Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
File:                     sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json)
Hash identifier:          Uf4ntyhWr/AeciHwNK9uwGYDAbOrSbuA99M3rycfZrk=
Subject key identifier:   BE:7E:73:70:D9:8C:24:97:F3:29:21:25:EF:90:53:EC:8F:44:2C:9B
Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48
Certificate issuer:       /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
Certificate serial:       0D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
Manifest number:          0CD5
Signing time:             Tue 28 Jul 2026 18:43:51 +0000
Manifest this update:     Tue 28 Jul 2026 18:43:50 +0000
Manifest next update:     Tue 04 Aug 2026 18:43:50 +0000
Files and hashes:         1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: s61HDhRARWlZSHlmasyFxrQbzUcGBoE7t3oVYNGTYNY=)
                          2: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: Pa3ot+5z5ol95lA2w+Jvw6Gsu2PMGQdkC+e3HT9MeD8=)
                          3: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 5CBCbCNQtmal7jhPIzguEfXdAdwnlI8iW5BfKYZoqfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl
                          rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248
        Validity
            Not Before: Jul 28 18:43:50 2026 GMT
            Not After : Aug  4 18:43:50 2026 GMT
        Subject: CN=6a68f866-93bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:78:ba:fe:d5:71:56:b3:21:ad:13:88:ff:72:
                    ea:30:9c:f8:e3:e6:5e:97:e9:84:99:c0:f0:af:37:
                    24:2c:38:1a:99:10:60:de:4f:35:9e:85:65:14:ab:
                    14:e3:55:c9:86:16:6c:af:c3:a7:e8:51:12:b7:01:
                    23:82:e5:dc:af:2d:54:d8:c8:3b:86:86:1c:7a:a9:
                    1b:8f:54:44:47:2c:eb:3d:c7:1f:97:35:19:88:48:
                    11:f6:6b:43:d8:f0:6c:ba:de:3b:f9:91:9d:99:3b:
                    81:9c:32:22:ba:4b:a3:db:d4:dd:25:f4:18:2e:28:
                    e5:86:66:29:26:d5:43:f4:77:50:08:b7:83:12:51:
                    6f:24:74:9a:06:ed:db:4a:69:d4:33:32:d4:e8:18:
                    4d:12:15:69:fb:8e:c6:65:ca:e1:a2:8e:99:10:7e:
                    4d:0e:c2:29:2f:67:e2:3c:01:21:e8:51:d2:4a:e1:
                    b1:d4:6a:1b:ad:a6:e5:6f:f0:5e:f8:17:c0:49:fd:
                    27:f7:2a:41:e8:ef:92:f7:1e:03:b7:04:72:b6:2d:
                    6f:96:60:72:f7:62:9e:6c:ab:e3:70:e2:aa:18:7a:
                    f5:68:ba:a3:a4:54:4f:c5:69:ac:24:e7:4c:e9:9c:
                    b7:a3:44:27:03:db:a1:3d:04:92:04:e2:57:d9:62:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7E:73:70:D9:8C:24:97:F3:29:21:25:EF:90:53:EC:8F:44:2C:9B
            X509v3 Authority Key Identifier:
                keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:1d:c4:16:66:53:01:5d:06:9e:22:23:78:4b:74:11:cc:e7:
         3a:9d:57:a1:75:f7:13:6e:6c:3b:e1:8f:4e:71:2d:13:1c:1b:
         01:8f:16:5f:4d:90:6c:25:15:3e:b3:d3:9c:7e:dc:d4:af:05:
         68:98:42:e1:e3:4f:be:dd:f0:dc:dc:0e:84:a2:ba:7c:ce:66:
         0d:56:91:49:b2:94:33:d4:b1:6f:42:d6:9a:88:e5:ac:2a:6c:
         6f:8b:b3:27:ff:59:68:a6:42:48:7d:6c:b8:d6:64:87:0a:ea:
         38:53:b2:5b:bf:39:55:ba:1e:5b:8e:52:a7:4e:f6:e1:3e:e2:
         ae:f9:7c:35:70:48:61:14:64:98:cc:cb:1b:af:52:6b:d2:40:
         c3:c1:88:13:66:6a:30:1e:47:43:ee:73:a3:b4:5b:cd:2e:37:
         80:20:ca:33:8a:8c:26:c2:8f:56:a9:4a:e2:38:16:73:af:d1:
         d4:59:53:fd:ce:60:13:8d:e8:98:23:c2:f4:d7:ba:67:42:42:
         ae:08:6a:2f:82:64:92:9e:6f:40:54:13:c5:e9:b4:ea:fb:e1:
         7e:c2:a2:cc:ff:5f:1a:3c:ac:c1:f0:e4:3b:b4:e8:d3:27:a2:
         58:c5:57:ad:a2:66:27:82:dd:3e:e7:64:4c:5b:40:fe:ec:50:
         7d:ab:b5:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0
MzYxODMyNDgwHhcNMjYwNzI4MTg0MzUwWhcNMjYwODA0MTg0MzUwWjAYMRYwFAYD
VQQDEw02YTY4Zjg2Ni05M2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ni6/tVxVrMhrROI/3LqMJz44+Zel+mEmcDwrzckLDgamRBg3k81noVlFKsU
41XJhhZsr8On6FEStwEjguXcry1U2Mg7hoYceqkbj1RERyzrPccflzUZiEgR9mtD
2PBsut47+ZGdmTuBnDIiukuj29TdJfQYLijlhmYpJtVD9HdQCLeDElFvJHSaBu3b
SmnUMzLU6BhNEhVp+47GZcrhoo6ZEH5NDsIpL2fiPAEh6FHSSuGx1Gobrablb/Be
+BfASf0n9ypB6O+S9x4DtwRyti1vlmBy92KebKvjcOKqGHr1aLqjpFRPxWmsJOdM
6Zy3o0QnA9uhPQSSBOJX2WLtKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL5+c3DZ
jCSX8ykhJe+QU+yPRCybMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD
MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN
a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS
dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxx3EFmZTAV0GniIjeEt0EcznOp1XoXX3E25sO+GPTnEtExwbAY8WX02QbCUV
PrPTnH7c1K8FaJhC4eNPvt3w3NwOhKK6fM5mDVaRSbKUM9Sxb0LWmojlrCpsb4uz
J/9ZaKZCSH1suNZkhwrqOFOyW785VboeW45Sp0724T7irvl8NXBIYRRkmMzLG69S
a9JAw8GIE2ZqMB5HQ+5zo7RbzS43gCDKM4qMJsKPVqlK4jgWc6/R1FlT/c5gE43o
mCPC9Ne6Z0JCrghqL4Jkkp5vQFQTxem06vvhfsKizP9fGjyswfDkO7To0yeiWMVX
raJmJ4LdPudkTFtA/uxQfau1Cg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:55 2026 by rpki-client