Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
File:                     qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft (raw, json)
Hash identifier:          XTPUzcZdlcYVYYWbm8h0UT4T6GyM9+HP/+8n4j2O/f0=
Subject key identifier:   AA:D0:E3:2D:3A:81:B8:3C:AA:20:26:9F:29:7C:C3:9B:2C:2A:1F:E3
Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5
Certificate issuer:       /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
Certificate serial:       02B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
Manifest number:          02B1
Signing time:             Thu 23 Jul 2026 02:33:35 +0000
Manifest this update:     Thu 23 Jul 2026 02:33:35 +0000
Manifest next update:     Thu 30 Jul 2026 02:33:35 +0000
Files and hashes:         1: qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl (hash: boWgFBDeQQDpfQv2MpF/7sPQd6FA/YzxFeQ8pKwugUM=)
                          2: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (hash: CcNczHQOW8yB5Q317lvbnzk6vw5R1G1tvlVbiwaOecw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5
        Validity
            Not Before: Jul 23 02:33:35 2026 GMT
            Not After : Jul 30 02:33:35 2026 GMT
        Subject: CN=6a617d7f-0b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:c9:ec:73:9b:ff:e5:56:1b:f3:38:2d:e4:
                    dd:72:86:80:07:77:a8:59:da:e2:15:da:08:4b:6d:
                    c2:d0:b5:e2:51:ba:4f:9a:46:cf:3c:da:88:1c:93:
                    49:0c:a5:95:5b:25:80:39:fa:bf:ad:02:31:9f:a5:
                    0a:8c:b6:1a:d5:c6:b7:a3:06:a6:60:67:0d:fc:b0:
                    f4:6c:da:61:66:af:4c:8e:52:4e:77:bd:49:7a:45:
                    5b:86:4f:88:61:3f:66:cb:f4:98:19:56:42:03:0b:
                    57:87:87:2a:8f:d1:a8:f7:41:f1:1d:0b:60:12:46:
                    e0:61:ae:7a:9e:1c:41:10:10:3f:11:64:30:4c:cf:
                    22:fa:02:1b:0f:35:e3:63:19:f5:e7:cf:21:2e:c1:
                    ea:54:95:b5:3f:b4:96:20:3e:35:0f:db:ec:ad:70:
                    bc:1f:49:fd:f0:ed:de:22:fc:09:21:2c:ed:04:1c:
                    6f:18:f8:d4:a5:48:8f:8c:eb:80:8e:d8:52:1b:3c:
                    a9:3a:f3:9f:75:fc:12:42:01:fa:0e:e9:3a:a2:e5:
                    46:13:08:ca:cc:f5:28:a9:d6:e4:5c:36:d7:96:68:
                    1e:8f:cb:b6:41:d5:41:24:2d:51:d9:82:3c:dd:f5:
                    86:dd:06:2a:28:b7:58:27:c8:c2:05:61:78:95:a8:
                    4a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:E3:2D:3A:81:B8:3C:AA:20:26:9F:29:7C:C3:9B:2C:2A:1F:E3
            X509v3 Authority Key Identifier:
                keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:56:a1:b9:01:e2:58:05:fe:32:f1:b9:d1:a8:12:87:26:
         14:6c:85:0b:90:1b:02:c3:d4:cc:da:d5:cb:05:7a:aa:39:be:
         85:03:58:d9:f5:88:f7:14:f8:0e:56:99:37:72:f8:72:b4:f8:
         ca:8d:b0:48:6d:17:2c:2a:cb:98:50:89:69:d7:81:3e:fb:38:
         03:6f:fb:3a:92:ee:43:13:4d:85:bb:ff:86:17:f9:db:68:14:
         ee:ba:ef:14:2d:9d:0e:e8:0c:62:e2:3f:3d:82:56:f1:4d:99:
         bd:27:05:3b:71:81:3c:6c:4c:71:b0:08:b3:6a:62:98:62:a5:
         fd:17:04:2a:91:c8:69:89:09:29:62:a3:9a:df:b3:df:ba:31:
         d0:0d:6f:62:ad:1d:2c:43:f3:85:7a:5e:c7:10:ff:e1:33:71:
         16:96:a8:bd:4d:24:70:8a:f8:d0:cb:76:f9:d0:89:52:94:32:
         e9:7d:73:02:b0:14:7e:54:92:f8:73:b0:75:4a:a2:84:7f:29:
         6a:97:cc:11:5a:5b:d3:c6:ac:62:7f:95:74:30:7b:80:57:a4:
         31:81:71:1d:76:21:be:cc:d9:c5:b5:91:60:f9:84:46:9f:c0:
         71:48:f5:9c:3b:e4:9b:de:88:46:af:6d:ee:4c:f5:73:bd:25:
         6a:26:90:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0
NUVFOTYzQjUwHhcNMjYwNzIzMDIzMzM1WhcNMjYwNzMwMDIzMzM1WjAYMRYwFAYD
VQQDEw02YTYxN2Q3Zi0wYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ZHJ7HOb/+VWG/M4LeTdcoaAB3eoWdriFdoIS23C0LXiUbpPmkbPPNqIHJNJ
DKWVWyWAOfq/rQIxn6UKjLYa1ca3owamYGcN/LD0bNphZq9MjlJOd71JekVbhk+I
YT9my/SYGVZCAwtXh4cqj9Go90HxHQtgEkbgYa56nhxBEBA/EWQwTM8i+gIbDzXj
Yxn1588hLsHqVJW1P7SWID41D9vsrXC8H0n98O3eIvwJISztBBxvGPjUpUiPjOuA
jthSGzypOvOfdfwSQgH6Duk6ouVGEwjKzPUoqdbkXDbXlmgej8u2QdVBJC1R2YI8
3fWG3QYqKLdYJ8jCBWF4lahK7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrQ4y06
gbg8qiAmnyl8w5ssKh/jMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF
MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTIxNi81Q0Q1RTczMDZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZh
Q3BXNGhVWVJQS2RGN3BZN1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU9ZWobkB4lgF/jLxudGoEocmFGyFC5AbAsPUzNrVywV6qjm+hQNY2fWI9xT4
DlaZN3L4crT4yo2wSG0XLCrLmFCJadeBPvs4A2/7OpLuQxNNhbv/hhf522gU7rrv
FC2dDugMYuI/PYJW8U2ZvScFO3GBPGxMcbAIs2pimGKl/RcEKpHIaYkJKWKjmt+z
37ox0A1vYq0dLEPzhXpexxD/4TNxFpaovU0kcIr40Mt2+dCJUpQy6X1zArAUflSS
+HOwdUqihH8papfMEVpb08asYn+VdDB7gFekMYFxHXYhvszZxbWRYPmERp/AcUj1
nDvkm96IRq9t7kz1c70laiaQIg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:31 2026 by rpki-client