Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
File:                     qhOo9ipv0n6bme44axRRnm_MhjI.mft (raw, json)
Hash identifier:          IwW+MaO05HuWSjLwuuXDbaUBBXBjUXk3abcSDYC8QtU=
Subject key identifier:   73:E8:39:0B:9F:E7:02:9A:91:1A:B4:0E:A5:70:43:D6:6A:A2:06:87
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Certificate issuer:       /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial:       0606
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
Manifest number:          05FD
Signing time:             Sun 26 Jul 2026 23:48:22 +0000
Manifest this update:     Sun 26 Jul 2026 23:48:21 +0000
Manifest next update:     Sun 02 Aug 2026 23:48:21 +0000
Files and hashes:         1: qhOo9ipv0n6bme44axRRnm_MhjI.crl (hash: KdrDIS3tvcwsgAvenjQEJmPv11S4z4E8PfSUDEmMpQQ=)
                          2: 5913DBAA01A011ECBFF72849C4F9AE02.roa (hash: Ti8kwxZ7eguCsStyTJIvI9OGCjPofkPtfnrsHUQH8wI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
                          rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
        Validity
            Not Before: Jul 26 23:48:21 2026 GMT
            Not After : Aug  2 23:48:21 2026 GMT
        Subject: CN=6a669cc6-d775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:2a:33:d2:2d:7d:a9:5d:bd:79:88:f6:86:
                    d6:91:e4:fb:d5:a0:9e:ed:18:aa:0e:6d:b6:f6:bb:
                    cb:90:cd:2a:23:ae:eb:26:87:48:aa:e5:0f:19:42:
                    7d:41:0c:4f:6f:6d:63:10:6c:d1:95:93:e2:98:8a:
                    21:88:20:62:9f:cb:63:b8:1a:1f:a2:e4:86:62:63:
                    be:8c:80:76:ef:4c:dc:ee:cd:43:82:b7:9c:0b:9a:
                    ed:8e:7c:a2:23:71:36:3d:90:17:21:ac:34:67:8a:
                    6b:18:10:90:51:35:0c:7e:04:48:80:c3:24:b2:f2:
                    20:0b:54:1e:8f:09:5c:36:fe:c2:d7:ed:92:5b:a2:
                    7d:0b:8a:ca:57:26:14:09:16:b9:3f:c6:e8:bc:37:
                    5e:3a:19:44:0c:a2:49:ae:d3:ae:a4:86:f2:3d:26:
                    70:13:74:74:04:13:02:f5:62:9e:5b:7c:7e:a0:36:
                    2f:5d:6c:a1:6c:91:1f:c8:57:c2:1b:9b:78:d3:57:
                    94:dd:a1:27:22:7d:a9:04:b9:92:90:29:e8:bf:e5:
                    9a:c3:30:65:f1:29:44:9c:f3:c8:81:d9:c4:09:2c:
                    6a:e2:03:2b:da:b0:09:64:8a:d6:7c:b8:65:3f:2d:
                    9d:6b:07:31:98:18:1f:94:87:60:08:df:b2:ea:3a:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E8:39:0B:9F:E7:02:9A:91:1A:B4:0E:A5:70:43:D6:6A:A2:06:87
            X509v3 Authority Key Identifier:
                keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:8b:e4:ac:7c:75:24:61:cf:09:83:fb:98:8e:7e:95:ec:
         df:1f:c9:0e:69:d2:74:18:fc:84:b7:a5:31:cd:f3:71:3d:37:
         a1:23:16:a7:b7:cd:7c:1b:f9:36:94:eb:38:fb:5d:75:9c:cd:
         86:10:84:a7:b6:da:98:c2:96:97:35:5c:66:1b:b4:6b:6f:78:
         46:f6:5f:af:86:cf:1c:cb:8b:fc:24:38:9c:9f:1d:44:20:60:
         fb:f7:ab:a2:21:3f:27:94:99:2c:1d:03:ac:bd:05:d1:f6:38:
         bb:a4:c3:1a:63:26:e5:dc:ef:ff:bf:04:52:51:7d:ac:d8:e5:
         f5:c5:db:6b:8c:46:e1:90:4c:09:ef:a6:7e:63:10:30:f5:dd:
         fc:2d:de:5a:33:51:e5:9c:b1:0d:b7:2c:5d:6c:f4:7e:d0:04:
         4d:11:a3:3f:31:3a:4c:a8:12:a2:29:be:c4:76:ab:a8:ca:b2:
         f3:09:2d:72:6c:00:ca:27:77:5f:07:9c:57:c5:10:4f:f5:32:
         77:a6:d9:d8:90:c4:cc:f3:c7:5d:7c:1a:c9:2c:58:c4:96:7b:
         1e:dd:2b:48:67:d4:6e:9c:77:f6:4c:9e:c0:6f:81:5c:e6:1d:
         79:fb:06:ed:57:b4:be:69:a1:a2:b1:82:b3:4f:82:d7:ae:04:
         03:09:4e:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REIwNEQxMTAvBgNVBAUTKEFBMTNBOEY2MkE2RkQyN0U5Qjk5RUUzODZCMTQ1MTlF
NkZDQzg2MzIwHhcNMjYwNzI2MjM0ODIxWhcNMjYwODAyMjM0ODIxWjAYMRYwFAYD
VQQDEw02YTY2OWNjNi1kNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwRYqM9ItfaldvXmI9obWkeT71aCe7RiqDm229rvLkM0qI67rJodIquUPGUJ9
QQxPb21jEGzRlZPimIohiCBin8tjuBofouSGYmO+jIB270zc7s1DgrecC5rtjnyi
I3E2PZAXIaw0Z4prGBCQUTUMfgRIgMMksvIgC1QejwlcNv7C1+2SW6J9C4rKVyYU
CRa5P8bovDdeOhlEDKJJrtOupIbyPSZwE3R0BBMC9WKeW3x+oDYvXWyhbJEfyFfC
G5t401eU3aEnIn2pBLmSkCnov+WawzBl8SlEnPPIgdnECSxq4gMr2rAJZIrWfLhl
Py2dawcxmBgflIdgCN+y6jrd2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPoOQuf
5wKakRq0DqVwQ9ZqogaHMB8GA1UdIwQYMBaAFKoTqPYqb9J+m5nuOGsUUZ5vzIYy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjA0RC9FOTU4QUZFNjAx
OUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBuNmJtZTQ0YXhSUm5tX01o
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FoT285aXB2MG42Ym1lNDRheFJSbm1fTWhqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjA0RC9FOTU4QUZFNjAxOUMxMUVDOTE2NDRCN0JDNEY5QUUwMi9xaE9vOWlwdjBu
NmJtZTQ0YXhSUm5tX01oakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASsCL5Kx8dSRhzwmD+5iOfpXs3x/JDmnSdBj8hLelMc3zcT03oSMWp7fNfBv5
NpTrOPtddZzNhhCEp7bamMKWlzVcZhu0a294RvZfr4bPHMuL/CQ4nJ8dRCBg+/er
oiE/J5SZLB0DrL0F0fY4u6TDGmMm5dzv/78EUlF9rNjl9cXba4xG4ZBMCe+mfmMQ
MPXd/C3eWjNR5ZyxDbcsXWz0ftAETRGjPzE6TKgSoim+xHarqMqy8wktcmwAyid3
XwecV8UQT/Uyd6bZ2JDEzPPHXXwaySxYxJZ7Ht0rSGfUbpx39kyewG+BXOYdefsG
7Ve0vmmhorGCs0+C164EAwlOgA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:43 2026 by rpki-client