Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
File:                     QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft (raw, json)
Hash identifier:          GkwAEYFdny9hhv78dSg6oNX5mu9rTMA8tTNZt3F+Z3I=
Subject key identifier:   11:45:07:6E:DD:FC:D3:4A:35:91:1B:5E:A9:42:AB:35:0D:65:B1:68
Authority key identifier: 43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED
Certificate issuer:       /CN=A91CDCF5/serialNumber=43096439AD45378DC5E71223F8726127B11965ED
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
Manifest number:          66
Signing time:             Mon 27 Jul 2026 10:18:10 +0000
Manifest this update:     Mon 27 Jul 2026 10:18:09 +0000
Manifest next update:     Mon 03 Aug 2026 10:18:09 +0000
Files and hashes:         1: QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl (hash: E5Eed6AQWxp45gzSTz8eUMlzaPGhxfO12uIMLQ7xruM=)
                          2: D735EAACF1EF11F0A394FA90446F56BC.roa (hash: Ys/2qaSppEBebOfLXvRLlfClHojsR1MQFiAQ4UPY7vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl
                          rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDCF5, serialNumber=43096439AD45378DC5E71223F8726127B11965ED
        Validity
            Not Before: Jul 27 10:18:09 2026 GMT
            Not After : Aug  3 10:18:09 2026 GMT
        Subject: CN=6a673062-f02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:17:21:9f:aa:b3:56:a2:95:6d:92:ca:ec:
                    78:e2:42:98:13:6b:b5:02:df:91:61:ef:4e:15:da:
                    c4:f3:2d:6a:22:2f:a2:3b:8b:14:58:6e:36:58:64:
                    52:c6:c6:d9:45:ce:c2:2a:07:28:76:4a:05:93:f0:
                    09:49:8c:32:01:bf:fc:17:0c:b5:86:21:87:d7:77:
                    3d:94:a5:ff:b7:f2:33:40:2b:46:55:76:cd:e7:89:
                    2e:e3:68:43:d2:8d:93:8c:8c:96:06:d6:65:ca:d6:
                    87:da:08:30:20:6c:16:83:9b:2c:58:92:b6:f6:e0:
                    97:0b:2c:eb:1b:da:b6:32:79:31:55:3e:f4:27:27:
                    61:6b:b2:53:9a:75:eb:3d:e1:5f:0e:52:cb:ec:20:
                    73:f0:61:99:10:53:6e:6d:ee:e1:3f:f4:0e:50:b2:
                    8f:ef:d2:10:66:4a:12:8f:45:d5:be:8b:38:b8:61:
                    0f:aa:ed:fd:c5:d4:e6:a3:25:f9:a8:e5:91:d9:52:
                    d6:0b:6e:15:ae:2d:57:7c:da:26:bd:5a:79:7a:2f:
                    f5:fd:ae:72:35:0b:d8:f9:e0:c4:8b:a7:fb:f3:21:
                    38:79:aa:2c:29:b6:f5:37:db:c8:85:09:86:16:e6:
                    f7:49:cd:bb:0e:6b:b5:6f:1d:05:c6:09:98:c2:ce:
                    5a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:07:6E:DD:FC:D3:4A:35:91:1B:5E:A9:42:AB:35:0D:65:B1:68
            X509v3 Authority Key Identifier:
