Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft
File:                     1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft (raw, json)
Hash identifier:          nQFOim2+fMNUEurOalj6f9FmwGyn54XPTgrc/LeYrOE=
Subject key identifier:   D1:D7:D5:C6:87:A7:79:45:7C:D1:06:52:4E:D5:06:89:81:5D:94:6D
Authority key identifier: D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2
Certificate issuer:       /CN=A91CB6E8/serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft
Manifest number:          91
Signing time:             Mon 27 Jul 2026 09:37:28 +0000
Manifest this update:     Mon 27 Jul 2026 09:37:27 +0000
Manifest next update:     Mon 03 Aug 2026 09:37:27 +0000
Files and hashes:         1: 1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl (hash: T9DLBfIYQfc3cSEEVjN9X0ZLEHEnr6QP3LHQqC1RzAI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB6E8, serialNumber=D5087EB71FB812F1002FF884B2F9D56E3BDD4CF2
        Validity
            Not Before: Jul 27 09:37:27 2026 GMT
            Not After : Aug  3 09:37:27 2026 GMT
        Subject: CN=6a6726d8-8dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:52:fe:a8:81:71:cc:93:43:23:95:6f:b2:
                    e3:34:0b:eb:8a:72:47:b7:bd:0a:d6:5d:4c:1a:30:
                    da:4b:0a:34:4c:4f:0b:5e:0d:95:25:36:2a:c4:ba:
                    10:44:9c:9b:c2:3b:ab:9b:af:e0:0a:ab:1e:a7:41:
                    23:93:94:f1:1b:f1:7c:c3:90:9c:66:30:1c:56:a4:
                    8c:d2:0e:20:d9:8b:04:2c:98:a9:d9:48:64:c3:b4:
                    ef:05:f8:50:02:03:1c:a3:44:b6:5d:e1:6c:3b:2d:
                    93:99:ec:b2:b0:52:37:82:f5:ba:d4:fc:ce:c7:6f:
                    16:56:b4:eb:f6:0e:04:71:b3:f3:fc:07:72:c2:c0:
                    f8:83:94:df:76:89:05:54:c6:f0:1b:8e:71:c5:c2:
                    1b:48:10:81:64:a5:8c:42:08:2d:ac:05:a3:30:78:
                    34:45:53:71:f5:7f:31:d9:4e:86:52:a3:15:32:64:
                    7c:ee:4a:f4:92:fa:ce:47:9b:20:d5:7e:aa:4d:9e:
                    c1:89:c8:1b:30:f8:41:c9:44:3b:f7:04:aa:b4:15:
                    92:12:bd:d9:93:7b:cf:ad:18:1f:12:93:3e:e2:41:
                    03:45:d1:2d:c3:f0:b7:db:48:5f:3c:93:a4:1c:72:
                    29:75:34:44:56:b5:35:df:db:c8:b2:6e:6f:f0:df:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D7:D5:C6:87:A7:79:45:7C:D1:06:52:4E:D5:06:89:81:5D:94:6D
            X509v3 Authority Key Identifier:
                keyid:D5:08:7E:B7:1F:B8:12:F1:00:2F:F8:84:B2:F9:D5:6E:3B:DD:4C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/32E34DEEAE2B11F098EA2E85C4F9AE02/1Qh-tx-4EvEAL_iEsvnVbjvdTPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:91:d2:f4:8e:c5:36:09:12:b4:57:ca:48:0e:8b:2e:1d:f4:
