Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
File:                     Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json)
Hash identifier:          u/Ac5XbtFJaao+91gYxQpKMQg9LW6PJ5/SMZvCbICG8=
Subject key identifier:   AD:4D:78:22:DE:65:E6:7F:9B:4E:59:0E:9A:0D:A9:24:3D:81:2B:FE
Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71
Certificate issuer:       /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
Certificate serial:       1113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
Manifest number:          10EF
Signing time:             Mon 20 Jul 2026 17:28:13 +0000
Manifest this update:     Mon 20 Jul 2026 17:28:13 +0000
Manifest next update:     Mon 27 Jul 2026 17:28:13 +0000
Files and hashes:         1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: vVSet8DkIOPB7r2n1QHPZEP5BVgvaudBQ0XlQFNq4Xg=)
                          2: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=)
                          3: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=)
                          4: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=)
                          5: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl
                          rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 17:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4371 (0x1113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71
        Validity
            Not Before: Jul 20 17:28:13 2026 GMT
            Not After : Jul 27 17:28:13 2026 GMT
        Subject: CN=6a5e5aad-f3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:41:80:82:a0:a3:d1:25:4b:66:1d:7d:f7:
                    d3:bc:1e:f0:7c:7c:0a:2e:d8:f0:a3:68:c0:29:46:
                    1f:3d:ed:c1:3a:b7:8c:cb:e0:34:13:6a:0e:1e:05:
                    38:5d:b2:af:12:75:c3:3e:f1:15:64:78:7f:48:ee:
                    4e:d3:5e:09:cc:11:d6:19:fb:40:c6:58:d8:27:7e:
                    a5:e2:b8:a0:6c:48:bc:9a:c8:86:5b:d9:51:fb:15:
                    59:36:62:2b:a4:21:f6:b0:f9:b9:2b:34:98:18:27:
                    e2:34:73:b0:a1:42:5a:73:eb:8b:6b:83:08:bc:c6:
                    82:54:40:e0:62:c1:75:fc:ee:3d:09:8c:cf:af:b2:
                    6b:0d:b0:82:6a:52:cd:d1:13:da:2a:62:3a:00:f8:
                    7f:d3:0d:66:6b:4d:06:bb:e4:c2:c2:b4:d3:3d:94:
                    bc:b8:c7:5f:02:2c:2e:76:18:bf:6c:23:38:4b:89:
                    23:07:98:e9:82:82:47:25:22:7a:df:a8:4c:f1:02:
                    4a:a4:b9:5e:c3:2d:95:f7:81:b6:4c:52:79:b9:d2:
                    a1:02:b8:95:a6:e4:f0:ae:b0:c2:f8:7a:0f:b4:43:
                    29:36:6e:e0:64:93:7d:d9:f2:0e:22:14:f4:66:40:
                    ab:49:47:a6:31:e2:e1:e3:d7:49:56:ab:f4:f2:e3:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4D:78:22:DE:65:E6:7F:9B:4E:59:0E:9A:0D:A9:24:3D:81:2B:FE
            X509v3 Authority Key Identifier:
                keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f0:6a:41:82:1d:7d:31:7b:65:e6:62:5d:7c:a3:d3:83:cc:
         08:fe:b9:36:4d:64:45:0b:a6:92:23:dc:11:c0:3b:06:0e:e0:
         40:92:75:74:c3:25:7b:62:9f:e7:33:f7:e8:75:48:71:20:06:
         f2:91:93:03:a3:31:04:38:ac:12:d6:bc:e0:de:a1:f0:45:01:
         d8:f8:7d:d0:bd:bb:44:30:5e:51:8f:83:73:62:6b:9f:b9:75:
         b9:0b:79:bb:31:62:ca:48:63:37:76:32:84:33:8d:37:d9:1a:
         74:4f:0b:9d:4c:2e:79:9a:9b:9a:72:fa:1a:c6:e5:13:8d:b6:
         d5:9c:42:0d:8b:bd:82:d7:d0:b8:fb:12:c3:2a:69:01:17:dd:
         5f:60:7f:12:27:3f:ee:0d:df:e3:b6:a5:a6:82:50:26:44:aa:
         c2:fa:fd:0e:86:a3:71:0c:75:8f:04:d4:59:47:25:4f:28:f4:
         c0:5d:93:49:ac:39:69:d4:3c:38:f8:a7:a1:52:35:b4:7b:0e:
         6d:e2:36:c7:d7:1a:31:55:76:f7:3a:4b:81:0c:a4:c0:ca:47:
         f2:bd:8e:60:2a:e4:d6:c0:57:90:58:27:c6:da:bf:47:c3:8c:
         0a:14:88:9d:6d:2a:22:dc:39:19:e6:df:0a:67:17:8e:a7:70:
         ac:b5:39:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:49 2026 by rpki-client