                keyid:43:09:64:39:AD:45:37:8D:C5:E7:12:23:F8:72:61:27:B1:19:65:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QwlkOa1FN43F5xIj-HJhJ7EZZe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/5996712CF1E311F0BDEC72B5416F56BC/QwlkOa1FN43F5xIj-HJhJ7EZZe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:de:95:85:81:e4:ab:16:50:87:5a:7a:fa:66:2b:3a:a3:
         31:5e:48:77:1b:8d:b0:8c:ae:90:5e:09:c5:db:06:13:32:58:
         4e:b5:a7:57:81:06:31:bd:b6:0d:b0:37:84:b9:7b:1e:e5:0c:
         a1:26:65:d3:69:a2:5d:94:20:a0:78:9d:e3:4f:81:dd:20:22:
         12:33:a1:5f:fd:6d:fe:cc:a0:f2:df:29:22:aa:ce:ff:36:9c:
         3d:a8:ac:af:41:fc:74:ba:4b:d9:5d:6c:f7:10:43:c4:47:b7:
         1e:41:c3:3e:96:6a:b6:83:6c:fc:3c:04:e2:1b:3e:a4:45:68:
         f3:05:c2:a2:2f:52:02:4a:10:2c:a7:a7:28:f7:d3:49:63:56:
         02:d2:61:a4:be:78:15:ba:37:1d:71:86:5c:50:04:90:e5:37:
         80:6e:5d:cf:16:40:a0:6a:2f:6b:5a:1a:ab:d8:bb:5f:71:0c:
         66:19:82:a2:db:09:c3:d4:27:8f:34:54:a9:c2:19:83:80:fe:
         94:01:27:22:46:f2:68:2a:f0:e4:c3:ff:a2:f2:3f:f5:12:ed:
         00:1a:e2:15:bc:9e:bd:eb:f5:9c:ce:c2:1f:a9:0e:ba:2c:e0:
         d7:d9:66:1a:2b:05:98:48:65:b8:f5:15:7b:c5:e4:98:30:8d:
         c2:44:5e:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RENGNTExMC8GA1UEBRMoNDMwOTY0MzlBRDQ1Mzc4REM1RTcxMjIzRjg3MjYxMjdC
MTE5NjVFRDAeFw0yNjA3MjcxMDE4MDlaFw0yNjA4MDMxMDE4MDlaMBgxFjAUBgNV
BAMTDTZhNjczMDYyLWYwMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCW3hchn6qzVqKVbZLK7HjiQpgTa7UC35Fh704V2sTzLWoiL6I7ixRYbjZYZFLG
xtlFzsIqByh2SgWT8AlJjDIBv/wXDLWGIYfXdz2Upf+38jNAK0ZVds3niS7jaEPS
jZOMjJYG1mXK1ofaCDAgbBaDmyxYkrb24JcLLOsb2rYyeTFVPvQnJ2FrslOades9
4V8OUsvsIHPwYZkQU25t7uE/9A5Qso/v0hBmShKPRdW+izi4YQ+q7f3F1OajJfmo
5ZHZUtYLbhWuLVd82ia9Wnl6L/X9rnI1C9j54MSLp/vzITh5qiwptvU328iFCYYW
5vdJzbsOa7VvHQXGCZjCzlovAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEUUHbt38
00o1kRteqUKrNQ1lsWgwHwYDVR0jBBgwFoAUQwlkOa1FN43F5xIj+HJhJ7EZZe0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEQ0Y1LzU5OTY3MTJDRjFF
MzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQzRjV4SWotSEpoSjdFWlpl
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUXdsa09hMUZONDNGNXhJai1ISmhKN0VaWmUwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE
Q0Y1LzU5OTY3MTJDRjFFMzExRjBCREVDNzJCNTQxNkY1NkJDL1F3bGtPYTFGTjQz
RjV4SWotSEpoSjdFWlplMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAhqt6VhYHkqxZQh1p6+mYrOqMxXkh3G42wjK6QXgnF2wYTMlhOtadXgQYxvbYN
sDeEuXse5QyhJmXTaaJdlCCgeJ3jT4HdICISM6Ff/W3+zKDy3ykiqs7/Npw9qKyv
Qfx0ukvZXWz3EEPER7ceQcM+lmq2g2z8PATiGz6kRWjzBcKiL1ICShAsp6co99NJ
Y1YC0mGkvngVujcdcYZcUASQ5TeAbl3PFkCgai9rWhqr2LtfcQxmGYKi2wnD1CeP
NFSpwhmDgP6UASciRvJoKvDkw/+i8j/1Eu0AGuIVvJ696/WczsIfqQ66LODX2WYa
KwWYSGW49RV7xeSYMI3CRF7a
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:13 2026 by rpki-client