Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
File:                     qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft (raw, json)
Hash identifier:          oCGmGJ1j/fZok1QV+m3tKDVSpc5k0EdA9xt3L2J0dZ4=
Subject key identifier:   9F:C1:C2:3D:52:DD:04:C7:F2:A7:E3:40:FC:33:C7:8F:D4:AD:3F:35
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       022E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
Manifest number:          020A
Signing time:             Tue 21 Jul 2026 04:48:47 +0000
Manifest this update:     Tue 21 Jul 2026 04:48:47 +0000
Manifest next update:     Tue 28 Jul 2026 04:48:47 +0000
Files and hashes:         1: qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl (hash: rjNlW3eGbzUvM1zOufXuW4vvHMnhq2dRzgJ/B8tCt8M=)
                          2: 4B3A3F3CC6DD11EFA7A63533C4F9AE02.roa (hash: p6zGTgqZJ7iiiCzsm415AfpPsLOlXyGxbt61Izp1Z6U=)
                          3: C352565AC6E011EF87D90241C4F9AE02.roa (hash: 6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 558 (0x22e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Jul 21 04:48:47 2026 GMT
            Not After : Jul 28 04:48:47 2026 GMT
        Subject: CN=6a5efa2f-8fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:43:6e:0d:84:19:35:1a:02:d5:87:ef:ab:83:
                    7b:ad:01:d3:4a:dd:1b:dd:7c:1f:a7:a7:b7:4b:c3:
                    28:7c:1e:d8:19:4a:3b:5b:2c:36:e9:1b:3a:69:5e:
                    fd:0b:23:a5:93:48:f3:7e:9f:ae:cb:00:2c:6c:77:
                    0a:51:d6:fd:2a:59:60:42:82:42:b1:f7:94:8b:a9:
                    cb:69:66:01:6b:11:49:de:6d:db:d6:81:6b:3a:bf:
                    96:e6:96:f0:18:b2:58:50:e4:b3:9a:23:7f:89:a4:
                    83:fe:2c:24:3e:5b:a1:2e:71:f8:c3:5e:ca:78:61:
                    b6:b7:6d:57:b2:6c:e9:42:7a:a2:87:90:1d:60:54:
                    ac:9f:25:a2:2b:c2:2e:2d:c7:5b:9c:ba:91:2b:e4:
                    cc:ae:bc:d2:9c:51:be:7c:10:fd:e2:d5:e8:27:41:
                    f0:57:75:98:72:91:95:08:08:73:eb:26:35:08:b6:
                    e6:ec:19:22:a0:3a:b5:54:6a:39:80:f6:14:11:2c:
                    ae:de:00:87:7c:86:88:da:07:bc:a2:1c:73:2f:89:
                    b0:73:f4:96:e4:52:84:3f:0c:ce:88:52:0b:d8:64:
                    16:aa:87:89:3b:c3:c4:20:a4:26:a7:a1:88:fc:4a:
                    76:84:85:75:5f:41:5a:bb:cc:c4:ca:fb:10:71:56:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:C2:3D:52:DD:04:C7:F2:A7:E3:40:FC:33:C7:8F:D4:AD:3F:35
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:68:a9:04:88:e6:78:9a:37:c0:f3:b0:02:b3:ec:0d:c2:90:
         11:12:ab:17:5d:68:32:fc:ee:e2:ac:0a:2d:8a:b7:03:45:e4:
         e6:f3:39:b1:e3:d0:61:40:15:9a:91:92:06:02:01:d3:ce:2f:
         9f:f4:8a:37:7c:1b:ff:2a:dc:95:09:78:89:41:8e:43:57:1a:
         12:44:21:9e:36:a4:fc:b0:b4:e9:82:15:e4:d1:c0:2e:44:e3:
         21:5d:bb:b3:d4:90:7a:8d:9f:d9:53:1b:e5:6b:1a:4d:7d:ed:
         8e:e2:4c:8a:d8:a1:f3:12:97:00:e7:2f:8a:22:ba:41:58:3e:
         f1:98:81:c4:fe:b4:f6:f1:ea:fb:0e:2f:96:cb:02:05:59:42:
         ba:d6:2c:5a:d1:53:28:ab:76:16:fe:32:ca:43:fb:48:21:47:
         d0:53:68:c1:45:29:1b:da:76:89:3d:f6:20:a7:a1:84:c4:3a:
         36:d1:f1:6b:bd:a1:07:34:7a:e0:8b:07:a8:b5:c0:e6:79:a0:
         79:f4:b7:8b:54:e6:da:d5:25:70:49:fd:25:b4:d6:c4:73:31:
         bb:58:6b:fd:33:6d:78:d7:ca:6a:a0:21:91:49:95:ff:1b:17:
         cd:7f:d1:89:14:39:5d:a9:a9:2c:cb:9b:2c:97:e4:1c:f3:58:
         34:33:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 01:27:43 2026 by rpki-client