Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File:                     qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier:          OK0rvfTZ7e97yGtA1klJ8ZUCnpeEWsIUhvnGAAsIIsw=
Subject key identifier:   66:92:2D:99:A9:AB:6B:A1:7B:C4:D3:6F:A8:41:A9:92:9E:F1:90:3E
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer:       /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial:       1C0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number:          1BF4
Signing time:             Wed 22 Jul 2026 16:18:50 +0000
Manifest this update:     Wed 22 Jul 2026 16:18:50 +0000
Manifest next update:     Wed 29 Jul 2026 16:18:50 +0000
Files and hashes:         1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: IgKNyGWWbQ1iXmz7DjeHiRA3ipHc9/5sTAJgqjJmBLA=)
                          2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7182 (0x1c0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
        Validity
            Not Before: Jul 22 16:18:50 2026 GMT
            Not After : Jul 29 16:18:50 2026 GMT
        Subject: CN=6a60ed6a-f3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:14:07:65:85:2c:6d:32:4b:1f:5c:4a:ec:
                    05:a0:11:a0:cd:f0:8e:9a:e4:05:cc:bd:08:25:d1:
                    51:9d:9c:6f:a8:90:4c:99:5b:8f:79:d0:d4:29:11:
                    ca:e8:b1:9c:28:39:05:ae:fd:af:35:05:8b:90:d6:
                    e5:79:08:cf:29:a3:12:53:5e:b6:fe:85:22:d2:85:
                    ef:ce:34:a0:9c:5a:05:ee:58:0d:14:57:8b:ce:cf:
                    9a:58:8b:38:71:39:69:ac:17:ad:ea:26:a9:0c:47:
                    e5:ce:ab:0c:11:98:ca:de:00:c7:6e:ac:13:ed:e4:
                    50:b6:14:7a:2c:f5:2d:9d:a1:01:4c:1f:6e:da:ec:
                    56:38:b6:c0:77:3a:69:f3:13:b5:b4:5b:5f:be:38:
                    8a:e6:2f:b0:c7:b0:65:48:db:18:e6:5e:7e:bb:1a:
                    1a:84:22:30:ea:70:34:0f:87:40:d9:a8:51:ef:fd:
                    9b:d3:d4:7f:1c:b4:5d:a4:99:4f:68:3b:b0:a8:de:
                    c2:2e:7a:d4:08:aa:48:40:e0:85:1e:d3:82:8a:50:
                    46:15:c3:01:5c:90:d3:08:57:c2:08:6d:95:fe:77:
                    ad:db:c4:3a:8a:95:69:41:82:f6:ce:be:7f:ad:fc:
                    b9:d9:9a:4b:2e:ff:ee:80:50:50:14:ce:c0:7c:db:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:2D:99:A9:AB:6B:A1:7B:C4:D3:6F:A8:41:A9:92:9E:F1:90:3E
            X509v3 Authority Key Identifier:
                keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:ca:31:6f:2b:4d:d4:1f:d1:36:28:df:58:28:81:b8:c8:
         0f:37:a6:49:7b:61:62:06:92:3f:7d:28:fd:92:40:4b:e4:b3:
         ca:73:44:69:2a:10:4f:a7:ee:76:12:b0:cc:ca:51:92:b0:dd:
         49:d0:e6:8d:ba:16:09:a6:07:01:96:97:d0:1a:2f:a6:c3:4c:
         b0:b0:0e:48:37:4f:85:3f:9e:1d:1a:c3:84:b6:34:1c:fc:15:
         b8:c7:5d:82:5b:82:d8:ae:7a:c8:d8:5f:d5:62:c8:a2:bc:f8:
         b9:f5:1a:19:5c:c4:02:f1:08:0e:70:fc:75:f1:3d:81:81:04:
         e9:b0:3f:3a:b6:86:bf:21:6b:86:f5:5e:a7:c3:2e:27:87:2d:
         50:fe:f9:d1:b2:0f:1f:a8:99:68:07:8d:69:2b:bb:08:be:6d:
         fd:e8:ed:20:07:22:15:66:be:86:d3:31:55:6a:c0:55:f5:64:
         56:8f:03:a2:44:a8:78:93:fe:ce:db:a4:9d:c8:c2:8a:71:20:
         e7:17:ce:bf:8f:32:bf:29:b3:8b:70:5e:76:4d:6e:d5:2e:e1:
         87:a3:00:1d:87:7a:5b:21:76:d1:87:97:42:1b:91:6b:b0:7b:
         31:43:d8:e2:fe:fc:cd:97:cd:89:84:73:31:b2:74:e9:a3:83:
         76:21:e3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:10 2026 by rpki-client