Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
File:                     QMhVkA6-tN3uEZyAjkWar991tYQ.mft (raw, json)
Hash identifier:          CuxEOncjNbTs/DwbzkOoTtZPlyqwax2r0fjx0aVCqj0=
Subject key identifier:   AC:6B:C3:73:26:71:3F:19:30:3E:15:A4:27:1E:3F:A9:DC:6B:B9:8A
Authority key identifier: 40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84
Certificate issuer:       /CN=A91D1C2E/serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
Manifest number:          3B
Signing time:             Wed 17 Jun 2026 08:55:08 +0000
Manifest this update:     Wed 17 Jun 2026 08:55:08 +0000
Manifest next update:     Wed 24 Jun 2026 08:55:08 +0000
Files and hashes:         1: QMhVkA6-tN3uEZyAjkWar991tYQ.crl (hash: 3oEhWOmoJe1s0posFjF/wa18oByxJxWKBeGmP4BEdbw=)
                          2: BEBA0144251011F1AF69A29DBE833773.roa (hash: /JZvZ1urnfcPcC1nbFisB4WBkPyXg+Maa+h4MhEN9vI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1C2E, serialNumber=40C855900EBEB4DDEE119C808E459AAFDF75B584
        Validity
            Not Before: Jun 17 08:55:08 2026 GMT
            Not After : Jun 24 08:55:08 2026 GMT
        Subject: CN=6a3260ec-3041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:49:26:32:aa:5b:0f:a7:34:66:19:df:c3:57:
                    5d:11:d6:c0:00:f4:26:c3:d4:11:e7:3c:90:74:ae:
                    69:b3:00:e6:15:af:41:90:ec:f5:3f:aa:82:9c:30:
                    1f:bc:e4:cf:20:eb:18:04:d1:e4:54:27:65:46:ce:
                    2b:7d:42:8f:6b:11:af:4a:88:ad:d3:44:31:1c:6c:
                    c1:03:d4:e8:54:82:9e:63:8d:45:c3:f9:15:f5:d0:
                    02:b0:c8:a6:e1:08:52:54:35:74:64:c3:56:6d:05:
                    af:59:3c:66:00:a7:ec:d5:28:33:60:87:69:7c:4f:
                    0c:37:ac:9f:0c:1a:8f:30:e8:54:77:7e:0f:6b:a3:
                    4d:21:73:6e:ac:15:71:66:3b:a7:fa:e6:7b:08:70:
                    db:cd:90:cc:cc:92:aa:d6:6e:8a:8f:08:e0:fc:9c:
                    10:eb:7f:39:5d:66:f4:b2:c2:df:5d:01:d4:cb:3c:
                    84:67:ff:39:96:6a:f7:4e:66:86:c2:1c:85:18:73:
                    22:51:92:fe:62:6a:91:5c:67:0f:82:98:e5:c7:91:
                    2f:13:07:f2:dc:d6:c2:91:3e:1d:7a:88:61:ab:97:
                    57:92:ef:1c:5a:b6:0b:54:14:4a:4a:7c:7c:90:7b:
                    1e:73:7b:25:11:e5:1f:80:0a:3c:54:25:42:fb:f5:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6B:C3:73:26:71:3F:19:30:3E:15:A4:27:1E:3F:A9:DC:6B:B9:8A
            X509v3 Authority Key Identifier:
