Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File:                     qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier:          3viLzk1bfKJTBZ3BgID9LdEfHmJAEI/cTz/YI1k/dO4=
Subject key identifier:   0C:DD:0F:A1:BD:3B:A9:DD:E4:DB:E8:86:35:5F:11:AE:6E:FF:05:5D
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer:       /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number:          01C7
Signing time:             Thu 23 Jul 2026 05:13:48 +0000
Manifest this update:     Thu 23 Jul 2026 05:13:47 +0000
Manifest next update:     Thu 30 Jul 2026 05:13:47 +0000
Files and hashes:         1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: JvQZ7D61ZKOIcyEEhIneIXq06RP85uUkcPbHX2ZCQAA=)
                          2: 70C04006D5EF11EE8279357EC4F9AE02.roa (hash: FMQ4cQsw3VD3QYGrAPTdPSBgnIKTRxDIrjgjXzARTlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
        Validity
            Not Before: Jul 23 05:13:47 2026 GMT
            Not After : Jul 30 05:13:47 2026 GMT
        Subject: CN=6a61a30c-34c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:cf:84:ab:ae:ed:f3:d7:ce:39:04:75:f2:
                    63:a5:71:ec:af:71:2b:20:9b:b1:57:01:0c:89:72:
                    0d:e8:44:46:c0:25:b6:f9:9c:fb:34:f2:48:66:0f:
                    b6:f6:8a:cf:51:b3:1d:74:c9:23:e5:e3:5e:54:7d:
                    c5:53:6b:96:35:04:1b:b8:8c:13:1b:1e:e8:50:cb:
                    e3:8a:14:ad:9d:54:cb:3e:62:06:0d:8f:dc:7e:cb:
                    08:79:8f:11:46:db:61:3c:c2:fb:05:51:2a:f8:d4:
                    7c:5a:85:ca:5d:6b:ac:de:c8:61:19:60:10:74:52:
                    3f:2a:a2:0a:a5:e6:13:44:dc:10:71:57:c8:34:4d:
                    ae:32:56:6d:94:e1:bd:52:10:7d:d1:cb:0f:cc:9e:
                    bc:f2:d0:30:8b:7c:f8:82:42:6b:f2:f8:84:16:f7:
                    67:b3:d5:26:05:73:29:fb:c6:1b:35:4d:76:df:a5:
                    d6:10:3b:8a:5b:b8:86:ba:d4:a1:e0:9f:31:c8:3f:
                    74:a2:08:1b:fc:50:62:e1:84:ba:b6:bb:48:99:91:
                    97:d7:6e:1f:94:25:2a:5c:81:70:15:a2:90:e8:eb:
                    7d:93:68:98:75:e4:1a:76:96:79:8b:92:d5:95:35:
                    f5:ad:42:58:0e:1f:85:b9:6b:18:ea:83:1c:18:0a:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DD:0F:A1:BD:3B:A9:DD:E4:DB:E8:86:35:5F:11:AE:6E:FF:05:5D
            X509v3 Authority Key Identifier:
                keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c8:e0:0f:dc:6b:18:f0:cd:fd:24:70:cf:6b:61:76:7d:94:
         28:a8:f6:d9:e3:6d:7b:21:5e:c8:ae:92:e1:2a:7f:cb:de:b8:
         93:90:ee:d1:2f:fa:8b:73:e2:d6:1a:91:0e:46:66:66:0b:3b:
         4d:7d:a3:09:96:47:25:79:ae:13:a6:a9:89:05:df:01:64:5e:
         f1:61:e0:75:5c:99:60:90:a9:92:8d:31:ba:e5:72:45:c5:a5:
         ad:89:ed:f4:1c:ef:28:9d:17:7e:ff:88:69:84:e4:fd:40:c5:
         ec:f8:b5:a8:29:45:cd:78:4b:74:d5:6d:f7:97:9c:24:5d:da:
         9a:a4:8e:82:fc:5f:23:0a:e1:2e:d7:bc:33:f4:c6:c7:e1:69:
         20:31:c5:01:90:f0:aa:54:4d:58:69:f0:d8:5f:64:fe:65:6c:
         29:a3:1c:b8:6b:ad:ac:6b:06:7e:6d:27:5e:c1:64:25:37:ca:
         0e:0b:f3:8d:a7:8e:90:ac:13:2f:73:6e:e5:4b:f5:32:e0:20:
         3d:b4:4b:3c:7f:07:e7:f1:5c:e6:70:d9:f6:39:37:91:73:72:
         03:dd:4a:8c:02:d0:aa:af:bf:92:6f:eb:df:89:5a:1f:ff:03:
         fc:4c:d6:33:db:aa:35:f9:15:6e:19:5a:45:d8:24:c7:5a:ef:
         53:cf:21:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE
ODJDNDhDRTIwHhcNMjYwNzIzMDUxMzQ3WhcNMjYwNzMwMDUxMzQ3WjAYMRYwFAYD
VQQDEw02YTYxYTMwYy0zNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ffPhKuu7fPXzjkEdfJjpXHsr3ErIJuxVwEMiXIN6ERGwCW2+Zz7NPJIZg+2
9orPUbMddMkj5eNeVH3FU2uWNQQbuIwTGx7oUMvjihStnVTLPmIGDY/cfssIeY8R
RtthPML7BVEq+NR8WoXKXWus3shhGWAQdFI/KqIKpeYTRNwQcVfINE2uMlZtlOG9
UhB90csPzJ688tAwi3z4gkJr8viEFvdns9UmBXMp+8YbNU1236XWEDuKW7iGutSh
4J8xyD90oggb/FBi4YS6trtImZGX124flCUqXIFwFaKQ6Ot9k2iYdeQadpZ5i5LV
lTX1rUJYDh+FuWsY6oMcGAr89wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzdD6G9
O6nd5NvohjVfEa5u/wVdMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1
RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15
bkU4RVhETmtjT25ZTEVqT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANsjgD9xrGPDN/SRwz2thdn2UKKj22eNteyFeyK6S4Sp/y964k5Du0S/6i3Pi
1hqRDkZmZgs7TX2jCZZHJXmuE6apiQXfAWRe8WHgdVyZYJCpko0xuuVyRcWlrYnt
9BzvKJ0Xfv+IaYTk/UDF7Pi1qClFzXhLdNVt95ecJF3amqSOgvxfIwrhLte8M/TG
x+FpIDHFAZDwqlRNWGnw2F9k/mVsKaMcuGutrGsGfm0nXsFkJTfKDgvzjaeOkKwT
L3Nu5Uv1MuAgPbRLPH8H5/Fc5nDZ9jk3kXNyA91KjALQqq+/km/r34laH/8D/EzW
M9uqNfkVbhlaRdgkx1rvU88hqQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:03 2026 by rpki-client