Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
File:                     KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft (raw, json)
Hash identifier:          KuvAQVoHqd/hXtXBHMSCvX1986UN//hnBtYdU03pByU=
Subject key identifier:   EB:77:44:EA:DA:8D:41:27:F6:01:CE:BF:58:37:BE:A1:56:F4:7A:DA
Authority key identifier: 29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C
Certificate issuer:       /CN=A91A3456/serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
Certificate serial:       0BF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
Manifest number:          0BE5
Signing time:             Wed 22 Jul 2026 19:14:44 +0000
Manifest this update:     Wed 22 Jul 2026 19:14:43 +0000
Manifest next update:     Wed 29 Jul 2026 19:14:43 +0000
Files and hashes:         1: KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl (hash: IMPeMQj25/WS9cPob2heZfgZZn9GkIgA6FhUHQEUgLc=)
                          2: 496096EE41A311EABAADCE0AC4F9AE02.roa (hash: owbB/QFVhS3E4rWN71OSFx1s7RgWi4YjBcaDXgNNaiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl
                          rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3058 (0xbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3456, serialNumber=290C4010FADC476947E0093F43F7004F0D7C5C1C
        Validity
            Not Before: Jul 22 19:14:43 2026 GMT
            Not After : Jul 29 19:14:43 2026 GMT
        Subject: CN=6a6116a4-0ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:af:ed:a4:c8:3c:2b:88:e6:df:ba:11:9f:
                    f7:4a:c6:37:1e:76:0f:48:7a:8a:b0:d6:96:a8:ef:
                    3c:5f:fd:0c:db:c6:7c:cd:57:fc:43:5f:70:9a:2a:
                    b3:19:be:d3:cf:7a:d9:60:91:b7:b9:88:2c:35:50:
                    7c:af:fd:9f:33:a7:c2:c2:b5:80:68:08:ca:86:ab:
                    cb:56:df:9c:d9:ba:a5:a4:98:ed:f0:0c:d3:8f:d7:
                    11:72:00:d3:50:03:90:23:a9:9b:8c:42:2b:92:1a:
                    62:69:f0:59:b7:b0:81:7c:56:e8:97:87:b7:6c:32:
                    e2:2d:e9:63:5a:18:6c:5b:b7:90:c9:5d:bd:b2:52:
                    77:88:bd:aa:67:11:c0:ee:12:67:85:41:84:33:0f:
                    ad:7d:b5:66:da:ba:cf:1a:f6:39:e9:23:c5:a4:35:
                    aa:aa:75:02:98:30:94:53:e9:1e:b5:f7:87:5c:12:
                    98:dc:75:9d:3e:88:ec:d1:30:3c:1b:60:dd:92:47:
                    55:79:61:cb:19:61:14:a2:93:5d:70:b1:51:ad:43:
                    d3:00:25:aa:09:08:c3:b2:fd:58:f8:1e:d7:38:cc:
                    c0:6e:bc:ba:ec:9b:80:6d:8a:46:b5:9f:bc:e7:de:
                    bc:89:5b:e8:14:eb:5b:85:39:de:8e:46:f1:b1:c6:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:77:44:EA:DA:8D:41:27:F6:01:CE:BF:58:37:BE:A1:56:F4:7A:DA
            X509v3 Authority Key Identifier:
