Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
File:                     QBS8tK-bGBlk17ekDRv51vieCP8.mft (raw, json)
Hash identifier:          7GaEcEsYAO51P3TT8E+kbyGS+beZgmUm1pCTbR+H+lw=
Subject key identifier:   94:03:19:56:75:B2:5A:D7:3A:4F:6E:C8:F4:91:B3:26:A6:83:83:A7
Authority key identifier: 40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF
Certificate issuer:       /CN=A91323E4/serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
Certificate serial:       08C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
Manifest number:          08B8
Signing time:             Sat 22 Aug 2026 20:21:37 +0000
Manifest this update:     Sat 22 Aug 2026 20:21:36 +0000
Manifest next update:     Sat 29 Aug 2026 20:21:36 +0000
Files and hashes:         1: QBS8tK-bGBlk17ekDRv51vieCP8.crl (hash: QpbRgh93ZOdkmAy7huPH/lPV+4Y7uL3I3tlla2OkVrY=)
                          2: 6944587246B311F090CDB927C4F9AE02.roa (hash: VJ0PaimdIk1enlfYWOaptRsWi7j1kdYlaW2W2nKmkrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl
                          rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91323E4, serialNumber=4014BCB4AF9B181964D7B7A40D1BF9D6F89E08FF
        Validity
            Not Before: Aug 22 20:21:36 2026 GMT
            Not After : Aug 29 20:21:36 2026 GMT
        Subject: CN=6a8a04d0-0174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:ee:ad:c0:5c:00:ce:60:ad:0a:ea:df:c8:
                    e3:94:ef:e2:b7:1e:2b:cf:93:57:f9:a0:49:7f:bf:
                    8f:2d:0a:19:f5:56:fe:e7:92:ba:ff:4c:7b:c5:ea:
                    c8:49:22:db:50:29:a4:40:a4:57:91:a2:39:6c:54:
                    15:2c:52:f4:d5:dc:a9:ed:b9:01:28:6e:de:3c:a1:
                    d0:de:3e:f7:2d:f9:a3:4c:6a:81:5c:cf:4f:be:fb:
                    58:88:03:ca:9b:16:dd:19:9d:c0:91:9a:62:ea:9d:
                    e2:0f:34:d9:56:59:87:e6:ed:0e:83:af:c6:57:9e:
                    ed:f3:eb:36:c5:76:42:80:d9:d5:d3:24:b3:a9:77:
                    f6:44:22:cd:75:94:66:9e:c9:de:6c:57:1e:8d:3a:
                    98:01:83:69:4b:6f:a1:bc:57:06:88:ee:7e:d4:e1:
                    d0:0d:fd:2c:2b:3c:da:46:b5:f2:f7:3e:29:1c:5a:
                    b1:f3:48:80:bb:32:e5:45:4b:07:70:78:92:78:7b:
                    89:08:ff:8b:d1:56:23:ab:8c:d2:e1:e2:06:6e:cb:
                    ad:6c:77:07:82:1f:29:43:ca:8b:3f:f3:36:46:cf:
                    22:75:1d:4d:3f:79:04:f9:4b:7f:a1:85:4f:fa:79:
                    7e:ff:83:1a:87:17:73:11:c6:83:63:60:11:11:79:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:03:19:56:75:B2:5A:D7:3A:4F:6E:C8:F4:91:B3:26:A6:83:83:A7
            X509v3 Authority Key Identifier:
                keyid:40:14:BC:B4:AF:9B:18:19:64:D7:B7:A4:0D:1B:F9:D6:F8:9E:08:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBS8tK-bGBlk17ekDRv51vieCP8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91323E4/190B0D06F26211EAA522345AC4F9AE02/QBS8tK-bGBlk17ekDRv51vieCP8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:52:92:68:71:39:76:43:fa:92:67:a6:d4:70:77:50:4f:5c:
         6b:ad:6c:ec:83:e7:85:ba:b0:dd:28:7a:bd:12:0e:dd:ea:2a:
         fe:78:20:f8:23:a7:89:1f:2a:e2:e9:aa:97:34:8a:05:f0:0b:
         f4:84:13:e0:ee:3f:a6:e0:47:29:0f:b0:d5:f7:de:08:30:1c:
         bf:bb:6d:9d:ef:ec:3d:e2:16:25:ff:d7:86:5e:9c:5a:f1:36:
         24:56:fd:c4:cb:d8:69:67:6f:7b:cf:91:53:74:f6:3a:ad:de:
         c5:d0:a1:37:d7:98:ae:22:8f:e1:d1:e1:3b:42:a6:fd:59:11:
         8e:fa:1d:c8:8c:14:81:72:5c:2e:d5:d9:b9:c3:ac:a8:70:66:
         fc:96:26:97:68:65:c9:e2:0a:71:4a:06:bc:35:d4:27:ab:0f:
         ec:65:41:83:6b:0f:2b:6a:b3:6b:21:5a:c7:44:04:1b:a1:6e:
         ad:03:5e:99:95:fc:4b:fc:fa:a5:74:04:b3:fe:2e:d0:23:73:
         e0:69:28:dc:2b:25:5c:9f:6e:ec:fb:9e:75:3d:86:dc:d5:a2:
         d7:2c:a9:e9:5b:7e:d6:7b:cb:2b:73:ed:f1:c3:e5:ba:be:77:
         44:e9:55:13:d9:a8:78:00:13:96:33:08:e1:5f:18:dc:cf:15:
         cb:3a:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:19:41 2026 by rpki-client