         35:f0:dd:95:41:12:24:3f:27:f4:bf:54:51:33:03:8f:72:60:
         67:5c:78:7a:f8:54:c8:4f:76:2d:e3:28:27:0a:3c:dc:3f:97:
         16:bc:33:4b:ed:1b:2a:6d:c2:19:df:38:dc:2b:35:bf:ab:d8:
         e7:22:65:22:5f:5e:de:20:e1:85:82:2f:88:8a:7f:00:d8:ae:
         8c:2b:25:b2:94:ae:89:96:a2:86:9e:18:d3:91:1e:f0:10:89:
         1c:05:af:cf:96:d4:99:80:17:d2:94:be:68:f2:af:cb:c1:d9:
         f5:7d:da:40:3d:c2:3d:64:51:68:7b:26:26:92:e1:ec:09:55:
         de:01:c8:29:93:1d:5c:01:d7:13:53:2f:d5:cf:5c:80:08:40:
         94:0d:ca:84:3c:ec:9e:1f:17:41:02:f4:b1:b9:5d:fc:46:9a:
         8f:81:0d:7b:d5:ad:23:fe:3a:4a:ec:63:ee:71:60:4a:9c:e8:
         d1:d1:58:36:e8:4c:cf:58:3a:a6:8d:1b:84:c3:dd:eb:33:0c:
         8a:f5:b2:96:3c:a6:1a:11:db:75:59:7d:e8:97:50:c4:4a:eb:
         1a:3a:2c:fe:e0:31:da:ef:40:1b:6b:85:11:8e:83:a3:2a:aa:
         5f:a9:a1:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0I2RTgxMTAvBgNVBAUTKEQ1MDg3RUI3MUZCODEyRjEwMDJGRjg4NEIyRjlENTZF
M0JERDRDRjIwHhcNMjYwNzI3MDkzNzI3WhcNMjYwODAzMDkzNzI3WjAYMRYwFAYD
VQQDEw02YTY3MjZkOC04ZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6VpS/qiBccyTQyOVb7LjNAvrinJHt70K1l1MGjDaSwo0TE8LXg2VJTYqxLoQ
RJybwjurm6/gCqsep0Ejk5TxG/F8w5CcZjAcVqSM0g4g2YsELJip2Uhkw7TvBfhQ
AgMco0S2XeFsOy2TmeyysFI3gvW61PzOx28WVrTr9g4EcbPz/AdywsD4g5TfdokF
VMbwG45xxcIbSBCBZKWMQggtrAWjMHg0RVNx9X8x2U6GUqMVMmR87kr0kvrOR5sg
1X6qTZ7BicgbMPhByUQ79wSqtBWSEr3Zk3vPrRgfEpM+4kEDRdEtw/C320hfPJOk
HHIpdTREVrU139vIsm5v8N8wywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHX1caH
p3lFfNEGUk7VBomBXZRtMB8GA1UdIwQYMBaAFNUIfrcfuBLxAC/4hLL51W473Uzy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjZFOC8zMkUzNERFRUFF
MkIxMUYwOThFQTJFODVDNEY5QUUwMi8xUWgtdHgtNEV2RUFMX2lFc3ZuVmJqdmRU
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFRaC10eC00RXZFQUxfaUVzdm5WYmp2ZFRQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QjZFOC8zMkUzNERFRUFFMkIxMUYwOThFQTJFODVDNEY5QUUwMi8xUWgtdHgtNEV2
RUFMX2lFc3ZuVmJqdmRUUEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEJHS9I7FNgkStFfKSA6LLh30NfDdlUESJD8n9L9UUTMDj3JgZ1x4evhUyE92
LeMoJwo83D+XFrwzS+0bKm3CGd843Cs1v6vY5yJlIl9e3iDhhYIviIp/ANiujCsl
spSuiZaihp4Y05Ee8BCJHAWvz5bUmYAX0pS+aPKvy8HZ9X3aQD3CPWRRaHsmJpLh
7AlV3gHIKZMdXAHXE1Mv1c9cgAhAlA3KhDzsnh8XQQL0sbld/Eaaj4ENe9WtI/46
Suxj7nFgSpzo0dFYNuhMz1g6po0bhMPd6zMMivWyljymGhHbdVl96JdQxErrGjos
/uAx2u9AG2uFEY6DoyqqX6mh1g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:46:40 2026 by rpki-client