Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
File:                     QGBqW10pu_QhZ_posyaGfvkOgm8.mft (raw, json)
Hash identifier:          HIXZPFlcT02fSl9/C8e0UFZHIlhaUYtIT/yZuZuUxm8=
Subject key identifier:   13:06:0C:6E:B0:00:66:8C:BC:0A:0C:3E:47:C7:82:BB:07:E1:91:C4
Authority key identifier: 40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F
Certificate issuer:       /CN=A91B872C/serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
Certificate serial:       08F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
Manifest number:          08E7
Signing time:             Sun 26 Jul 2026 20:55:08 +0000
Manifest this update:     Sun 26 Jul 2026 20:55:08 +0000
Manifest next update:     Sun 02 Aug 2026 20:55:08 +0000
Files and hashes:         1: QGBqW10pu_QhZ_posyaGfvkOgm8.crl (hash: h8d/iAY5KJ9AvUMm/jEooncTg3IXK/OKhw1J6/0ryEM=)
                          2: 7B2649225FE211EB9C1A7864C4F9AE02.roa (hash: D61mhla4ZKX7DfgoplRcuCG35MYNou9878EVBT40r2c=)
                          3: C86D4880DBDE11EAB7E6495DC4F9AE02.roa (hash: tUsv3tNoQWMVfE/GiWVi84l0pY9vapkX9vPKn8R6z3E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 20:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B872C, serialNumber=40606A5B5D29BBF42167FA68B326867EF90E826F
        Validity
            Not Before: Jul 26 20:55:08 2026 GMT
            Not After : Aug  2 20:55:08 2026 GMT
        Subject: CN=6a66742c-27e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:86:ae:f6:dc:47:8c:e5:30:a7:22:a4:21:22:
                    d2:e1:69:7c:2a:92:67:fd:12:73:a9:a9:c9:9e:5c:
                    c7:d5:02:07:70:28:00:a8:d3:ff:7a:da:2a:22:12:
                    26:53:a2:e6:50:d5:ad:3f:67:54:22:36:6b:00:8a:
                    76:8c:47:e4:de:6e:c8:67:10:55:03:84:67:54:cf:
                    5e:2d:85:44:b1:18:b6:bd:e3:c6:ce:9c:d7:c8:d8:
                    cb:50:2e:54:00:d3:dc:1f:bd:31:07:2d:25:5f:64:
                    d9:64:1c:b4:fd:9f:2c:bd:5a:f6:88:39:14:e4:36:
                    d9:4d:ba:5f:45:8f:42:6b:24:f3:e7:3a:f0:53:22:
                    f9:0f:af:e5:57:0b:b7:5c:0c:3a:a9:dd:54:68:3d:
                    0f:af:52:3a:82:0f:fb:08:44:62:d6:8c:d6:79:23:
                    01:f9:d1:d7:cf:e2:d8:51:f7:f1:3a:84:42:76:8c:
                    92:4e:44:ee:58:39:2b:4a:73:9b:f5:d1:03:bf:65:
                    1e:44:df:42:50:e3:23:fe:2d:8c:eb:cf:fc:01:e6:
                    15:0d:d4:a2:6b:28:a5:52:45:d8:37:bf:38:5a:b3:
                    5c:2f:39:59:ff:58:a8:ed:ac:81:68:d3:34:ea:8d:
                    46:67:f1:98:b9:17:c9:45:cc:a8:60:42:b0:1d:db:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:06:0C:6E:B0:00:66:8C:BC:0A:0C:3E:47:C7:82:BB:07:E1:91:C4
            X509v3 Authority Key Identifier:
                keyid:40:60:6A:5B:5D:29:BB:F4:21:67:FA:68:B3:26:86:7E:F9:0E:82:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGBqW10pu_QhZ_posyaGfvkOgm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B872C/F20E5596DBDC11EA93FF7D44C4F9AE02/QGBqW10pu_QhZ_posyaGfvkOgm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:ab:f4:e3:39:3e:3d:c2:2f:40:42:be:d0:03:47:d1:a6:da:
         08:a5:83:b0:cd:15:f4:c6:ae:62:35:fd:2f:c8:a4:d8:63:19:
         a0:11:7f:dd:96:ad:a7:79:81:4f:8d:38:fa:89:21:7c:85:c4:
         32:5e:65:dd:d8:a5:09:99:bf:a0:f1:e4:94:b7:e5:a6:b3:55:
         e2:9f:33:7c:73:aa:f8:61:60:81:a6:3e:fc:fb:6d:55:f1:ec:
         e9:47:7f:94:ea:17:f1:08:7e:42:98:90:c2:7c:c0:52:a2:d8:
         be:d0:11:cc:c6:97:9a:38:ef:cd:69:ea:5b:1a:c9:14:26:1b:
         fb:87:ea:e0:5e:4a:75:c4:4b:3e:4c:1a:41:ea:6d:43:f5:48:
         94:6f:5b:3b:43:3d:96:99:17:41:1f:3e:de:4d:d1:22:f3:03:
         2c:a4:ed:13:e7:d2:54:a0:cf:01:56:4d:2f:81:6b:1b:73:e0:
         9d:ae:30:08:30:1f:46:09:52:ce:af:38:b3:9a:8a:61:99:51:
         73:35:96:87:e8:e8:fd:1e:51:04:01:9d:49:bd:cd:65:01:e1:
         b3:7a:ab:82:3f:19:56:7e:82:6f:a1:c0:52:59:de:fa:93:ec:
         d3:99:8f:2b:b3:48:ec:f1:13:3e:a5:14:d1:c3:31:46:96:06:
         8d:53:71:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:42:01 2026 by rpki-client