Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
File:                     QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json)
Hash identifier:          xKRYntljbsr7jBcNof9/bwx7joBmz9CCdqLWQeacnG4=
Subject key identifier:   AC:9A:79:D9:0D:19:D4:17:AD:4B:77:A9:D7:7C:E3:FA:52:E0:0C:02
Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD
Certificate issuer:       /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
Certificate serial:       03C4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
Manifest number:          03BD
Signing time:             Sat 13 Jun 2026 00:40:32 +0000
Manifest this update:     Sat 13 Jun 2026 00:40:32 +0000
Manifest next update:     Sat 20 Jun 2026 00:40:32 +0000
Files and hashes:         1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: hZnH6BEjacTM2fKd7K1wHOiWqFJHWn/roQ5XoVvEzyc=)
                          2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: /VYSBqRbhRZL//G1w9ShC2Js/tBJ1zXCex0aZezen6Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD
        Validity
            Not Before: Jun 13 00:40:32 2026 GMT
            Not After : Jun 20 00:40:32 2026 GMT
        Subject: CN=6a2ca700-73a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:58:9e:9b:f0:62:9e:34:cf:bf:0e:5b:2d:
                    73:da:79:f9:4c:c9:54:9f:66:7e:8b:91:b9:69:f6:
                    7d:0b:b0:72:c7:94:df:51:ab:88:45:5e:9b:01:f0:
                    3a:46:80:e7:34:4c:5d:6e:88:29:aa:70:a5:63:50:
                    e4:b2:8c:fb:7e:53:37:73:e1:1a:ff:f8:31:d8:a7:
                    29:fe:32:f6:b4:8d:28:bb:47:ad:4f:00:e2:3b:57:
                    37:83:63:8a:3f:4d:b7:0e:85:4e:2c:7d:ae:70:c6:
                    eb:93:6c:0e:d0:fa:b3:13:b3:00:ee:1d:e1:9f:26:
                    ea:d3:e7:7f:db:47:58:4c:3a:46:78:8c:55:c3:25:
                    25:53:6a:8e:25:9f:85:81:5b:c9:cf:38:51:ec:52:
                    75:54:f8:c1:f1:29:c9:d3:77:68:9f:ee:01:5d:51:
                    06:0e:7f:18:96:a4:36:dc:87:d1:8d:4e:6c:76:1c:
                    ea:04:7e:da:6f:a7:8d:f3:20:8e:db:f4:04:be:a7:
                    59:fd:ac:59:d3:85:cc:d8:89:10:62:7f:b0:ef:00:
                    22:14:fe:a2:4d:8f:06:4d:a9:ce:8d:a9:44:af:32:
                    a2:5c:71:c4:5e:da:1d:da:57:4f:fd:62:02:42:f5:
                    98:55:00:8f:aa:ab:5e:23:e0:97:6c:be:25:cd:e7:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9A:79:D9:0D:19:D4:17:AD:4B:77:A9:D7:7C:E3:FA:52:E0:0C:02
            X509v3 Authority Key Identifier:
                keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:74:64:9e:0a:72:9a:ce:d8:20:30:e1:09:00:66:ff:d7:1e:
         67:a0:b3:5f:63:4b:0f:5a:a8:eb:08:23:b6:85:c8:f7:45:96:
         6a:23:4b:b3:ee:12:b4:1d:46:3d:f6:7f:62:ba:6e:43:46:c9:
         c3:ce:94:84:62:71:17:f7:09:83:da:5c:dd:6f:4b:32:78:5a:
         19:a0:94:68:ff:be:82:26:85:c8:29:3b:05:02:07:01:60:c2:
         a5:e3:86:41:f6:a7:27:51:a1:53:4d:58:0a:ab:f5:78:db:27:
         54:42:2e:92:50:0c:09:55:ac:f8:20:c1:d1:5f:bd:4c:35:7b:
         dc:04:b0:99:a6:bf:bc:ee:17:ce:9e:b6:b0:ee:58:df:6f:a8:
         9f:0c:76:30:f4:5d:44:23:a2:25:42:c2:62:07:e3:eb:d4:41:
         18:7b:32:db:c8:92:60:b0:bc:16:77:24:10:4c:3e:cd:65:85:
         3f:f0:1c:ce:50:80:64:de:28:d0:e2:29:d0:c2:1a:89:ec:92:
         78:39:77:3c:a6:11:33:e0:94:f7:b4:c2:06:7a:7e:4f:eb:70:
         7f:07:ae:d5:b7:8c:9c:59:62:6c:0e:e6:3c:95:6f:b9:79:3b:
         54:14:12:5c:88:ef:f3:b0:92:f1:ba:19:1f:e3:db:29:2b:e6:
         e0:88:3f:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4
NEQ5NzYwREQwHhcNMjYwNjEzMDA0MDMyWhcNMjYwNjIwMDA0MDMyWjAYMRYwFAYD
VQQDEw02YTJjYTcwMC03M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwchYnpvwYp40z78OWy1z2nn5TMlUn2Z+i5G5afZ9C7Byx5TfUauIRV6bAfA6
RoDnNExdbogpqnClY1Dksoz7flM3c+Ea//gx2Kcp/jL2tI0ou0etTwDiO1c3g2OK
P023DoVOLH2ucMbrk2wO0PqzE7MA7h3hnybq0+d/20dYTDpGeIxVwyUlU2qOJZ+F
gVvJzzhR7FJ1VPjB8SnJ03don+4BXVEGDn8YlqQ23IfRjU5sdhzqBH7ab6eN8yCO
2/QEvqdZ/axZ04XM2IkQYn+w7wAiFP6iTY8GTanOjalErzKiXHHEXtod2ldP/WIC
QvWYVQCPqqteI+CXbL4lzeeTeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKyaedkN
GdQXrUt3qdd84/pS4AwCMB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC
RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3
LUNicDR3d0xlVUNFMlhZTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUXRkngpyms7YIDDhCQBm/9ceZ6CzX2NLD1qo6wgjtoXI90WWaiNLs+4StB1G
PfZ/YrpuQ0bJw86UhGJxF/cJg9pc3W9LMnhaGaCUaP++giaFyCk7BQIHAWDCpeOG
QfanJ1GhU01YCqv1eNsnVEIuklAMCVWs+CDB0V+9TDV73ASwmaa/vO4Xzp62sO5Y
32+onwx2MPRdRCOiJULCYgfj69RBGHsy28iSYLC8FnckEEw+zWWFP/AczlCAZN4o
0OIp0MIaieySeDl3PKYRM+CU97TCBnp+T+twfweu1beMnFlibA7mPJVvuXk7VBQS
XIjv87CS8boZH+PbKSvm4Ig/YQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:43 2026 by rpki-client