Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
File:                     QIWuE0tjOKEnZXKD67wWwS8guGI.mft (raw, json)
Hash identifier:          dzAGP826VqhaSD9UTW239zHtu3xa2n8dUb1Vor/BroU=
Subject key identifier:   58:F3:0D:7B:DA:10:AD:C9:8C:74:90:96:1A:A1:D1:4A:CE:D8:51:FF
Authority key identifier: 40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62
Certificate issuer:       /CN=A91E80FB/serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
Certificate serial:       04AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
Manifest number:          049E
Signing time:             Thu 23 Jul 2026 00:50:38 +0000
Manifest this update:     Thu 23 Jul 2026 00:50:37 +0000
Manifest next update:     Thu 30 Jul 2026 00:50:37 +0000
Files and hashes:         1: QIWuE0tjOKEnZXKD67wWwS8guGI.crl (hash: ZohCPMi4bI2ACY08v0/VwTohOQnjojlBJoodL1Qg0mQ=)
                          2: 9FBFD358C0F911EFA63F3E64C4F9AE02.roa (hash: rGGje0FS4AvgaHfWy61oWrz45FxmRS+DVJtlEpZvXeQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl
                          rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197 (0x4ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E80FB, serialNumber=4085AE134B6338A127657283EBBC16C12F20B862
        Validity
            Not Before: Jul 23 00:50:37 2026 GMT
            Not After : Jul 30 00:50:37 2026 GMT
        Subject: CN=6a61655e-2832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:ee:3a:3c:ff:06:e1:b5:80:fe:be:0a:f0:
                    3e:d2:68:1f:72:a4:29:df:e8:8c:c7:d3:c5:b9:11:
                    32:e5:c6:1a:5b:2c:9f:71:38:25:ea:e0:dd:a0:cc:
                    ff:33:f1:7a:b5:a8:34:34:e4:87:86:36:70:c1:45:
                    e1:d1:0e:b8:66:e8:b7:18:b0:c6:f1:ba:e6:b6:d7:
                    ed:b4:c7:b6:16:f3:69:76:45:cd:b8:c3:75:46:6e:
                    41:3a:7d:8b:aa:28:9c:4a:44:54:9f:31:83:4e:1f:
                    8f:b5:dc:a5:03:2c:cc:31:28:18:33:62:8f:ee:0d:
                    44:4c:0b:ea:68:f6:02:8c:24:de:ab:a3:40:f4:43:
                    24:ef:ea:ec:50:ad:68:8b:e2:d9:ff:b9:5d:42:e7:
                    9a:97:2b:13:a2:65:6a:6f:3b:cb:51:5b:c9:bf:aa:
                    cd:98:7e:e4:30:f0:92:32:c0:fb:f8:31:66:a1:cd:
                    50:78:c2:ab:63:95:45:c6:a6:3f:34:16:dd:00:60:
                    65:e0:24:5f:c1:06:72:20:7f:f9:79:a7:6a:67:77:
                    11:17:de:97:76:1e:fc:51:25:53:9b:a1:05:2d:e8:
                    fa:f4:8d:1e:68:1a:f2:ae:54:ab:c2:32:44:42:c3:
                    df:05:a6:d9:41:f6:22:ac:e0:c0:d7:ef:9d:e9:c4:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F3:0D:7B:DA:10:AD:C9:8C:74:90:96:1A:A1:D1:4A:CE:D8:51:FF
            X509v3 Authority Key Identifier:
                keyid:40:85:AE:13:4B:63:38:A1:27:65:72:83:EB:BC:16:C1:2F:20:B8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIWuE0tjOKEnZXKD67wWwS8guGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E80FB/628D520C8FB611EC92BD2510C4F9AE02/QIWuE0tjOKEnZXKD67wWwS8guGI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:39:66:09:27:f5:04:12:9d:66:17:03:e6:45:01:9a:20:
         bf:c3:4e:2f:e6:87:24:98:20:99:fa:5d:1a:88:e9:2c:d4:57:
         e3:67:d1:5d:e2:7e:c0:ab:1f:9b:bb:81:be:57:20:cd:83:1e:
         96:91:65:a4:dc:6d:6c:14:a5:96:13:b0:14:78:e4:df:08:7f:
         34:7c:26:33:93:66:6e:53:65:05:88:fc:0a:84:2a:33:46:2c:
         74:fb:28:54:4d:ff:53:23:12:9a:3a:5e:59:48:e1:14:76:3c:
         cb:dc:e9:e1:6e:0d:4d:4b:b2:7f:cb:9c:a8:81:41:7a:31:3b:
         9d:24:fb:43:9a:75:d9:50:29:ab:47:a0:15:30:59:c3:1f:26:
         b6:15:b5:eb:d3:54:5e:e2:2a:9d:fe:63:0a:79:e8:f4:b4:bd:
         e8:81:cc:17:c0:61:8f:8f:01:f3:de:eb:a7:81:9f:e5:92:1c:
         5f:23:f1:96:29:e1:b4:57:19:fb:8b:90:d4:92:77:ac:e1:f5:
         16:f6:4d:a8:30:1d:20:05:ed:61:1c:dd:d9:86:04:f9:04:4c:
         af:33:98:e0:86:be:be:95:7c:3f:cf:e0:ee:04:53:53:b5:4a:
         99:42:04:48:2c:5a:ec:fd:80:6e:ee:f3:e5:9d:46:ab:4a:b9:
         b2:1b:57:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:52 2026 by rpki-client