                keyid:29:0C:40:10:FA:DC:47:69:47:E0:09:3F:43:F7:00:4F:0D:7C:5C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQxAEPrcR2lH4Ak_Q_cATw18XBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3456/6C27F25A41A111EAA47D1E86C4F9AE02/KQxAEPrcR2lH4Ak_Q_cATw18XBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:73:9f:df:09:80:f7:64:a1:db:a9:04:46:e7:20:8b:36:04:
         3a:9b:de:1f:23:fb:b0:38:cc:db:9d:38:5c:e8:fb:52:ff:07:
         11:98:93:60:05:44:3b:bb:12:e8:fa:80:e4:fc:00:20:b9:9d:
         17:81:74:47:17:b5:dc:d6:f8:2f:e8:66:95:1a:a1:39:db:1d:
         17:e8:6a:a4:86:39:1f:af:9d:f0:99:54:82:85:a2:ea:8c:68:
         a7:45:ea:44:e9:bc:da:be:41:77:3b:f2:28:36:ee:c6:63:37:
         1e:1e:f7:db:9d:53:c5:41:59:f9:70:e1:d0:8b:93:80:08:69:
         88:ed:25:40:bf:a4:dd:64:91:d6:ca:79:c4:ac:ec:fa:8f:a0:
         dd:78:74:8f:b2:64:d7:f4:8f:e4:52:bb:54:53:0d:d2:b3:c2:
         56:b6:47:8e:74:49:64:67:df:34:7e:52:a0:bd:4d:4d:b6:da:
         25:37:c9:cc:c5:ad:f8:2d:7c:84:68:8c:8c:9c:4f:3c:82:fd:
         30:9f:8b:87:e1:96:c4:9b:e9:0c:75:f3:f9:dd:06:a3:5a:09:
         7b:e8:0b:f2:cf:0a:4e:d0:56:d7:ba:92:c5:29:8b:8e:26:8e:
         59:3a:dd:f9:6b:c1:84:e8:43:12:1f:73:6a:ce:aa:70:23:25:
         7c:80:8a:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTM0NTYxMTAvBgNVBAUTKDI5MEM0MDEwRkFEQzQ3Njk0N0UwMDkzRjQzRjcwMDRG
MEQ3QzVDMUMwHhcNMjYwNzIyMTkxNDQzWhcNMjYwNzI5MTkxNDQzWjAYMRYwFAYD
VQQDEw02YTYxMTZhNC0wYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9qv7aTIPCuI5t+6EZ/3SsY3HnYPSHqKsNaWqO88X/0M28Z8zVf8Q19wmiqz
Gb7Tz3rZYJG3uYgsNVB8r/2fM6fCwrWAaAjKhqvLVt+c2bqlpJjt8AzTj9cRcgDT
UAOQI6mbjEIrkhpiafBZt7CBfFbol4e3bDLiLeljWhhsW7eQyV29slJ3iL2qZxHA
7hJnhUGEMw+tfbVm2rrPGvY56SPFpDWqqnUCmDCUU+ketfeHXBKY3HWdPojs0TA8
G2DdkkdVeWHLGWEUopNdcLFRrUPTACWqCQjDsv1Y+B7XOMzAbry67JuAbYpGtZ+8
5968iVvoFOtbhTnejkbxscZj5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOt3ROra
jUEn9gHOv1g3vqFW9HraMB8GA1UdIwQYMBaAFCkMQBD63EdpR+AJP0P3AE8NfFwc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQ1Ni82QzI3RjI1QTQx
QTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1IybEg0QWtfUV9jQVR3MThY
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tReEFFUHJjUjJsSDRBa19RX2NBVHcxOFhCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzQ1Ni82QzI3RjI1QTQxQTExMUVBQTQ3RDFFODZDNEY5QUUwMi9LUXhBRVByY1Iy
bEg0QWtfUV9jQVR3MThYQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAh3Of3wmA92Sh26kERucgizYEOpveHyP7sDjM2504XOj7Uv8HEZiTYAVEO7sS
6PqA5PwAILmdF4F0Rxe13Nb4L+hmlRqhOdsdF+hqpIY5H6+d8JlUgoWi6oxop0Xq
ROm82r5BdzvyKDbuxmM3Hh73251TxUFZ+XDh0IuTgAhpiO0lQL+k3WSR1sp5xKzs
+o+g3Xh0j7Jk1/SP5FK7VFMN0rPCVrZHjnRJZGffNH5SoL1NTbbaJTfJzMWt+C18
hGiMjJxPPIL9MJ+Lh+GWxJvpDHXz+d0Go1oJe+gL8s8KTtBW17qSxSmLjiaOWTrd
+WvBhOhDEh9zas6qcCMlfICKFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:16:08 2026 by rpki-client