Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
File:                     qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft (raw, json)
Hash identifier:          Ho1PfGl7bMNBkMf4JWbOGngN/KdSyW8nL/PgsRB/qts=
Subject key identifier:   53:C5:2B:44:7B:29:D7:9D:D8:CB:30:8D:A4:2F:1F:B9:5C:F6:D8:95
Authority key identifier: A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A
Certificate issuer:       /CN=A91A1C52/serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
Certificate serial:       027C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
Manifest number:          0277
Signing time:             Mon 27 Jul 2026 03:22:22 +0000
Manifest this update:     Mon 27 Jul 2026 03:22:21 +0000
Manifest next update:     Mon 03 Aug 2026 03:22:21 +0000
Files and hashes:         1: qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl (hash: 6awVWUNBJqRPa8qqUNBYO6pqFMY4WcyCRuITnCIka00=)
                          2: A40C03B0D3B511EDA2A9DD7BC4F9AE02.roa (hash: tMOxJ0xsn+kcyoiImR7AbMysV3RWxSUWZcTI4nlsOEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1C52, serialNumber=A990DA25CF4E01BCEB7EC75C17860FB947BE092A
        Validity
            Not Before: Jul 27 03:22:21 2026 GMT
            Not After : Aug  3 03:22:21 2026 GMT
        Subject: CN=6a66ceee-4fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:7f:0b:3d:cc:fa:01:3f:6e:cd:28:89:2b:
                    5a:8c:22:1a:b7:e4:7a:c8:7b:a7:d9:ea:22:2b:fb:
                    83:a4:14:b2:36:20:df:02:6a:15:e5:4b:a8:4c:7d:
                    02:cb:6e:45:5d:0f:c8:d0:00:f0:1c:63:cb:78:b9:
                    42:77:7a:64:a0:ea:55:58:46:36:1b:86:b3:33:0e:
                    bf:75:e5:56:b7:4a:08:f9:95:8f:56:74:6b:d3:9f:
                    55:2b:f1:47:a8:f7:02:9a:6f:56:9c:24:84:6e:c9:
                    59:39:e1:b3:35:fc:18:73:90:05:2e:09:28:92:68:
                    42:d5:91:14:9e:3f:d7:eb:54:09:ef:04:88:f2:ff:
                    d2:f7:87:d9:68:4f:48:f3:6a:58:e8:e0:c7:d0:f0:
                    f1:ce:63:d3:7f:25:77:5d:92:1d:2c:84:1c:aa:03:
                    28:c0:1d:35:45:ea:e6:02:6b:85:3a:d9:33:04:3a:
                    31:5e:21:ff:c6:16:12:2a:50:16:5c:ad:3c:9b:f3:
                    0b:78:ee:15:60:99:5a:80:8a:c6:92:fa:6d:6a:a0:
                    73:0c:98:df:52:30:c5:29:e8:5a:10:c3:06:55:6d:
                    a0:76:f6:bf:fe:9f:79:d5:64:e9:b8:d9:a0:e3:be:
                    c1:44:fc:49:30:9b:45:0c:ce:39:c0:8c:96:a0:d5:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:2B:44:7B:29:D7:9D:D8:CB:30:8D:A4:2F:1F:B9:5C:F6:D8:95
            X509v3 Authority Key Identifier:
                keyid:A9:90:DA:25:CF:4E:01:BC:EB:7E:C7:5C:17:86:0F:B9:47:BE:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZDaJc9OAbzrfsdcF4YPuUe-CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1C52/0E5DBFB4C4BC11ED88403A48C4F9AE02/qZDaJc9OAbzrfsdcF4YPuUe-CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:7c:b4:84:c6:24:38:b4:90:51:e1:9d:77:92:34:d8:2c:91:
         e5:c8:64:8a:b3:a0:e9:37:d9:d4:0f:7b:bf:c5:14:8f:2d:9f:
         33:be:c4:89:fd:93:bc:b8:57:9d:99:46:6b:d3:1e:92:29:ac:
         55:e7:e7:e7:22:a6:c8:30:48:8d:02:ab:94:b1:40:b0:3f:42:
         d4:e0:d6:dc:3c:d5:98:ab:c6:bd:02:4b:fd:fb:28:dc:85:41:
         1b:ab:c4:30:e3:68:a6:2f:9c:09:ec:cd:d5:e5:75:92:59:93:
         5e:f4:02:fc:63:52:92:45:ab:08:30:19:92:d5:86:dc:54:2a:
         4b:4b:e9:97:14:33:a6:05:4a:05:ac:ca:de:90:95:e4:d0:29:
         99:50:55:e8:20:7e:b7:75:d1:d8:b8:4d:d5:29:fc:41:c2:ae:
         a1:94:69:ea:ac:a1:5a:0a:71:ed:f3:d8:92:5d:5f:7c:28:27:
         eb:15:2a:b0:eb:75:e1:49:a3:cc:db:52:38:7c:85:b4:6a:0c:
         36:78:c8:66:c5:f7:84:80:10:6a:55:65:be:ec:9b:f1:bb:9f:
         2f:ba:8f:2d:de:b7:69:d1:db:b6:da:34:d1:8a:d0:29:c6:68:
         b7:6d:b1:17:7a:15:d6:48:5e:c8:97:da:d9:fc:ef:f4:0e:46:
         87:63:3e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:51 2026 by rpki-client