Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
File:                     QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft (raw, json)
Hash identifier:          pjXp3aLnMWANrT9+CaEg/cARE/KLU0kZBip5/duLrlE=
Subject key identifier:   5A:0A:BC:DA:99:46:E4:4D:FB:6B:4F:90:1C:A4:EA:AE:2E:31:0D:A5
Authority key identifier: 42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64
Certificate issuer:       /CN=A91E0435/serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
Certificate serial:       07E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
Manifest number:          07DA
Signing time:             Wed 22 Jul 2026 21:57:00 +0000
Manifest this update:     Wed 22 Jul 2026 21:57:00 +0000
Manifest next update:     Wed 29 Jul 2026 21:57:00 +0000
Files and hashes:         1: QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl (hash: yrjti5S2UF7XGulC9tQsiOKk71QfTa5jCORgG/R8N+Y=)
                          2: FCC3542E445E11EBB692887EC4F9AE02.roa (hash: EF9uieKoaY19hPq/K/Sub8whVe1rvynhE+WooVi1n/8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0435, serialNumber=42911B109D46E88661FA85616C812803C5AB3C64
        Validity
            Not Before: Jul 22 21:57:00 2026 GMT
            Not After : Jul 29 21:57:00 2026 GMT
        Subject: CN=6a613cac-cd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:5f:a4:e0:e0:7c:a4:ee:e8:1d:cf:e0:87:
                    cd:5f:0f:19:d5:f8:dd:b9:ae:ce:0f:39:c1:48:cc:
                    ab:5a:9d:1f:a3:98:1f:be:e4:14:3f:c4:8f:a5:41:
                    dd:4f:ea:c4:ff:38:92:fe:4a:fa:b0:0a:79:d3:dd:
                    e6:6f:90:9b:84:55:bf:42:e0:86:e4:ae:63:f1:25:
                    81:1a:e4:8d:a2:f8:15:0b:30:9a:bb:08:a3:4b:5b:
                    83:73:dc:d0:62:c7:95:98:da:e6:f4:9a:8e:24:0e:
                    f7:25:92:7b:20:33:8f:14:83:21:02:44:3a:71:df:
                    c1:0c:02:ce:8a:cf:12:eb:39:3b:34:b9:ed:1e:8e:
                    6f:eb:a7:fa:df:ae:5e:ba:38:bb:d9:87:89:dc:df:
                    ba:67:63:71:31:1b:42:f9:20:b4:66:e8:aa:ae:d7:
                    7f:18:95:3b:a9:81:b6:2b:b7:a9:27:52:1c:3a:66:
                    b5:08:3e:9a:d7:95:07:60:86:2e:eb:4b:df:04:1f:
                    7e:12:4e:ea:dd:74:ac:51:0f:9e:bc:61:a3:2e:16:
                    fd:d3:9f:76:96:b8:d9:74:29:fa:51:b8:62:bb:3e:
                    9a:8f:9e:92:23:c3:bc:5c:6a:1f:c7:22:ff:1f:2d:
                    33:f0:3a:a0:a7:11:1f:e4:5d:a6:d0:a2:22:dd:e4:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0A:BC:DA:99:46:E4:4D:FB:6B:4F:90:1C:A4:EA:AE:2E:31:0D:A5
            X509v3 Authority Key Identifier:
                keyid:42:91:1B:10:9D:46:E8:86:61:FA:85:61:6C:81:28:03:C5:AB:3C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0435/D2885BC4445D11EBA517457EC4F9AE02/QpEbEJ1G6IZh-oVhbIEoA8WrPGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:47:cc:2f:c8:25:48:76:10:f5:53:29:f7:b4:e3:68:7a:
         e4:6f:87:26:f0:72:9c:c2:4f:aa:81:db:24:39:b1:63:5a:6e:
         ee:f3:0e:4a:10:f1:56:23:d4:2f:08:08:05:fe:63:44:ff:93:
         e9:7e:0b:5e:0a:a4:61:42:2e:8f:af:61:17:4f:ba:2a:f1:c6:
         9b:e6:cd:ab:a7:80:50:ef:6d:ee:2a:56:c5:22:e7:9c:b7:b9:
         ad:d6:b8:6f:85:4b:bc:42:93:3a:b1:9f:c3:10:8b:83:52:b5:
         2e:1a:0c:49:00:5f:b9:6b:ba:7d:b7:67:6d:65:e4:50:d1:e8:
         92:d9:15:f7:b8:cd:ce:52:21:49:a0:8b:7a:2d:ee:09:aa:b8:
         ad:83:8f:de:63:87:5f:bb:30:77:04:7b:cd:c2:00:80:c0:58:
         10:21:0d:38:74:9d:78:c6:4e:4e:35:44:a5:fd:4c:6f:46:19:
         04:4a:e6:cd:ee:b8:17:1a:8d:c2:e4:28:be:30:0e:3d:b4:6e:
         99:ad:23:36:50:d0:03:62:84:74:7d:c9:11:7f:f8:db:74:76:
         a7:cf:8e:0a:42:d8:c6:76:bd:bb:7c:8c:37:4b:69:86:32:b7:
         37:18:64:7d:72:14:51:c1:21:38:5c:97:4e:c8:ad:0b:f0:5c:
         1a:2a:62:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:46:44 2026 by rpki-client