Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
File:                     BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json)
Hash identifier:          5+56hKG7qlZ0s90AWaaFPO+93miHkBwjiR0zmPko4Kw=
Subject key identifier:   CD:56:72:B1:E0:A8:ED:ED:4F:6A:B3:F9:40:46:45:13:7D:FA:9D:73
Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9
Certificate issuer:       /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
Certificate serial:       0D1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
Manifest number:          0CF9
Signing time:             Tue 28 Jul 2026 18:33:56 +0000
Manifest this update:     Tue 28 Jul 2026 18:33:56 +0000
Manifest next update:     Tue 04 Aug 2026 18:33:56 +0000
Files and hashes:         1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: 7aVJbCks5U+JYDMyPO53eGnWjDyIBlaOCV3RnynETno=)
                          2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: XzUEcWrFObnHhypJzqr40j9vQlCZVakmt78JschNZdU=)
                          3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: nj+oib/V31McsWuRSdIo8ebXzbzd0Aai1WTDOvqOntk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl
                          rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3354 (0xd1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9
        Validity
            Not Before: Jul 28 18:33:56 2026 GMT
            Not After : Aug  4 18:33:56 2026 GMT
        Subject: CN=6a68f614-0ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d3:19:1d:bc:40:83:58:a9:a8:bb:21:b9:2a:
                    50:af:e0:3d:b5:c6:82:66:87:d9:cc:93:2b:c4:a3:
                    1e:36:24:c1:d2:c4:f6:97:22:4d:6a:47:38:c6:48:
                    00:5c:f8:71:ac:0e:8b:0b:31:fa:fc:eb:c5:30:9f:
                    f9:50:22:47:20:8e:6a:e5:2e:8a:1d:43:f7:0e:0e:
                    60:1f:69:9a:d2:f8:0b:5d:71:c2:58:df:9d:fe:55:
                    9d:d1:44:4a:53:a2:dc:d9:2b:4f:be:b4:e4:01:4b:
                    18:09:9f:25:ca:4b:9e:71:dc:db:6f:e3:66:6c:26:
                    de:d8:3d:e5:cd:99:8f:f8:35:47:6e:e7:2a:4d:96:
                    b8:e6:74:41:22:48:f2:d4:41:f5:b8:e5:82:19:70:
                    4c:e7:57:21:20:5f:4e:28:40:87:70:31:03:83:6e:
                    39:fa:5d:8e:98:1f:ca:72:c8:3a:b1:79:23:96:e2:
                    ad:f3:f0:ac:26:26:74:20:c8:f8:94:61:37:16:5a:
                    a7:e2:b2:5a:9a:bb:23:c9:c7:31:d2:bc:20:0f:f5:
                    f5:a5:60:4e:43:d1:d6:ba:87:86:da:6f:80:bc:c8:
                    63:7f:83:be:2a:83:bd:c3:5b:3c:dc:b9:ab:12:24:
                    1f:d7:a2:35:7a:e3:9b:3e:67:33:fa:9a:cc:04:40:
                    e9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:56:72:B1:E0:A8:ED:ED:4F:6A:B3:F9:40:46:45:13:7D:FA:9D:73
            X509v3 Authority Key Identifier:
                keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bc:5b:b9:b3:d4:fb:b2:09:86:28:dd:ef:30:cb:1c:13:ae:
         46:74:14:b4:fb:dd:47:45:eb:a3:19:a2:9d:f4:dc:49:3a:70:
         b8:09:c3:cd:ed:06:81:ff:d2:92:95:1f:85:13:be:84:39:b4:
         bf:6c:ac:6c:57:cd:7d:db:3a:ae:46:c7:5f:46:f1:2b:e6:b2:
         cc:c8:1f:c7:61:c9:da:51:27:13:8f:9c:20:07:dd:dc:ae:98:
         4f:be:7c:8d:da:63:cc:9c:70:78:e9:d1:cd:ae:9b:52:bb:4f:
         72:06:02:e1:27:47:1a:98:81:a6:2f:33:97:6c:f3:7c:47:3f:
         a6:99:a5:4f:a9:ab:ea:97:0c:3d:a7:b6:07:84:3b:0c:42:89:
         7e:82:f9:e4:67:e4:59:6f:4f:3d:a2:f6:92:5c:b3:8e:ae:d0:
         1c:33:50:22:23:04:b0:5b:0e:c6:fc:86:f3:3b:78:65:af:6d:
         07:00:45:20:3e:6f:59:8f:df:b8:21:22:e7:15:bd:a2:0c:9b:
         71:12:f3:e6:be:df:4b:49:b7:3d:8c:23:e7:ce:27:35:68:db:
         3e:e5:68:d5:9d:47:55:da:15:9e:5c:aa:06:ea:14:67:49:35:
         d9:17:52:1d:cc:08:96:d4:1b:4c:fe:02:09:2d:be:be:dc:53:
         ba:f2:10:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD
MDEyNzc5QjkwHhcNMjYwNzI4MTgzMzU2WhcNMjYwODA0MTgzMzU2WjAYMRYwFAYD
VQQDEw02YTY4ZjYxNC0wZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4NMZHbxAg1ipqLshuSpQr+A9tcaCZofZzJMrxKMeNiTB0sT2lyJNakc4xkgA
XPhxrA6LCzH6/OvFMJ/5UCJHII5q5S6KHUP3Dg5gH2ma0vgLXXHCWN+d/lWd0URK
U6Lc2StPvrTkAUsYCZ8lykuecdzbb+NmbCbe2D3lzZmP+DVHbucqTZa45nRBIkjy
1EH1uOWCGXBM51chIF9OKECHcDEDg245+l2OmB/Kcsg6sXkjluKt8/CsJiZ0IMj4
lGE3Flqn4rJamrsjyccx0rwgD/X1pWBOQ9HWuoeG2m+AvMhjf4O+KoO9w1s83Lmr
EiQf16I1euObPmcz+prMBEDp/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM1WcrHg
qO3tT2qz+UBGRRN9+p1zMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG
NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l
YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF
bjdPMm00YVJ6eURBRW5lYmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATLxbubPU+7IJhijd7zDLHBOuRnQUtPvdR0XroxminfTcSTpwuAnDze0Ggf/S
kpUfhRO+hDm0v2ysbFfNfds6rkbHX0bxK+ayzMgfx2HJ2lEnE4+cIAfd3K6YT758
jdpjzJxweOnRza6bUrtPcgYC4SdHGpiBpi8zl2zzfEc/ppmlT6mr6pcMPae2B4Q7
DEKJfoL55GfkWW9PPaL2klyzjq7QHDNQIiMEsFsOxvyG8zt4Za9tBwBFID5vWY/f
uCEi5xW9ogybcRLz5r7fS0m3PYwj584nNWjbPuVo1Z1HVdoVnlyqBuoUZ0k12RdS
HcwIltQbTP4CCS2+vtxTuvIQBg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:00:03 2026 by rpki-client