Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
File:                     a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json)
Hash identifier:          cry2/8xu6AWYXN8d4dC4ZDoXzQBANtAFczj3sBUShm8=
Subject key identifier:   16:BE:30:B5:1B:46:32:80:05:E3:66:06:A0:C6:3F:6F:96:24:A7:7B
Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB
Certificate issuer:       /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
Certificate serial:       34F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
Manifest number:          34CC
Signing time:             Tue 28 Jul 2026 15:23:55 +0000
Manifest this update:     Tue 28 Jul 2026 15:23:54 +0000
Manifest next update:     Tue 04 Aug 2026 15:23:54 +0000
Files and hashes:         1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: 81fZxjpyJy6dyhr5mzjZdKoOeebeKchJYnL7ZRmkDS8=)
                          2: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=)
                          3: E63D6AB086EC11F19E006003A7EE528E.roa (hash: HA6O4500TdNqLPszScg0UgHEWNLVJDVH5xC0mHNZQLw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl
                          rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13553 (0x34f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB
        Validity
            Not Before: Jul 28 15:23:54 2026 GMT
            Not After : Aug  4 15:23:54 2026 GMT
        Subject: CN=6a68c98b-03aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:84:5c:41:d6:eb:2e:78:c7:0f:54:99:38:
                    c2:3e:7b:55:71:32:9d:8b:af:a6:71:8f:0c:98:6f:
                    6b:06:e5:7b:f5:ba:74:93:16:f4:16:f9:a0:66:cf:
                    c9:b9:7c:48:0a:f5:8c:22:87:32:9d:48:fd:e0:a1:
                    10:d5:48:ba:9d:9d:13:c6:82:a3:a3:84:e7:c5:94:
                    72:28:cd:d8:d6:8d:4d:38:d1:1f:ae:3c:56:65:fe:
                    92:ea:b0:7b:77:b9:75:d8:46:4a:f9:c1:cb:5d:0f:
                    48:27:33:25:e3:2c:c4:01:ce:2b:b7:01:88:66:77:
                    34:46:23:34:53:00:12:02:de:ae:bb:a3:8a:3b:53:
                    13:05:b6:d5:0a:aa:45:cc:62:eb:e5:ae:14:8c:9a:
                    c1:17:ca:8c:e6:38:7c:a8:bf:74:08:23:da:e5:cf:
                    42:5e:92:c6:c3:07:79:93:4f:3b:45:9b:e0:6f:a0:
                    1d:31:01:e7:cd:e1:8e:1d:c1:9d:6b:f6:ff:0b:fb:
                    c4:53:fa:a5:59:71:e1:37:ab:9d:08:7e:c9:7d:fa:
                    60:44:3a:9c:17:ae:c1:97:22:08:ea:d5:d9:c4:46:
                    9b:20:ca:50:58:9e:d7:4f:30:a9:92:44:e1:2c:3f:
                    62:6d:45:0d:33:31:5a:80:c5:5f:dc:e7:45:49:ce:
                    38:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:30:B5:1B:46:32:80:05:E3:66:06:A0:C6:3F:6F:96:24:A7:7B
            X509v3 Authority Key Identifier:
                keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:bc:38:a5:be:c2:31:51:84:9a:ac:47:98:88:c3:07:9c:
         63:c3:14:bb:b7:ba:e6:7b:58:8e:05:1f:28:ba:a0:1a:33:10:
         d4:9a:64:9c:41:74:68:2e:5d:44:41:87:15:79:ad:6a:ff:b0:
         5b:73:60:3a:8b:4a:55:56:07:6f:76:6a:cc:61:63:37:5e:e4:
         59:d5:1d:cd:80:44:6e:91:81:81:2b:2a:8d:e5:49:e9:31:e0:
         d1:82:10:0f:6c:1a:80:e0:d1:cc:1e:78:00:8d:75:7b:3b:c4:
         61:1a:0e:dc:a6:b1:d3:8a:b9:d2:5a:c6:93:cd:0a:42:23:0b:
         46:80:8d:62:2f:60:49:0d:60:45:01:33:d1:79:57:54:72:5b:
         1f:76:0d:a4:6e:ee:47:c6:02:fc:08:5f:80:b3:4d:21:0a:43:
         97:3a:a4:9c:8c:d6:0b:de:ad:13:90:96:7c:c0:aa:a7:d6:38:
         3f:79:e4:82:06:08:8d:5a:a2:9f:4d:c5:25:c7:a3:64:80:d3:
         63:c8:1b:c5:32:f5:df:c5:ea:ff:09:57:51:d8:d6:62:70:8c:
         e5:b0:1c:9e:81:c7:6b:4d:54:c2:75:ab:73:c6:b1:0f:77:d4:
         50:ac:bd:54:3c:ea:e0:e9:c3:4c:6e:ac:cf:7d:4f:c9:e6:e0:
         ea:1f:e0:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz
QzQ5MzExREIwHhcNMjYwNzI4MTUyMzU0WhcNMjYwODA0MTUyMzU0WjAYMRYwFAYD
VQQDEw02YTY4Yzk4Yi0wM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFeEXEHW6y54xw9UmTjCPntVcTKdi6+mcY8MmG9rBuV79bp0kxb0FvmgZs/J
uXxICvWMIocynUj94KEQ1Ui6nZ0TxoKjo4TnxZRyKM3Y1o1NONEfrjxWZf6S6rB7
d7l12EZK+cHLXQ9IJzMl4yzEAc4rtwGIZnc0RiM0UwASAt6uu6OKO1MTBbbVCqpF
zGLr5a4UjJrBF8qM5jh8qL90CCPa5c9CXpLGwwd5k087RZvgb6AdMQHnzeGOHcGd
a/b/C/vEU/qlWXHhN6udCH7JffpgRDqcF67BlyII6tXZxEabIMpQWJ7XTzCpkkTh
LD9ibUUNMzFagMVf3OdFSc44nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBa+MLUb
RjKABeNmBqDGP2+WJKd7MB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy
RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF
ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4
dE1HZWJmY3lPMUE4U1RFZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADPO8OKW+wjFRhJqsR5iIwwecY8MUu7e65ntYjgUfKLqgGjMQ1JpknEF0aC5d
REGHFXmtav+wW3NgOotKVVYHb3ZqzGFjN17kWdUdzYBEbpGBgSsqjeVJ6THg0YIQ
D2wagODRzB54AI11ezvEYRoO3Kax04q50lrGk80KQiMLRoCNYi9gSQ1gRQEz0XlX
VHJbH3YNpG7uR8YC/AhfgLNNIQpDlzqknIzWC96tE5CWfMCqp9Y4P3nkggYIjVqi
n03FJcejZIDTY8gbxTL138Xq/wlXUdjWYnCM5bAcnoHHa01UwnWrc8axD3fUUKy9
VDzq4OnDTG6sz31Pyebg6h/gbQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:41 2026 by rpki-client