Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File:                     QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier:          Z6H13i1L+Dut6SHbRgVXBBvZeKlu5fwdJ8B3HYZChvU=
Subject key identifier:   3D:D8:DD:5E:37:34:C9:26:17:D9:86:62:5F:0F:79:E2:09:E6:A8:FC
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number:          C3
Signing time:             Mon 27 Jul 2026 09:04:20 +0000
Manifest this update:     Mon 27 Jul 2026 09:04:19 +0000
Manifest next update:     Mon 03 Aug 2026 09:04:19 +0000
Files and hashes:         1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: zvm9kSdrYFZeB769er0rUVIW9KpxKrQT9y9xRVnAbwk=)
                          2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Jul 27 09:04:19 2026 GMT
            Not After : Aug  3 09:04:19 2026 GMT
        Subject: CN=6a671f14-60fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:14:81:34:f0:60:37:fe:7c:c4:d6:88:15:
                    03:ae:13:8d:b4:0c:b0:a9:dc:23:02:16:d8:40:88:
                    94:46:71:84:91:7c:c8:37:ff:23:c3:80:c3:52:e8:
                    ff:c7:fd:80:33:0c:10:6b:e0:8c:3c:f5:0b:c6:b2:
                    81:bd:bb:50:78:39:97:5b:22:51:c3:5d:10:30:85:
                    01:b9:7a:b0:f5:84:6a:97:a2:14:ce:17:6f:e4:b4:
                    b3:df:f4:fa:1e:3f:5e:20:72:31:1f:0d:4d:57:5d:
                    ec:40:45:ad:31:ff:ca:27:5b:90:7c:d2:4e:c1:24:
                    f9:1e:ba:21:5b:8a:17:3d:91:f4:72:07:6e:dd:86:
                    18:0d:53:a6:e7:70:f6:e5:78:74:0a:16:72:90:dd:
                    14:35:c1:c6:b4:0a:5b:b3:24:4a:96:f2:93:a7:88:
                    1f:9a:86:0f:c8:62:28:03:47:96:36:64:22:ef:c7:
                    ec:d4:d7:a3:5e:3d:9b:71:a7:2e:50:a3:66:a6:3e:
                    14:ec:f2:69:93:cd:6a:c1:ca:fa:89:3b:49:42:f6:
                    b1:7e:0d:61:0b:38:d3:e0:9f:bf:77:37:c4:f0:bd:
                    54:70:28:fc:4d:d9:63:8f:b1:7a:bb:e0:35:20:4a:
                    29:1b:ea:48:cd:3a:d9:16:30:c3:44:58:a0:46:85:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D8:DD:5E:37:34:C9:26:17:D9:86:62:5F:0F:79:E2:09:E6:A8:FC
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:61:0c:3d:10:2d:e7:61:9b:14:d7:4e:c2:c2:4f:bc:fe:
         96:ef:03:45:52:72:45:7e:61:d4:a0:0a:84:c5:5f:8b:f3:1e:
         7d:5d:08:4f:3f:e6:6f:7a:61:b4:67:27:3c:8c:da:81:57:f7:
         6f:88:f0:6d:e8:8a:c0:96:cf:0d:97:39:b6:07:a4:c0:36:58:
         78:ec:51:7e:a6:38:2f:d1:8f:0e:ad:61:3c:a9:35:90:ed:8f:
         6b:5b:32:40:3b:88:be:0b:f5:73:83:a5:b3:18:d1:95:69:c8:
         91:81:93:37:e1:bf:24:83:df:30:26:ba:d4:13:0e:39:9e:56:
         2a:74:85:c9:c0:10:70:bc:e0:40:c1:a7:50:86:b1:c7:b5:b4:
         bd:17:be:a5:82:32:c6:32:1e:cb:fb:8c:44:21:76:09:f4:1c:
         dd:3c:6a:04:d1:fa:ac:09:42:22:8c:17:3b:ae:39:90:0e:13:
         5f:f6:ec:0b:01:fe:9b:5d:62:ac:ce:ab:f0:7b:1c:1d:83:ab:
         a6:ae:22:ee:2a:82:eb:68:ce:cf:67:b8:aa:da:b5:f7:27:ea:
         7f:1c:9a:cb:18:28:1f:12:e5:e5:62:2c:14:85:10:ea:ad:1f:
         db:f9:d9:40:f3:d6:2c:04:54:af:85:88:bd:ef:e8:43:c2:c5:
         1f:cc:15:55
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU3NTYxMTAvBgNVBAUTKDQwMUQ4QkRDODJBMzI0NDhDOTNCQTNBMEZFOTNBRjEw
NjQyMzYyQTIwHhcNMjYwNzI3MDkwNDE5WhcNMjYwODAzMDkwNDE5WjAYMRYwFAYD
VQQDEw02YTY3MWYxNC02MGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9YUgTTwYDf+fMTWiBUDrhONtAywqdwjAhbYQIiURnGEkXzIN/8jw4DDUuj/
x/2AMwwQa+CMPPULxrKBvbtQeDmXWyJRw10QMIUBuXqw9YRql6IUzhdv5LSz3/T6
Hj9eIHIxHw1NV13sQEWtMf/KJ1uQfNJOwST5HrohW4oXPZH0cgdu3YYYDVOm53D2
5Xh0ChZykN0UNcHGtApbsyRKlvKTp4gfmoYPyGIoA0eWNmQi78fs1NejXj2bcacu
UKNmpj4U7PJpk81qwcr6iTtJQvaxfg1hCzjT4J+/dzfE8L1UcCj8Tdljj7F6u+A1
IEopG+pIzTrZFjDDRFigRoUBjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD3Y3V43
NMkmF9mGYl8PeeIJ5qj8MB8GA1UdIwQYMBaAFEAdi9yCoyRIyTujoP6TrxBkI2Ki
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTc1Ni82QjcyN0YzMjYy
MTIxMUYwOENBNkMxNTRDNEY5QUUwMi9RQjJMM0lLakpFakpPNk9nX3BPdkVHUWpZ
cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTc1Ni82QjcyN0YzMjYyMTIxMUYwOENBNkMxNTRDNEY5QUUwMi9RQjJMM0lLakpF
akpPNk9nX3BPdkVHUWpZcUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfHphDD0QLedhmxTXTsLCT7z+lu8DRVJyRX5h1KAKhMVfi/MefV0ITz/mb3ph
tGcnPIzagVf3b4jwbeiKwJbPDZc5tgekwDZYeOxRfqY4L9GPDq1hPKk1kO2Pa1sy
QDuIvgv1c4OlsxjRlWnIkYGTN+G/JIPfMCa61BMOOZ5WKnSFycAQcLzgQMGnUIax
x7W0vRe+pYIyxjIey/uMRCF2CfQc3TxqBNH6rAlCIowXO645kA4TX/bsCwH+m11i
rM6r8HscHYOrpq4i7iqC62jOz2e4qtq19yfqfxyayxgoHxLl5WIsFIUQ6q0f2/nZ
QPPWLARUr4WIve/oQ8LFH8wVVQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:07 2026 by rpki-client