGNTE0ODg2MTU0NkZBM0ZE
Q0E5ODQwOEUwHhcNMjYwNzI4MTkyMjU4WhcNMjYwODA0MTkyMjU4WjAYMRYwFAYD
VQQDEw02YTY5MDE5Mi03YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuu0mDkTEYcspJNpnt0zT2jTeQsttHHeeuaBJo6VQc8WaWOORx0pOEkfLGXpF
0LlMqUBUS7y7ZmP74891XdjuBxrxmhwjumU7mQMqa154P98gC98Yo8ss4T7Me5Wx
VtuEWy83dlg+ck0QiWl2TO7zV3dXQCKNU4ezJaBWJliFGcTrGWP4xC/7+3EVx8OD
s2TQJUjzNTEqSOvAXzl+jUoZCXONSpHqdvUr76E8oEWmvvY+8VxfEpA1YzT0Z5fM
DM5jfsmEL9xr0CeUSj6MwXP5e0/x10zGer7xSAYQxPn/9ASve21k/6aNzkCt0+hy
IeNTlkt/IRMhheCZp+fyJpe4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhqvxft
9QwJyh1HhpMHZw4i24ZkMB8GA1UdIwQYMBaAFKpDaq/GiARb9RSIYVRvo/3KmECO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRCQS9EMDZCRjMyODUy
REMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJGdjFGSWhoVkctal9jcVlR
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FrTnFyOGFJQkZ2MUZJaGhWRy1qX2NxWVFJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTRCQS9EMDZCRjMyODUyREMxMUVBODI2MDFCMEZDNEY5QUUwMi9xa05xcjhhSUJG
djFGSWhoVkctal9jcVlRSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi5JKI5r3Yo+34ec9q1ug3oGv7g+745xYEOkVSGc29Ks8dKINx4fZiLjY0nNy
jm+RmO37g8/a4UjTTQjNGCBdPI4XLA+T5THjUUaj4UvUjzVNL8A3KklyyKSRap5k
NoJV5dV/xtjvIqtDQmvRafY3R1pTHA8s3tL2PRY0ymsibJe0O1PXGhIcL4rV+vkD
AZx4/Y3M9sBGGHtMwd3uFSPiZKzeMVqogziDlrM4q4E8o7lnGDrZsba34eN+bAxx
HxcxOlYBv+xbxLZbAC8BGHtDdAjOWU3b1Dkve3pqMC4OXs0jhbfYzBZnmk9TwAhH
nugSu8/n5wY/Y3OQYnuefI7EdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:42 2026 by rpki-client