Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
File:                     0QwglvtdswSr0vmfRaKUiCktNyE.mft (raw, json)
Hash identifier:          adp22rtjenlWzV8lvZ15E+LUx5aFOHr09zWcE9xqHxo=
Subject key identifier:   6A:E4:43:6F:5C:10:74:21:B2:48:45:E5:8A:54:F0:38:BB:97:21:3F
Authority key identifier: D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21
Certificate issuer:       /CN=A91C68AD/serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
Certificate serial:       0162
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
Manifest number:          0152
Signing time:             Thu 23 Jul 2026 06:45:04 +0000
Manifest this update:     Thu 23 Jul 2026 06:45:03 +0000
Manifest next update:     Thu 30 Jul 2026 06:45:03 +0000
Files and hashes:         1: 0QwglvtdswSr0vmfRaKUiCktNyE.crl (hash: s5TPI5CSH3yBjxZ/d+bPkWDYQ1qbMihfoDjMEF0TIuU=)
                          2: 1E0CBABEC99B11F0BD75C310C4F9AE02.roa (hash: XT1f5iHkb8m++28/fpiYZLplpEUsgc7c8BPU0gRXDvg=)
                          3: 1D9F5104C99B11F092A1C310C4F9AE02.roa (hash: ZvIqaTrMx4lREhhOll5OEYiWwpf2XdBASEHvDBRAKLs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl
                          rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C68AD, serialNumber=D10C2096FB5DB304ABD2F99F45A29488292D3721
        Validity
            Not Before: Jul 23 06:45:03 2026 GMT
            Not After : Jul 30 06:45:03 2026 GMT
        Subject: CN=6a61b870-2a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:bd:10:a1:dc:29:a1:5d:b2:53:76:75:4a:
                    da:3b:55:0b:df:62:0a:1f:ba:62:19:d4:42:4b:b6:
                    07:7c:1d:df:43:18:7f:9e:1e:c5:cd:3f:ec:2e:44:
                    fd:d9:a3:69:40:f8:d9:de:9f:77:50:c7:4e:b9:80:
                    8b:31:fc:2f:21:50:d4:f5:44:54:33:74:40:d4:d8:
                    3e:c5:62:74:05:60:82:56:31:62:63:0d:91:2b:7f:
                    4d:b0:7f:5b:f3:7a:cc:22:41:ff:09:78:02:e3:93:
                    4a:56:fe:81:d5:b8:b9:43:d7:f9:cf:8f:9e:d1:0a:
                    d8:f7:c3:4f:13:3e:85:30:23:b5:9e:ae:da:b8:48:
                    53:b5:b3:26:da:39:37:3f:4a:07:f3:83:3e:65:38:
                    2c:7a:68:3f:4d:7e:9f:7a:6b:c5:dc:b5:d6:f1:ee:
                    5e:af:a4:11:5b:e7:aa:4d:f5:ee:5f:a5:72:69:02:
                    ec:d4:5f:9c:2b:d1:4f:dc:db:4f:aa:a0:a7:41:14:
                    73:23:2f:d8:c3:41:33:c0:45:11:71:41:da:de:2f:
                    23:fc:16:4a:25:14:e2:7f:ea:24:06:7c:0a:e4:d8:
                    49:c6:d7:cc:3e:cd:fd:04:fe:ac:cf:15:6e:2e:bb:
                    35:ab:91:59:1e:33:52:13:b1:f8:3d:6a:b9:c0:1d:
                    57:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:43:6F:5C:10:74:21:B2:48:45:E5:8A:54:F0:38:BB:97:21:3F
            X509v3 Authority Key Identifier:
