Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          CAU+OKIXOOZloeZvhKCS4zKiJq0fPwoIN1bAWvlOWvw=
Subject key identifier:   33:A5:EA:6B:81:45:F7:A9:25:21:C3:88:88:FC:E8:48:6F:E6:73:1A
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       06E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          06AC
Signing time:             Wed 22 Jul 2026 23:08:12 +0000
Manifest this update:     Wed 22 Jul 2026 23:08:12 +0000
Manifest next update:     Wed 29 Jul 2026 23:08:12 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: YsW3iHdt4xiuTYTGyUKA+Kr9SZ4rgQrIBJNz0IPxfZ8=)
                          2: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=)
                          3: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=)
                          4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Jul 22 23:08:12 2026 GMT
            Not After : Jul 29 23:08:12 2026 GMT
        Subject: CN=6a614d5c-71b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:50:9e:5d:53:03:04:8a:84:e1:3e:c3:b6:
                    0c:a2:71:33:b0:b2:6f:ec:62:bc:de:5f:d9:eb:d8:
                    4f:c6:f2:59:5b:da:70:3a:1b:d7:31:26:28:fe:de:
                    ba:a1:6f:b0:9c:8f:bd:c5:1a:a7:31:0a:51:7d:27:
                    00:95:56:1a:67:4a:c6:55:83:3c:47:34:01:01:31:
                    87:41:af:82:da:9b:4d:78:2a:df:2d:09:3e:c2:9b:
                    5d:c5:5a:56:92:b5:29:f7:ae:8b:2a:f4:e2:ec:6a:
                    ed:9e:4f:5e:2d:d1:ed:7f:25:a8:01:c9:53:5f:e9:
                    92:01:7e:1f:de:01:63:d0:05:08:8d:cc:d8:11:00:
                    ee:63:60:c2:2d:4e:d3:da:d4:e7:d8:20:c5:07:ad:
                    5a:90:90:b1:2c:5e:b9:9c:54:2a:12:59:c4:1c:77:
                    07:ca:7d:42:44:0a:8a:94:ed:52:17:cd:57:64:54:
                    25:09:18:9a:5b:f2:60:99:72:8f:54:47:be:8f:93:
                    a2:a4:43:8b:2d:19:04:11:e1:20:5e:5a:d9:7b:4c:
                    86:7d:9d:73:e6:4e:64:c9:14:01:01:f0:6b:53:ca:
                    3d:b9:1a:eb:75:02:73:96:6f:5e:b5:71:41:44:1e:
                    16:c7:e2:95:39:80:2d:07:bf:69:ae:a7:24:1f:1d:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:EA:6B:81:45:F7:A9:25:21:C3:88:88:FC:E8:48:6F:E6:73:1A
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ad:59:56:07:49:60:3b:46:a0:ea:5c:89:cb:71:75:24:8a:
         cb:dd:90:aa:b1:95:01:b4:ac:7e:6d:3b:73:d3:8e:cc:a3:dd:
         03:e1:b8:8e:84:af:32:0e:ba:44:67:86:86:a6:a7:31:ba:33:
         41:2b:5f:01:63:b0:42:17:a9:de:76:33:33:97:90:b5:65:91:
         7a:92:28:d0:79:66:d7:ae:fc:f9:09:a4:2c:1d:0e:5e:1a:22:
         ea:7f:e5:fe:9a:c4:f4:7e:b6:4f:24:b4:c8:74:d8:82:9f:b3:
         09:be:16:34:b5:6b:91:97:31:93:ba:eb:2d:db:47:54:a2:03:
         6f:9a:b2:04:98:9c:91:da:af:ac:1c:96:cb:8e:aa:c7:c9:3a:
         d6:08:bb:78:9b:7d:a4:ef:fa:2f:88:86:a1:e4:02:e4:ac:bb:
         0b:a0:fb:a0:06:eb:34:d5:b1:d9:f2:00:2e:bc:ee:91:8f:3b:
         bf:a8:f0:81:db:ed:f6:f0:07:4a:31:b3:d8:9a:68:75:a7:75:
         83:b7:c2:2a:53:ee:bb:d2:85:ad:01:d0:d8:2a:51:4c:fd:25:
         43:0c:bd:b0:34:80:f2:04:98:ec:78:72:57:a3:31:cf:7f:f4:
         4c:35:70:fb:53:c6:fa:9b:a9:7a:3b:96:84:79:3e:a0:3b:de:
         67:0f:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:53 2026 by rpki-client