Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
File:                     Q1TVz6Vk7nGzToh07rG5ho-IB90.mft (raw, json)
Hash identifier:          lxIaOf+tO/8SUAheqnwTW3suFalEH3FY8Aqox4xsyz0=
Subject key identifier:   8E:4B:DC:8F:6E:8D:46:DB:BB:F0:94:1C:4B:ED:4D:2B:87:A9:AF:1C
Authority key identifier: 43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD
Certificate issuer:       /CN=A91EBC50/serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
Certificate serial:       0884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
Manifest number:          0871
Signing time:             Tue 28 Jul 2026 21:13:45 +0000
Manifest this update:     Tue 28 Jul 2026 21:13:45 +0000
Manifest next update:     Tue 04 Aug 2026 21:13:45 +0000
Files and hashes:         1: Q1TVz6Vk7nGzToh07rG5ho-IB90.crl (hash: ZbBYigWDRPmWdnqu3Ze8mdxMB4KflgW91BeVUVTrhAQ=)
                          2: A10812CA0CD511EB9433AE69C4F9AE02.roa (hash: RY9RHnG9wjHyR1xu0R68Q4Yq6vJnjZQW1jZtbJsZ41Y=)
                          3: 638149B88C2C11EBBB3B260BC4F9AE02.roa (hash: Gz3paIMkIc2ePietK++Ou+oRymIz2aw9Ky+sSIACdH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:13:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC50, serialNumber=4354D5CFA564EE71B34E8874EEB1B9868F8807DD
        Validity
            Not Before: Jul 28 21:13:45 2026 GMT
            Not After : Aug  4 21:13:45 2026 GMT
        Subject: CN=6a691b89-2eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:99:1e:73:11:10:b8:18:fa:26:67:99:3a:a0:
                    ac:8a:b2:fa:02:f7:b0:65:a6:bf:88:ce:34:1c:eb:
                    d6:5e:27:5a:14:c3:01:3d:a6:60:08:5d:c7:be:7c:
                    61:d5:ef:5b:28:0d:2b:7b:d8:d6:77:9b:3d:46:83:
                    8f:90:ad:2f:e7:5a:2b:87:0b:fa:a6:75:4e:3a:85:
                    08:7a:13:b6:a3:40:28:c5:76:3a:93:21:b6:4a:1d:
                    1a:1b:18:5f:63:82:de:a5:ee:d3:4e:ad:10:61:16:
                    45:d6:b6:04:cb:bc:1a:0e:1e:40:48:48:61:6c:ee:
                    bd:ee:ff:0a:1d:5e:74:84:eb:13:3e:3c:22:dd:58:
                    11:97:a6:80:cf:8a:13:e3:79:9e:aa:ec:0f:17:27:
                    2c:6d:a8:c0:71:b0:05:f3:66:d8:ea:11:68:14:fd:
                    74:cc:57:ae:f1:db:fd:68:26:39:3c:c7:01:8e:24:
                    d9:9e:24:bd:d0:5d:a5:5e:72:ac:3d:ed:83:a4:79:
                    6b:4d:ee:e8:b5:0c:8e:06:63:23:03:20:aa:b3:25:
                    e4:f6:dc:4e:91:db:12:90:a8:84:1a:22:38:f6:d8:
                    5c:8d:3c:a7:a6:be:70:29:93:4b:f2:e7:a6:28:a5:
                    bb:dc:64:47:46:a2:3b:ff:50:b4:70:73:0c:cc:4b:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4B:DC:8F:6E:8D:46:DB:BB:F0:94:1C:4B:ED:4D:2B:87:A9:AF:1C
            X509v3 Authority Key Identifier:
                keyid:43:54:D5:CF:A5:64:EE:71:B3:4E:88:74:EE:B1:B9:86:8F:88:07:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q1TVz6Vk7nGzToh07rG5ho-IB90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC50/E4858AC40CD411EBBCD79C69C4F9AE02/Q1TVz6Vk7nGzToh07rG5ho-IB90.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:0e:f5:3a:69:45:56:65:d0:db:e8:63:e2:b2:36:ba:75:70:
         ff:14:3a:57:71:e3:77:4d:2b:c3:db:c7:67:99:d7:21:93:48:
         e5:e1:4a:4c:c5:c7:c1:50:f8:0d:f9:fc:b1:02:2f:75:ba:48:
         6d:2a:c3:64:0c:ae:da:02:42:40:9b:cf:ce:88:fd:1d:41:b2:
         a3:e1:5e:ef:0f:c9:f3:55:1b:53:c3:b0:72:49:99:b6:1a:5a:
         4d:27:fd:39:b7:bb:aa:0e:da:f7:ec:26:e5:b0:17:88:bc:08:
         46:5e:db:99:6c:56:ae:dd:cd:c6:4b:f6:75:d4:45:b5:b0:71:
         93:da:b4:11:5f:b3:f9:91:c8:22:ee:3f:ee:cb:db:17:92:87:
         0c:38:28:0f:58:e2:f8:fd:39:de:9e:fd:6c:42:c0:a0:ab:d4:
         28:06:8e:f1:d0:21:58:7d:98:b2:ac:a7:40:60:0b:bd:70:ab:
         a7:51:7e:a4:23:4e:c0:bd:1c:0d:96:64:0d:75:e5:d0:74:f8:
         d0:6e:29:41:e6:1e:6a:7d:e6:a6:e0:74:78:a3:fd:ec:f5:54:
         7f:0b:d0:70:40:27:1c:9c:76:ed:19:72:67:a8:de:a0:95:79:
         7b:32:07:d5:25:0f:37:26:dc:2b:fc:35:b5:92:88:12:21:c0:
         4b:af:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:40:33 2026 by rpki-client