Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File:                     QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier:          xGT6L2x/+FJF/kBd4hJHnGnEfnTntIh2EzZuN73JEkY=
Subject key identifier:   88:A8:1A:97:D5:39:DE:91:13:7A:40:3C:0B:52:21:8E:BF:31:BC:C7
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer:       /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial:       0499
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number:          048A
Signing time:             Sat 13 Jun 2026 00:06:14 +0000
Manifest this update:     Sat 13 Jun 2026 00:06:14 +0000
Manifest next update:     Sat 20 Jun 2026 00:06:14 +0000
Files and hashes:         1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: xVFrB1F3r06PiFPfAX4LbODDSqJkOWCKjCOGS52eED4=)
                          2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
                          rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
        Validity
            Not Before: Jun 13 00:06:14 2026 GMT
            Not After : Jun 20 00:06:14 2026 GMT
        Subject: CN=6a2c9ef6-53f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:59:8a:27:4a:92:79:20:97:5c:de:1c:f7:
                    f1:8c:cc:c9:92:2c:c6:68:0a:58:06:42:76:c0:36:
                    77:46:a3:f1:23:26:90:9a:51:d7:92:5a:04:9a:d8:
                    b0:1f:46:f3:2e:85:5c:43:76:ce:3e:a2:7f:b3:d7:
                    f3:94:1c:fd:21:cc:14:d8:df:92:c4:39:bf:78:fa:
                    9a:d0:40:59:cd:4c:3a:a7:9f:1b:b9:11:c6:80:22:
                    14:e9:48:24:38:23:81:22:1b:82:e1:df:3c:34:0e:
                    77:8b:9c:5f:95:5a:52:3b:26:38:bc:c2:6b:d8:4b:
                    13:f2:7a:e5:73:d0:3c:2a:4b:a2:86:31:32:57:c9:
                    17:bc:7e:c1:cf:73:7d:c0:3b:55:14:cc:d5:ee:24:
                    1d:23:17:4a:b7:93:8f:ce:f0:cb:d4:5a:0d:5a:f6:
                    09:20:e4:32:b7:8a:6f:23:94:67:f6:c0:5c:b1:e2:
                    f7:0e:21:44:d6:fb:cf:e1:03:fd:86:d9:6b:2e:ef:
                    66:76:e2:72:6d:3d:e8:fa:fe:3c:af:06:a7:b9:01:
                    f7:7f:e5:7b:6b:21:89:89:0e:63:0f:0b:62:c9:d4:
                    e7:d7:50:7b:cf:1e:30:c6:01:b9:67:8d:f2:d3:c9:
                    07:1d:c6:07:01:85:23:bb:2a:4f:8e:49:d0:e9:cd:
                    18:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A8:1A:97:D5:39:DE:91:13:7A:40:3C:0B:52:21:8E:BF:31:BC:C7
            X509v3 Authority Key Identifier:
                keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:70:ea:d4:cb:e6:9c:76:0b:10:f2:a7:6c:a6:36:8e:9c:1b:
         68:d7:48:28:04:09:f6:9a:62:15:a0:e2:d6:be:72:a7:5c:01:
         b4:1f:9d:2d:d9:f7:a1:29:3f:85:8f:4d:77:64:2a:e3:19:fc:
         27:d7:81:f3:42:3a:a9:28:07:34:19:19:fa:8a:16:7e:4c:c5:
         12:03:59:c0:fa:be:87:60:0d:65:af:da:52:54:f1:4e:a8:d9:
         ed:93:d4:a0:a2:26:74:6f:e2:de:fe:3d:cb:f6:d9:ab:d0:77:
         98:2f:01:e4:01:c9:da:2a:f2:02:b7:b6:c8:c5:75:b8:dd:0e:
         0d:af:a1:32:60:5f:b7:49:bf:02:09:6d:39:7c:a7:7d:21:97:
         77:bd:7e:94:b0:95:0c:f2:4d:6d:c7:74:ea:f0:14:4a:aa:5c:
         61:07:f8:5e:52:85:a6:d8:c4:fe:f8:a4:b3:ae:42:04:4b:8f:
         24:a9:12:75:2b:6d:d8:26:e7:3f:bb:e5:92:9a:ca:ae:c1:08:
         fa:0d:23:f7:b1:3e:7e:5b:06:64:40:44:62:53:0d:30:6f:58:
         6c:32:45:02:86:50:27:1f:42:e2:27:1c:0b:04:9c:39:90:e1:
         bb:9e:c7:37:44:40:60:41:87:dc:2d:a7:ee:89:d9:f0:50:7a:
         82:e3:5d:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgwRkIxMTAvBgNVBAUTKDQwODVBRTEzNEI2MzM4QTEyNzY1NzI4M0VCQkMxNkMx
MkYyMEI4NjIwHhcNMjYwNjEzMDAwNjE0WhcNMjYwNjIwMDAwNjE0WjAYMRYwFAYD
VQQDEw02YTJjOWVmNi01M2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKRZiidKknkgl1zeHPfxjMzJkizGaApYBkJ2wDZ3RqPxIyaQmlHXkloEmtiw
H0bzLoVcQ3bOPqJ/s9fzlBz9IcwU2N+SxDm/ePqa0EBZzUw6p58buRHGgCIU6Ugk
OCOBIhuC4d88NA53i5xflVpSOyY4vMJr2EsT8nrlc9A8KkuihjEyV8kXvH7Bz3N9
wDtVFMzV7iQdIxdKt5OPzvDL1FoNWvYJIOQyt4pvI5Rn9sBcseL3DiFE1vvP4QP9
htlrLu9mduJybT3o+v48rwanuQH3f+V7ayGJiQ5jDwtiydTn11B7zx4wxgG5Z43y
08kHHcYHAYUjuypPjknQ6c0YmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIioGpfV
Od6RE3pAPAtSIY6/MbzHMB8GA1UdIwQYMBaAFECFrhNLYzihJ2Vyg+u8FsEvILhi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODBGQi82MjhENTIwQzhG
QjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9LRW5aWEtENjd3V3dTOGd1
R0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FJV3VFMHRqT0tFblpYS0Q2N3dXd1M4Z3VHSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODBGQi82MjhENTIwQzhGQjYxMUVDOTJCRDI1MTBDNEY5QUUwMi9RSVd1RTB0ak9L
RW5aWEtENjd3V3dTOGd1R0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQXDq1MvmnHYLEPKnbKY2jpwbaNdIKAQJ9ppiFaDi1r5yp1wBtB+dLdn3oSk/
hY9Nd2Qq4xn8J9eB80I6qSgHNBkZ+ooWfkzFEgNZwPq+h2ANZa/aUlTxTqjZ7ZPU
oKImdG/i3v49y/bZq9B3mC8B5AHJ2iryAre2yMV1uN0ODa+hMmBft0m/AgltOXyn
fSGXd71+lLCVDPJNbcd06vAUSqpcYQf4XlKFptjE/viks65CBEuPJKkSdStt2Cbn
P7vlkprKrsEI+g0j97E+flsGZEBEYlMNMG9YbDJFAoZQJx9C4iccCwScOZDhu57H
N0RAYEGH3C2n7onZ8FB6guNdPw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:15 2026 by rpki-client