Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
File:                     QRzJhRGOMuB6FVTV6boLTNKKSu8.mft (raw, json)
Hash identifier:          6nvrYd5IJ7a9M9A2K69U3V2ezR7ZUlT1RvZ8MCi/rug=
Subject key identifier:   45:08:D7:A7:67:36:DA:B6:F0:B7:24:27:A2:97:B1:79:0C:FB:CC:3A
Authority key identifier: 41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF
Certificate issuer:       /CN=A91BEE0F/serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
Manifest number:          028E
Signing time:             Mon 27 Jul 2026 03:06:37 +0000
Manifest this update:     Mon 27 Jul 2026 03:06:37 +0000
Manifest next update:     Mon 03 Aug 2026 03:06:37 +0000
Files and hashes:         1: QRzJhRGOMuB6FVTV6boLTNKKSu8.crl (hash: nQEkoMrrtoKLFkMD5fbo77WKNCjQLl+uSAY+/u//Sdo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl
                          rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEE0F, serialNumber=411CC985118E32E07A1554D5E9BA0B4CD28A4AEF
        Validity
            Not Before: Jul 27 03:06:37 2026 GMT
            Not After : Aug  3 03:06:37 2026 GMT
        Subject: CN=6a66cb3d-4e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:01:b2:70:71:d6:ab:c0:35:89:81:5b:78:
                    e3:16:bc:d2:1f:cc:a3:a1:d7:58:c0:b0:d6:2d:4b:
                    e7:85:e1:fb:7a:71:79:79:45:6c:31:d4:ba:9a:ab:
                    e3:8a:ba:37:66:53:5b:77:2c:11:08:ad:fa:29:76:
                    77:1d:ad:3b:88:9c:4e:5a:6c:43:0a:18:56:16:d5:
                    87:0a:5e:f7:55:85:25:ad:60:b5:7a:14:69:8f:8f:
                    fd:f3:f6:ed:7a:c0:12:29:15:01:f4:8c:18:8d:d6:
                    8c:4d:e7:10:4e:ab:33:17:33:e2:ad:e1:51:76:e7:
                    6c:4d:47:b5:07:0f:87:1a:ab:68:a7:a6:e8:1a:ee:
                    00:e9:3b:f0:f7:4d:d9:86:b7:0d:85:ec:d7:ba:88:
                    68:97:41:7c:3d:be:53:bc:b1:99:1c:35:b3:a3:76:
                    c9:6c:c8:dd:8f:20:2f:64:84:d6:e1:e5:16:ba:32:
                    f4:73:fc:6f:39:3e:b8:96:da:fe:9f:e7:ea:07:fa:
                    a6:99:a4:2c:c0:b0:fc:9e:33:6d:55:59:d2:31:4c:
                    14:5a:39:b5:17:41:63:b7:bd:3f:7b:4b:3a:c1:4e:
                    ce:31:a3:88:bf:b9:37:55:61:d1:0e:03:cb:05:05:
                    9f:e9:ec:d6:47:d1:44:78:1b:07:66:ee:14:bb:15:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:D7:A7:67:36:DA:B6:F0:B7:24:27:A2:97:B1:79:0C:FB:CC:3A
            X509v3 Authority Key Identifier:
                keyid:41:1C:C9:85:11:8E:32:E0:7A:15:54:D5:E9:BA:0B:4C:D2:8A:4A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRzJhRGOMuB6FVTV6boLTNKKSu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE0F/5E11148E9BA911EDA33EEC6BC4F9AE02/QRzJhRGOMuB6FVTV6boLTNKKSu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:06:f5:9b:96:17:db:02:89:18:ac:d1:f3:53:ea:cb:0b:
