Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
File:                     QRfXbD7AS2IRM0hQpc1uowVTUFw.mft (raw, json)
Hash identifier:          VkYBWmsu1div2h3XegE3TXt2Uj0DqLXc3ByyUX6hm8c=
Subject key identifier:   C1:AF:25:D9:22:6A:DE:B5:DB:EA:63:08:CF:02:CC:CD:F7:69:4F:E4
Authority key identifier: 41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C
Certificate issuer:       /CN=A91ED6B5/serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
Certificate serial:       0522
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
Manifest number:          051B
Signing time:             Tue 21 Jul 2026 00:25:16 +0000
Manifest this update:     Tue 21 Jul 2026 00:25:16 +0000
Manifest next update:     Tue 28 Jul 2026 00:25:16 +0000
Files and hashes:         1: QRfXbD7AS2IRM0hQpc1uowVTUFw.crl (hash: Q6cVRgxKQwXqVw0Ve4y9nEH2gnqMo9h4bN3kCQz1ewc=)
                          2: 06A899FECCF311EC86719729C4F9AE02.roa (hash: F+I43DaEg4RPjKbDgo7LbT/oq9DuBWqE4SqCTrHW1b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl
                          rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED6B5, serialNumber=4117D76C3EC04B6211334850A5CD6EA30553505C
        Validity
            Not Before: Jul 21 00:25:16 2026 GMT
            Not After : Jul 28 00:25:16 2026 GMT
        Subject: CN=6a5ebc6c-077e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:cf:07:4e:cb:c6:c7:1a:d8:04:ea:5e:75:
                    f6:8a:94:c5:82:18:70:8d:ce:b2:ea:7f:91:83:68:
                    8e:83:fc:c2:f0:c0:bf:6a:91:74:74:9e:24:71:d7:
                    00:0c:1f:f7:6b:3e:ec:e3:c4:12:50:f3:fc:fc:b5:
                    83:53:8d:b9:47:ef:ba:52:b1:3c:da:5b:45:ff:aa:
                    c3:94:77:4c:1f:af:be:48:d0:d5:0d:bb:3b:66:3a:
                    e5:f0:ec:cf:3c:84:9a:80:bb:a1:70:f7:ae:12:87:
                    a3:43:0a:25:ff:66:4e:22:ea:23:54:57:43:6a:c5:
                    b3:33:87:c3:f4:94:c6:70:2a:8a:a6:cc:71:15:66:
                    00:49:db:44:b9:f5:fe:d1:9e:7f:63:37:71:79:a0:
                    19:6b:f5:b5:37:e4:cc:61:ce:d8:d4:b0:d9:cd:3c:
                    1a:73:d0:b2:33:ab:c4:f4:0d:0a:c4:21:38:81:52:
                    93:9f:64:d2:55:56:96:fd:bc:30:ce:0c:f6:d4:f8:
                    fd:20:aa:c7:aa:a8:97:44:e1:95:05:cd:87:f8:f4:
                    ea:d7:05:98:da:f0:63:13:81:9e:e1:c6:bd:fc:45:
                    e4:63:31:fd:06:e1:91:6a:7a:5b:01:31:20:08:cb:
                    7d:c4:67:5d:28:13:a9:8d:39:c8:fc:71:80:de:66:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AF:25:D9:22:6A:DE:B5:DB:EA:63:08:CF:02:CC:CD:F7:69:4F:E4
            X509v3 Authority Key Identifier:
                keyid:41:17:D7:6C:3E:C0:4B:62:11:33:48:50:A5:CD:6E:A3:05:53:50:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QRfXbD7AS2IRM0hQpc1uowVTUFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED6B5/EF469BFC594411ECAF575A6CC4F9AE02/QRfXbD7AS2IRM0hQpc1uowVTUFw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cb:60:bf:09:c1:fe:5a:e7:9f:ae:d9:f0:dc:71:0c:a1:79:
         c1:00:40:28:bb:04:b1:23:62:d3:59:61:ff:a3:cd:9e:60:f4:
         77:ec:04:d1:06:7b:59:06:03:3a:de:6c:f0:f5:51:74:c4:c2:
         f8:74:ea:ed:9f:96:df:db:19:3e:cf:41:d3:74:34:ef:a6:99:
         64:1c:36:4f:ed:52:da:77:a2:07:53:dc:cc:ae:d5:7c:e2:92:
         58:c0:53:2e:a5:3d:04:4a:b3:81:af:10:24:48:e9:4e:7b:d4:
         97:5c:a0:f3:b6:71:a4:40:6b:90:ba:14:79:7e:7a:ae:14:49:
         a6:5d:4e:99:f3:50:60:6a:7c:2a:eb:c8:56:5e:93:37:ea:88:
         42:ef:1f:16:aa:44:fd:b0:34:00:60:36:88:9c:cf:ef:69:2a:
         c8:6a:b5:49:a3:92:6b:20:61:d5:c9:69:99:b0:4a:c3:42:eb:
         b7:7b:21:4c:09:7e:92:d4:fc:e0:52:c0:e7:c8:b1:1b:ee:d2:
         54:b1:d0:10:c2:65:8d:96:59:7e:12:ee:77:99:ce:44:1c:aa:
         3d:99:3f:b5:40:5d:c0:c6:f2:ec:68:af:0f:2c:f1:46:cf:84:
         52:34:bd:bf:51:b0:75:96:51:4c:90:7f:35:1c:bf:66:27:df:
         c3:32:24:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ2QjUxMTAvBgNVBAUTKDQxMTdENzZDM0VDMDRCNjIxMTMzNDg1MEE1Q0Q2RUEz
MDU1MzUwNUMwHhcNMjYwNzIxMDAyNTE2WhcNMjYwNzI4MDAyNTE2WjAYMRYwFAYD
VQQDEw02YTVlYmM2Yy0wNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoj/PB07Lxsca2ATqXnX2ipTFghhwjc6y6n+Rg2iOg/zC8MC/apF0dJ4kcdcA
DB/3az7s48QSUPP8/LWDU425R++6UrE82ltF/6rDlHdMH6++SNDVDbs7Zjrl8OzP
PISagLuhcPeuEoejQwol/2ZOIuojVFdDasWzM4fD9JTGcCqKpsxxFWYASdtEufX+
0Z5/YzdxeaAZa/W1N+TMYc7Y1LDZzTwac9CyM6vE9A0KxCE4gVKTn2TSVVaW/bww
zgz21Pj9IKrHqqiXROGVBc2H+PTq1wWY2vBjE4Ge4ca9/EXkYzH9BuGRanpbATEg
CMt9xGddKBOpjTnI/HGA3mbZ1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGvJdki
at612+pjCM8CzM33aU/kMB8GA1UdIwQYMBaAFEEX12w+wEtiETNIUKXNbqMFU1Bc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDZCNS9FRjQ2OUJGQzU5
NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMySVJNMGhRcGMxdW93VlRV
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FSZlhiRDdBUzJJUk0waFFwYzF1b3dWVFVGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDZCNS9FRjQ2OUJGQzU5NDQxMUVDQUY1NzVBNkNDNEY5QUUwMi9RUmZYYkQ3QVMy
SVJNMGhRcGMxdW93VlRVRncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf8tgvwnB/lrnn67Z8NxxDKF5wQBAKLsEsSNi01lh/6PNnmD0d+wE0QZ7WQYD
Ot5s8PVRdMTC+HTq7Z+W39sZPs9B03Q076aZZBw2T+1S2neiB1PczK7VfOKSWMBT
LqU9BEqzga8QJEjpTnvUl1yg87ZxpEBrkLoUeX56rhRJpl1OmfNQYGp8KuvIVl6T
N+qIQu8fFqpE/bA0AGA2iJzP72kqyGq1SaOSayBh1clpmbBKw0Lrt3shTAl+ktT8
4FLA58ixG+7SVLHQEMJljZZZfhLud5nORByqPZk/tUBdwMby7GivDyzxRs+EUjS9
v1GwdZZRTJB/NRy/ZiffwzIkfw==
-----END CERTIFICATE-----
Generated at Wed Jul 22 04:38:05 2026 by rpki-client