                keyid:D1:0C:20:96:FB:5D:B3:04:AB:D2:F9:9F:45:A2:94:88:29:2D:37:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0QwglvtdswSr0vmfRaKUiCktNyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/DEBA238086A011EFB36E300EC4F9AE02/0QwglvtdswSr0vmfRaKUiCktNyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:51:41:1a:ec:32:ee:4c:cf:b2:2a:f7:0b:94:b5:c1:e0:67:
         63:ff:de:25:94:eb:95:32:b5:2f:19:15:da:6f:8c:c2:45:1c:
         80:ab:09:d1:3c:ec:9d:80:72:8c:9f:f8:ec:d0:a6:79:6e:db:
         56:6a:7c:0b:72:e1:c4:30:b0:99:49:7c:7f:81:52:a7:f5:67:
         b6:5d:e3:54:66:5a:4a:d1:cd:e8:cf:58:34:dd:5a:25:e0:7b:
         18:73:a5:13:ec:e4:f1:49:28:3e:91:a9:c0:f2:9e:ab:9d:b4:
         d0:e6:3f:31:d8:97:dc:46:22:f1:e6:de:bd:1e:62:68:87:0b:
         7a:f9:9f:89:6e:f8:59:cf:93:4f:f2:a5:e6:69:99:28:8f:17:
         37:2c:0c:52:5b:43:01:50:6c:4b:5b:98:22:de:cd:21:81:94:
         b0:da:4b:bf:c3:f4:3a:c9:be:d4:2b:4c:f4:18:ae:a4:45:b7:
         a7:58:64:d0:38:e8:4b:55:4c:23:c7:47:fc:20:49:d2:d9:67:
         1d:ed:f4:6a:3d:e7:80:23:09:90:30:ce:e1:09:40:0d:95:ad:
         86:2d:bc:00:f0:e6:d6:2f:75:59:30:43:fc:75:a8:7e:59:27:
         ce:b1:57:27:6a:bf:f4:9f:c0:a0:74:ca:8e:de:e2:01:d4:eb:
         7c:57:33:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4QUQxMTAvBgNVBAUTKEQxMEMyMDk2RkI1REIzMDRBQkQyRjk5RjQ1QTI5NDg4
MjkyRDM3MjEwHhcNMjYwNzIzMDY0NTAzWhcNMjYwNzMwMDY0NTAzWjAYMRYwFAYD
VQQDEw02YTYxYjg3MC0yYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZC9EKHcKaFdslN2dUraO1UL32IKH7piGdRCS7YHfB3fQxh/nh7FzT/sLkT9
2aNpQPjZ3p93UMdOuYCLMfwvIVDU9URUM3RA1Ng+xWJ0BWCCVjFiYw2RK39NsH9b
83rMIkH/CXgC45NKVv6B1bi5Q9f5z4+e0QrY98NPEz6FMCO1nq7auEhTtbMm2jk3
P0oH84M+ZTgsemg/TX6femvF3LXW8e5er6QRW+eqTfXuX6VyaQLs1F+cK9FP3NtP
qqCnQRRzIy/Yw0EzwEURcUHa3i8j/BZKJRTif+okBnwK5NhJxtfMPs39BP6szxVu
Lrs1q5FZHjNSE7H4PWq5wB1XJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGrkQ29c
EHQhskhF5YpU8Di7lyE/MB8GA1UdIwQYMBaAFNEMIJb7XbMEq9L5n0WilIgpLTch
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC9ERUJBMjM4MDg2
QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3U3Iwdm1mUmFLVWlDa3RO
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBRd2dsdnRkc3dTcjB2bWZSYUtVaUNrdE55RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjhBRC9ERUJBMjM4MDg2QTAxMUVGQjM2RTMwMEVDNEY5QUUwMi8wUXdnbHZ0ZHN3
U3Iwdm1mUmFLVWlDa3ROeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV1FBGuwy7kzPsir3C5S1weBnY//eJZTrlTK1LxkV2m+MwkUcgKsJ0TzsnYBy
jJ/47NCmeW7bVmp8C3LhxDCwmUl8f4FSp/Vntl3jVGZaStHN6M9YNN1aJeB7GHOl
E+zk8UkoPpGpwPKeq5200OY/MdiX3EYi8ebevR5iaIcLevmfiW74Wc+TT/Kl5mmZ
KI8XNywMUltDAVBsS1uYIt7NIYGUsNpLv8P0Osm+1CtM9BiupEW3p1hk0DjoS1VM
I8dH/CBJ0tlnHe30aj3ngCMJkDDO4QlADZWthi28APDm1i91WTBD/HWoflknzrFX
J2q/9J/AoHTKjt7iAdTrfFczYQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:19:02 2026 by rpki-client