Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
File:                     2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json)
Hash identifier:          akb54Tj/G/lFi/vYR56nXjAm57C/MwOgyevO28DJn+M=
Subject key identifier:   51:F1:0D:41:5F:C4:5E:74:83:4D:CB:08:C5:C6:56:91:F7:73:0A:B5
Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8
Certificate issuer:       /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
Manifest number:          031E
Signing time:             Thu 23 Jul 2026 02:03:44 +0000
Manifest this update:     Thu 23 Jul 2026 02:03:44 +0000
Manifest next update:     Thu 30 Jul 2026 02:03:44 +0000
Files and hashes:         1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: o1GlKB2mN3PyKVf2gLkH/2h3ahCIKFTdpqKNShWgFiM=)
                          2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: h9XZber2EyFddUowRYB4R36YQps0wInKux9nbzLj6gU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl
                          rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8
        Validity
            Not Before: Jul 23 02:03:44 2026 GMT
            Not After : Jul 30 02:03:44 2026 GMT
        Subject: CN=6a617680-fa28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:87:be:76:8d:54:34:8a:6b:97:d9:41:4a:
                    98:f6:88:26:32:3c:b8:c7:79:d9:d7:d8:0d:e6:3f:
                    d5:c1:88:03:3d:b6:08:0d:cb:7e:3a:3b:d3:51:1a:
                    e9:90:f0:c3:bd:90:b3:80:e8:55:3b:11:ce:4d:8b:
                    b4:7a:60:cf:b1:bc:83:f2:3b:6c:35:b8:e6:af:3f:
                    c3:7a:9c:d6:1f:64:8d:d5:4e:b8:f1:fd:17:94:0f:
                    75:11:13:9a:18:1d:13:53:ad:5c:b8:b7:a7:17:00:
                    b3:0c:b8:1a:f5:45:a3:9a:e2:6c:0c:b8:53:aa:04:
                    7e:55:9f:d1:f9:d5:b6:bc:cf:2f:3a:9a:46:28:a0:
                    0a:a5:5b:95:55:ba:0b:45:13:15:36:b6:18:12:71:
                    51:1a:cb:ed:b4:bd:ec:04:76:51:d7:ca:da:2d:8d:
                    67:00:3b:92:0d:dc:f8:bc:df:de:49:66:04:a5:8a:
                    a8:16:cd:a6:c9:4d:f4:a2:70:42:98:4e:86:e5:d9:
                    3e:c6:db:30:99:43:e1:b7:2f:a2:83:d2:36:d7:57:
                    43:90:de:16:01:d5:ef:b3:a9:a8:98:ef:8b:a8:17:
                    43:2a:b1:d9:10:5d:c2:16:cd:c1:5e:28:60:e5:80:
                    c3:9d:85:d1:58:b3:a4:31:a1:e2:5e:b4:df:37:28:
                    75:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F1:0D:41:5F:C4:5E:74:83:4D:CB:08:C5:C6:56:91:F7:73:0A:B5
            X509v3 Authority Key Identifier:
                keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:64:ce:e6:2b:de:72:a6:57:80:27:68:f4:c8:37:57:a7:a7:
         19:47:7d:a3:2a:d2:61:99:64:ae:6c:25:5f:cd:96:58:2d:38:
         3c:f2:5e:14:5e:a9:c7:df:a1:8b:95:b9:95:96:58:e6:4e:16:
         64:ce:06:e3:64:e0:6a:7f:e7:58:7c:4f:77:f1:6e:b3:4d:e3:
         a7:4f:c9:ec:7c:e5:ce:ea:6e:1e:20:df:16:b7:d2:7a:27:2b:
         b6:c0:ca:15:dc:c9:61:f2:96:56:3a:e8:e2:67:85:62:b2:45:
         e2:32:28:d7:90:ca:de:13:9e:4e:b8:b5:c9:d1:a7:ee:9f:c5:
         01:0e:43:44:35:67:38:b1:26:18:d9:67:1b:c3:db:91:94:8c:
         0f:a3:b1:77:fa:a8:3e:9c:f6:d9:d9:68:3e:95:8d:b2:f4:24:
         08:a5:38:13:65:f1:fb:13:13:e9:5a:0f:92:90:36:da:e1:c1:
         6b:a0:5e:66:c4:0e:a7:87:3f:aa:97:07:ea:b0:2f:85:32:a7:
         f9:5e:67:b0:37:75:e3:22:8f:30:61:5c:55:b5:96:28:83:43:
         9d:82:69:3f:bd:1e:35:3d:ab:e8:61:48:dc:ed:ef:da:14:d8:
         32:06:bc:92:e8:7c:3e:2c:21:80:07:84:2b:c7:f2:10:01:d8:
         21:0c:11:eb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0
QTAwRUFFRTgwHhcNMjYwNzIzMDIwMzQ0WhcNMjYwNzMwMDIwMzQ0WjAYMRYwFAYD
VQQDEw02YTYxNzY4MC1mYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpmHvnaNVDSKa5fZQUqY9ogmMjy4x3nZ19gN5j/VwYgDPbYIDct+OjvTURrp
kPDDvZCzgOhVOxHOTYu0emDPsbyD8jtsNbjmrz/DepzWH2SN1U648f0XlA91EROa
GB0TU61cuLenFwCzDLga9UWjmuJsDLhTqgR+VZ/R+dW2vM8vOppGKKAKpVuVVboL
RRMVNrYYEnFRGsvttL3sBHZR18raLY1nADuSDdz4vN/eSWYEpYqoFs2myU30onBC
mE6G5dk+xtswmUPhty+ig9I211dDkN4WAdXvs6momO+LqBdDKrHZEF3CFs3BXihg
5YDDnYXRWLOkMaHiXrTfNyh1UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHxDUFf
xF50g03LCMXGVpH3cwq1MB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx
RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y
dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN
SUF4YWxyY3UydjFLQU9ydWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV2TO5ivecqZXgCdo9Mg3V6enGUd9oyrSYZlkrmwlX82WWC04PPJeFF6px9+h
i5W5lZZY5k4WZM4G42Tgan/nWHxPd/Fus03jp0/J7HzlzupuHiDfFrfSeicrtsDK
FdzJYfKWVjro4meFYrJF4jIo15DK3hOeTri1ydGn7p/FAQ5DRDVnOLEmGNlnG8Pb
kZSMD6Oxd/qoPpz22dloPpWNsvQkCKU4E2Xx+xMT6VoPkpA22uHBa6BeZsQOp4c/
qpcH6rAvhTKn+V5nsDd14yKPMGFcVbWWKINDnYJpP70eNT2r6GFI3O3v2hTYMga8
kuh8PiwhgAeEK8fyEAHYIQwR6w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:28 2026 by rpki-client