                keyid:40:C8:55:90:0E:BE:B4:DD:EE:11:9C:80:8E:45:9A:AF:DF:75:B5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMhVkA6-tN3uEZyAjkWar991tYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C2E/A44847B824D811F1971FE104AC833773/QMhVkA6-tN3uEZyAjkWar991tYQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:29:5e:cc:06:0f:f3:aa:8b:9f:06:bf:37:c5:8d:4e:1b:
         e7:7f:64:be:be:e9:20:1e:1f:b0:85:32:a5:40:9f:87:cf:b2:
         dd:90:8c:6d:46:b1:a3:ad:e8:ce:80:f9:fb:a9:24:0b:e6:27:
         5e:2a:bf:9e:a2:b0:bb:c6:10:72:f5:fa:c0:29:c9:62:64:a4:
         b7:3a:c1:29:7c:a5:01:f2:c5:54:ee:85:67:f6:dc:66:31:41:
         2b:a6:64:91:ae:f5:58:20:8a:0e:17:93:d6:8e:b8:c7:db:e7:
         59:c9:20:aa:aa:c0:23:37:16:ed:24:a5:b4:ca:c7:70:ab:56:
         09:8e:de:87:ce:45:5e:fa:8c:1e:46:c3:22:31:0a:70:f0:e6:
         82:b6:45:d8:9d:8e:6a:dd:45:ea:c4:95:1a:b0:cf:e0:29:aa:
         e3:d2:8d:09:f5:7b:a7:9a:52:ca:73:36:3f:b0:d1:62:b9:d8:
         d2:42:97:98:eb:38:f5:08:8c:da:ac:f7:fc:15:21:a1:a0:04:
         28:7b:85:7a:73:51:5d:23:e9:a4:09:3a:f9:8c:2a:a6:9c:5c:
         3a:41:fa:d0:0a:6e:ef:80:d7:ed:b0:77:bf:86:85:6a:c4:e7:
         5e:c3:8a:26:6b:7e:05:22:ef:fb:bf:27:bc:c7:16:63:e2:de:
         ce:fb:7f:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MUMyRTExMC8GA1UEBRMoNDBDODU1OTAwRUJFQjREREVFMTE5QzgwOEU0NTlBQUZE
Rjc1QjU4NDAeFw0yNjA2MTcwODU1MDhaFw0yNjA2MjQwODU1MDhaMBgxFjAUBgNV
BAMTDTZhMzI2MGVjLTMwNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdSSYyqlsPpzRmGd/DV10R1sAA9CbD1BHnPJB0rmmzAOYVr0GQ7PU/qoKcMB+8
5M8g6xgE0eRUJ2VGzit9Qo9rEa9KiK3TRDEcbMED1OhUgp5jjUXD+RX10AKwyKbh
CFJUNXRkw1ZtBa9ZPGYAp+zVKDNgh2l8Tww3rJ8MGo8w6FR3fg9ro00hc26sFXFm
O6f65nsIcNvNkMzMkqrWboqPCOD8nBDrfzldZvSywt9dAdTLPIRn/zmWavdOZobC
HIUYcyJRkv5iapFcZw+CmOXHkS8TB/Lc1sKRPh16iGGrl1eS7xxatgtUFEpKfHyQ
ex5zeyUR5R+ACjxUJUL79XEHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrGvDcyZx
PxkwPhWkJx4/qdxruYowHwYDVR0jBBgwFoAUQMhVkA6+tN3uEZyAjkWar991tYQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQxQzJFL0E0NDg0N0I4MjRE
ODExRjE5NzFGRTEwNEFDODMzNzczL1FNaFZrQTYtdE4zdUVaeUFqa1dhcjk5MXRZ
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUU1oVmtBNi10TjN1RVp5QWprV2FyOTkxdFlRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQx
QzJFL0E0NDg0N0I4MjREODExRjE5NzFGRTEwNEFDODMzNzczL1FNaFZrQTYtdE4z
dUVaeUFqa1dhcjk5MXRZUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbZilezAYP86qLnwa/N8WNThvnf2S+vukgHh+whTKlQJ+Hz7LdkIxtRrGjrejO
gPn7qSQL5ideKr+eorC7xhBy9frAKcliZKS3OsEpfKUB8sVU7oVn9txmMUErpmSR
rvVYIIoOF5PWjrjH2+dZySCqqsAjNxbtJKW0ysdwq1YJjt6HzkVe+oweRsMiMQpw
8OaCtkXYnY5q3UXqxJUasM/gKarj0o0J9XunmlLKczY/sNFiudjSQpeY6zj1CIza
rPf8FSGhoAQoe4V6c1FdI+mkCTr5jCqmnFw6QfrQCm7vgNftsHe/hoVqxOdew4om
a34FIu/7vye8xxZj4t7O+3+s
-----END CERTIFICATE-----
Generated at Wed Jun 17 14:11:50 2026 by rpki-client