Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft
File:                     qUOt-S08RCBEEEWA1VuTUv3h1ok.mft (raw, json)
Hash identifier:          vy2XHZG2dpKIWhu9OZT4GzMJMDG94nWNTwxdF7wZOos=
Subject key identifier:   1F:16:EA:97:5A:0C:DF:55:13:CF:17:C0:91:69:48:65:2E:43:37:92
Authority key identifier: A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89
Certificate issuer:       /CN=A914C002/serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft
Manifest number:          01EE
Signing time:             Wed 19 Aug 2026 03:55:08 +0000
Manifest this update:     Wed 19 Aug 2026 03:55:07 +0000
Manifest next update:     Wed 26 Aug 2026 03:55:07 +0000
Files and hashes:         1: qUOt-S08RCBEEEWA1VuTUv3h1ok.crl (hash: vbYqZ7ZlYKzqfMoVjvonjR+SJVgWgoWez5or2rKS9Xc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl
                          rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 03:55:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C002, serialNumber=A943ADF92D3C442044104580D55B9352FDE1D689
        Validity
            Not Before: Aug 19 03:55:07 2026 GMT
            Not After : Aug 26 03:55:07 2026 GMT
        Subject: CN=6a85291c-f9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:d7:e3:b7:93:3b:1d:f0:5e:c3:a1:cc:9e:
                    ca:7e:1d:47:4e:c2:57:df:c8:98:7a:d6:dc:a1:3c:
                    7f:63:a6:51:7c:12:8c:81:e3:b2:fb:54:dc:6c:24:
                    39:cf:a7:77:7c:8d:8f:1d:42:84:40:ab:c0:ea:bb:
                    7d:0c:46:d5:6d:45:2d:b3:5f:4a:7d:23:3c:15:04:
                    55:51:95:4d:40:43:3b:77:dd:8d:4a:11:e4:3d:e5:
                    d3:8c:2d:ce:22:a3:cf:75:90:d8:f8:22:0b:20:c8:
                    6e:4b:3b:e7:c6:2b:a4:d8:f1:56:ce:9a:c9:be:c2:
                    2b:d4:02:38:cc:f7:86:b7:a8:20:15:e9:5d:34:e0:
                    46:f1:ea:3f:5e:1a:9f:b1:f7:ac:c3:a9:6b:c3:3e:
                    9c:1a:c6:3e:cb:d5:d7:ba:42:41:83:03:87:0e:4c:
                    33:af:e8:9a:ee:8b:ad:6d:ae:b5:31:65:16:f2:e7:
                    08:08:33:30:6c:3a:d2:43:9f:5e:9f:3d:01:86:89:
                    8e:19:67:4e:62:68:1d:29:db:f5:2b:a6:65:71:e9:
                    dc:f5:b2:ac:c2:78:dc:38:eb:02:e0:45:c8:41:39:
                    a6:9d:21:4f:e3:69:75:be:49:d6:9a:3a:04:66:f6:
                    6f:bf:3d:d1:aa:c6:2c:41:98:1a:8d:2f:b1:56:d3:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:16:EA:97:5A:0C:DF:55:13:CF:17:C0:91:69:48:65:2E:43:37:92
            X509v3 Authority Key Identifier:
                keyid:A9:43:AD:F9:2D:3C:44:20:44:10:45:80:D5:5B:93:52:FD:E1:D6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qUOt-S08RCBEEEWA1VuTUv3h1ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C8FE0808A92511EEAC4BDB57C4F9AE02/qUOt-S08RCBEEEWA1VuTUv3h1ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:e1:f0:d3:e3:75:ef:d7:96:4a:f9:28:74:aa:ee:40:30:
         a2:8d:01:2e:9e:a7:6c:4d:0e:fc:a9:fd:35:c7:78:75:60:04:
         55:af:f4:30:77:17:c1:49:9a:f3:5c:21:c4:e3:64:bc:c8:b7:
         00:50:dc:31:5c:21:fe:b3:90:98:ea:02:4d:3f:f4:50:93:b9:
         78:23:8e:fa:60:97:cd:7c:71:dc:b0:c1:9a:d8:64:89:86:5b:
         d5:b6:bb:99:c9:11:4e:8b:2a:9b:0f:a7:c5:79:a9:c9:7a:a0:
         98:43:56:e2:fc:e5:7b:64:50:5c:4d:5d:6f:67:80:6b:c7:5a:
         da:f0:88:ac:78:9d:24:21:0b:06:3e:21:9b:0b:ce:e3:e1:3f:
         a1:8b:ad:4c:a6:62:b8:1c:36:40:5b:6d:f2:19:44:e2:e4:00:
         54:ac:d2:bf:19:79:f5:0d:3c:5e:4d:51:74:50:c7:10:d8:fe:
         6f:c6:ba:a6:3c:1b:99:6d:0f:16:bd:0c:b3:b0:22:53:7d:5b:
         5d:db:3a:8b:24:98:7d:e6:22:15:eb:23:05:af:0c:23:d2:0c:
         18:08:b0:46:16:57:60:a0:ea:c2:fa:78:ba:40:36:55:d5:7a:
         6b:fd:a5:3b:6d:bd:23:27:4a:89:ab:ed:92:e6:0f:a1:9b:6d:
         10:83:d7:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwMDIxMTAvBgNVBAUTKEE5NDNBREY5MkQzQzQ0MjA0NDEwNDU4MEQ1NUI5MzUy
RkRFMUQ2ODkwHhcNMjYwODE5MDM1NTA3WhcNMjYwODI2MDM1NTA3WjAYMRYwFAYD
VQQDEw02YTg1MjkxYy1mOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5LX47eTOx3wXsOhzJ7Kfh1HTsJX38iYetbcoTx/Y6ZRfBKMgeOy+1TcbCQ5
z6d3fI2PHUKEQKvA6rt9DEbVbUUts19KfSM8FQRVUZVNQEM7d92NShHkPeXTjC3O
IqPPdZDY+CILIMhuSzvnxiuk2PFWzprJvsIr1AI4zPeGt6ggFeldNOBG8eo/Xhqf
sfesw6lrwz6cGsY+y9XXukJBgwOHDkwzr+ia7outba61MWUW8ucICDMwbDrSQ59e
nz0BhomOGWdOYmgdKdv1K6Zlcenc9bKswnjcOOsC4EXIQTmmnSFP42l1vknWmjoE
ZvZvvz3RqsYsQZgajS+xVtMHDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8W6pda
DN9VE88XwJFpSGUuQzeSMB8GA1UdIwQYMBaAFKlDrfktPEQgRBBFgNVbk1L94daJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DOEZFMDgwOEE5
MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJDQkVFRVdBMVZ1VFV2M2gx
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FVT3QtUzA4UkNCRUVFV0ExVnVUVXYzaDFvay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzAwMi9DOEZFMDgwOEE5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9xVU90LVMwOFJD
QkVFRVdBMVZ1VFV2M2gxb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp/bh8NPjde/Xlkr5KHSq7kAwoo0BLp6nbE0O/Kn9Ncd4dWAEVa/0MHcXwUma
81whxONkvMi3AFDcMVwh/rOQmOoCTT/0UJO5eCOO+mCXzXxx3LDBmthkiYZb1ba7
mckRTosqmw+nxXmpyXqgmENW4vzle2RQXE1db2eAa8da2vCIrHidJCELBj4hmwvO
4+E/oYutTKZiuBw2QFtt8hlE4uQAVKzSvxl59Q08Xk1RdFDHENj+b8a6pjwbmW0P
Fr0Ms7AiU31bXds6iySYfeYiFesjBa8MI9IMGAiwRhZXYKDqwvp4ukA2VdV6a/2l
O229IydKiavtkuYPoZttEIPX1w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:34 2026 by rpki-client