         98:61:44:90:8b:d4:30:2e:77:0a:74:31:66:c7:96:39:47:05:
         27:86:15:31:65:36:d6:c8:04:c6:c7:23:16:9d:03:31:45:b0:
         37:ad:54:64:ae:95:f7:8b:10:01:ff:23:1f:37:1b:dd:d7:ac:
         3a:6b:7c:0d:9a:90:03:7b:b3:a3:02:f7:d0:b1:d2:13:4c:34:
         39:28:5e:db:15:13:3b:8a:3a:a5:84:4b:42:fc:ec:2a:18:fb:
         d9:41:6e:e5:10:ac:64:fb:e9:f9:93:9e:a7:6c:a7:ab:e8:57:
         6b:d7:e1:22:02:68:06:cf:63:ba:b9:d5:ce:c9:ad:62:d9:c4:
         bd:2a:5f:fd:5f:97:8b:ee:d7:98:c3:2e:48:e2:d1:07:5a:e5:
         d3:b5:c2:51:75:d8:6e:4e:dc:de:46:79:bf:66:cc:20:9c:21:
         f1:a0:36:cd:98:28:2c:b2:a9:b3:6c:72:01:a9:bd:72:1b:af:
         cc:7e:6e:68:08:b3:72:9c:ea:92:bc:ec:d1:d7:e3:25:76:19:
         c3:2e:ac:9b:cd:72:2c:60:d2:df:b3:54:b7:18:77:0c:af:64:
         14:fe:a7:a2:4d:83:b8:72:d6:5d:2c:10:6a:cb:f3:f2:dc:bb:
         c0:db:0a:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkVFMEYxMTAvBgNVBAUTKDQxMUNDOTg1MTE4RTMyRTA3QTE1NTRENUU5QkEwQjRD
RDI4QTRBRUYwHhcNMjYwNzI3MDMwNjM3WhcNMjYwODAzMDMwNjM3WjAYMRYwFAYD
VQQDEw02YTY2Y2IzZC00ZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyU8BsnBx1qvANYmBW3jjFrzSH8yjoddYwLDWLUvnheH7enF5eUVsMdS6mqvj
iro3ZlNbdywRCK36KXZ3Ha07iJxOWmxDChhWFtWHCl73VYUlrWC1ehRpj4/98/bt
esASKRUB9IwYjdaMTecQTqszFzPireFRdudsTUe1Bw+HGqtop6boGu4A6Tvw903Z
hrcNhezXuohol0F8Pb5TvLGZHDWzo3bJbMjdjyAvZITW4eUWujL0c/xvOT64ltr+
n+fqB/qmmaQswLD8njNtVVnSMUwUWjm1F0Fjt70/e0s6wU7OMaOIv7k3VWHRDgPL
BQWf6ezWR9FEeBsHZu4UuxWuVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUI16dn
Ntq28LckJ6KXsXkM+8w6MB8GA1UdIwQYMBaAFEEcyYURjjLgehVU1em6C0zSikrv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUwRi81RTExMTQ4RTlC
QTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011QjZGVlRWNmJvTFROS0tT
dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FSekpoUkdPTXVCNkZWVFY2Ym9MVE5LS1N1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RUUwRi81RTExMTQ4RTlCQTkxMUVEQTMzRUVDNkJDNEY5QUUwMi9RUnpKaFJHT011
QjZGVlRWNmJvTFROS0tTdTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMe0G9ZuWF9sCiRis0fNT6ssLmGFEkIvUMC53CnQxZseWOUcFJ4YVMWU21sgE
xscjFp0DMUWwN61UZK6V94sQAf8jHzcb3desOmt8DZqQA3uzowL30LHSE0w0OShe
2xUTO4o6pYRLQvzsKhj72UFu5RCsZPvp+ZOep2ynq+hXa9fhIgJoBs9jurnVzsmt
YtnEvSpf/V+Xi+7XmMMuSOLRB1rl07XCUXXYbk7c3kZ5v2bMIJwh8aA2zZgoLLKp
s2xyAam9chuvzH5uaAizcpzqkrzs0dfjJXYZwy6sm81yLGDS37NUtxh3DK9kFP6n
ok2DuHLWXSwQasvz8ty7wNsKYQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:11 2026 by rpki-client