Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
File:                     QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft (raw, json)
Hash identifier:          yk0AE1BYRDqX2mYpDO/a1VQH4Udy/WaMa3FiMyzZMHY=
Subject key identifier:   D9:51:FE:90:DF:54:19:A5:89:6E:FD:99:B8:6E:3C:1D:79:B1:43:B5
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
Manifest number:          C1
Signing time:             Thu 23 Jul 2026 08:47:47 +0000
Manifest this update:     Thu 23 Jul 2026 08:47:46 +0000
Manifest next update:     Thu 30 Jul 2026 08:47:46 +0000
Files and hashes:         1: QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl (hash: YWuePyLlxl4UCHDe/bNe4VfESgKzTsxlbFi5Kgy+uIo=)
                          2: 2FD77F7E621511F09070587CC4F9AE02.roa (hash: ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:47:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Jul 23 08:47:46 2026 GMT
            Not After : Jul 30 08:47:46 2026 GMT
        Subject: CN=6a61d533-492f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:a3:1c:86:27:b6:3c:3e:ee:80:77:a3:47:
                    5a:e1:55:8c:d3:c1:31:f8:e5:39:85:3f:77:67:15:
                    93:fd:d8:d7:2a:72:44:fd:8e:de:c0:c5:aa:2a:c0:
                    d7:7a:89:b5:2d:74:92:2d:08:13:4f:e8:f5:5c:60:
                    34:ca:2a:d6:8e:bc:25:c0:ca:69:ab:07:61:46:bf:
                    c4:32:4e:8c:aa:96:95:49:25:f8:4f:15:76:42:38:
                    e7:64:02:b4:56:95:15:f2:1b:dc:c4:97:6a:14:ab:
                    1b:8e:5a:c0:9d:f6:ac:7c:12:e3:d8:b3:39:4e:c4:
                    b2:87:b4:24:75:85:26:97:c1:54:1b:5e:1c:8f:08:
                    e3:66:2a:67:fe:59:5d:04:fd:d2:ff:8f:51:57:4b:
                    79:ca:1f:13:fb:aa:0a:db:34:b2:2a:67:dc:15:0b:
                    77:ef:2f:f8:b4:8a:9f:91:1d:15:69:9f:e0:ce:57:
                    90:13:f8:7f:7b:1d:8c:bb:a9:78:0f:64:ee:1f:40:
                    e3:35:68:6d:82:8b:dc:01:c7:0e:ea:24:79:16:c1:
                    9b:d2:0c:e1:4a:4e:3a:45:c6:8f:31:4c:68:04:6e:
                    bf:5a:61:44:79:fa:74:ce:76:6c:0d:9b:7f:4e:7e:
                    47:d3:fe:8e:f9:ec:8a:3d:28:53:82:23:26:c4:d1:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:51:FE:90:DF:54:19:A5:89:6E:FD:99:B8:6E:3C:1D:79:B1:43:B5
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:84:c2:4b:14:5d:3a:8d:d8:5b:0e:df:f7:1d:c1:f8:64:
         08:fa:62:80:23:ba:d5:bb:8e:46:4f:df:a0:7e:be:98:03:ca:
         3c:fe:68:e3:98:50:3a:c9:43:5b:ce:64:cc:63:b5:22:5e:f5:
         5f:4e:21:19:e3:22:b0:93:55:3f:59:1c:4b:f0:ff:cd:45:39:
         7c:dc:55:71:e9:4f:e3:60:a1:1a:e4:f5:bf:4d:60:00:73:a6:
         0a:4d:f5:8b:f0:b1:fc:81:df:16:b3:20:d1:49:2b:ed:71:55:
         0e:e3:5d:76:ab:50:fa:b9:e6:8c:46:2f:c3:43:5c:f7:fc:5b:
         8c:cf:4b:00:a1:ab:c2:0b:8b:a1:3d:70:07:ff:51:a5:40:8a:
         1d:df:e0:4c:75:a5:7b:71:d4:ef:33:3c:2e:88:97:c5:c4:b0:
         4d:4f:3e:d0:ed:a7:73:1a:d8:ce:99:48:cb:89:30:be:60:11:
         f3:9e:65:3e:20:f2:68:82:d4:af:c6:96:74:32:ea:57:1c:e7:
         c2:86:11:27:e0:e7:38:26:45:54:e8:00:e2:b3:15:d9:b2:96:
         a2:25:95:72:5b:34:6c:12:15:51:01:d0:58:b0:8c:40:6d:22:
         31:6a:e6:eb:d9:29:23:4e:f1:bf:f8:9a:28:69:32:46:c8:51:
         a8:39:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:07:15 2026 by rpki-client