Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
File:                     QV0e9X3aeKX8lSQFQkhAAozUfZk.mft (raw, json)
Hash identifier:          48jz9xBa8tnaadwcAl/UCgmzyGEtPmchUW1d/eqnet4=
Subject key identifier:   29:7C:4F:7A:F9:86:25:4B:1F:2D:42:BC:42:EF:D0:89:5E:78:67:1D
Authority key identifier: 41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99
Certificate issuer:       /CN=A91501FC/serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
Certificate serial:       03E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
Manifest number:          03DA
Signing time:             Wed 19 Aug 2026 00:54:10 +0000
Manifest this update:     Wed 19 Aug 2026 00:54:09 +0000
Manifest next update:     Wed 26 Aug 2026 00:54:09 +0000
Files and hashes:         1: QV0e9X3aeKX8lSQFQkhAAozUfZk.crl (hash: CRd84KmTOUP+f2u2bGTdjjTmhhf9MsdAR3eONQYAHoM=)
                          2: 09513072DE3B11EC9F25BA5FC4F9AE02.roa (hash: yG7cQXlLeQDmRJWtBQ7FWthoSWhErCv5Ur1ke2twhVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl
                          rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91501FC, serialNumber=415D1EF57DDA78A5FC952405424840028CD47D99
        Validity
            Not Before: Aug 19 00:54:09 2026 GMT
            Not After : Aug 26 00:54:09 2026 GMT
        Subject: CN=6a84feb2-6bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:e3:7c:8a:4a:65:e9:fd:b2:c3:cd:2c:53:
                    ec:3e:df:a2:c5:a7:8a:c5:fa:cf:c5:6e:55:c8:8f:
                    38:13:98:4a:56:b5:c1:c8:18:e5:eb:0f:9d:b9:a9:
                    79:86:ef:d7:e8:ef:5e:d5:8a:01:1f:27:09:c9:01:
                    85:17:5e:96:a0:80:56:f2:18:ce:7e:3b:6c:d1:f0:
                    6b:fd:08:1f:a2:e0:5b:bb:50:2e:b3:77:10:36:b2:
                    98:b8:aa:58:ca:c5:7f:df:f6:0b:08:65:76:cc:03:
                    7f:c9:c9:f8:13:c7:cf:7b:65:0b:9c:e8:4f:0c:e7:
                    75:76:1d:b9:5f:f3:91:7c:d6:28:8c:d0:dc:f0:9a:
                    02:ad:ff:90:8b:ed:c0:d0:72:33:9c:0d:fc:e2:0e:
                    9b:71:ea:15:91:26:e5:7e:20:6a:2c:f4:09:36:fa:
                    6f:e0:13:4b:cd:da:c1:c8:f5:ba:00:0c:d9:03:ef:
                    f2:8a:85:e7:0e:6d:80:7a:67:74:0c:42:95:ef:f9:
                    ea:d7:c5:25:a8:38:24:dd:85:c9:60:f0:8e:9c:44:
                    7b:0a:93:6e:93:46:6b:0a:19:19:20:ff:b0:7d:0c:
                    48:08:c6:d5:e4:6d:85:3c:77:84:9c:40:10:8f:a5:
                    f8:e7:5f:a0:07:e2:e1:77:85:c1:0d:86:4d:2b:45:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:4F:7A:F9:86:25:4B:1F:2D:42:BC:42:EF:D0:89:5E:78:67:1D
            X509v3 Authority Key Identifier:
                keyid:41:5D:1E:F5:7D:DA:78:A5:FC:95:24:05:42:48:40:02:8C:D4:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QV0e9X3aeKX8lSQFQkhAAozUfZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501FC/304A89DCDE3411EC9640563DC4F9AE02/QV0e9X3aeKX8lSQFQkhAAozUfZk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:ed:8e:d2:60:74:c8:0b:b9:d5:e6:08:fb:e0:51:9a:47:
         93:55:17:40:4a:c5:86:d9:1b:1f:ee:cc:79:40:da:91:92:5c:
         b9:43:72:41:c9:3a:1d:65:0f:e6:34:df:6a:d8:78:d8:60:44:
         33:3f:e6:e0:8c:6d:60:28:df:d2:8c:71:4a:fb:52:64:37:e2:
         6e:79:e8:81:97:8c:6a:b3:24:8b:94:e1:c9:69:ac:e9:a9:6d:
         db:c6:a3:b5:4d:ce:a8:06:73:5f:fe:f4:13:1b:62:59:55:08:
         99:37:6f:be:6e:b5:8d:ab:09:05:6b:02:ef:99:cb:73:55:15:
         8d:7c:15:6a:f1:74:17:bf:39:c1:a2:99:3a:5a:b6:74:0f:94:
         de:ce:47:b3:2b:bf:17:23:7c:78:e0:26:3e:73:40:96:ce:a6:
         94:4e:75:d1:5f:a8:4e:e0:33:1e:d8:bc:45:f6:ed:21:6d:05:
         53:ee:45:02:d1:62:d4:ad:a8:43:39:62:6e:03:1f:fb:58:d4:
         3f:cd:1d:4f:b0:e5:80:c9:ca:34:a4:60:27:8f:6b:09:4d:19:
         4b:cc:21:9a:80:7b:6d:1d:8d:08:de:d0:19:c8:6c:f7:42:16:
         d7:51:48:6d:0c:4b:21:7b:fe:37:90:6f:65:a9:2b:e0:75:31:
         29:22:73:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAxRkMxMTAvBgNVBAUTKDQxNUQxRUY1N0REQTc4QTVGQzk1MjQwNTQyNDg0MDAy
OENENDdEOTkwHhcNMjYwODE5MDA1NDA5WhcNMjYwODI2MDA1NDA5WjAYMRYwFAYD
VQQDEw02YTg0ZmViMi02YmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg4fjfIpKZen9ssPNLFPsPt+ixaeKxfrPxW5VyI84E5hKVrXByBjl6w+dual5
hu/X6O9e1YoBHycJyQGFF16WoIBW8hjOfjts0fBr/QgfouBbu1Aus3cQNrKYuKpY
ysV/3/YLCGV2zAN/ycn4E8fPe2ULnOhPDOd1dh25X/ORfNYojNDc8JoCrf+Qi+3A
0HIznA384g6bceoVkSblfiBqLPQJNvpv4BNLzdrByPW6AAzZA+/yioXnDm2Aemd0
DEKV7/nq18UlqDgk3YXJYPCOnER7CpNuk0ZrChkZIP+wfQxICMbV5G2FPHeEnEAQ
j6X451+gB+Lhd4XBDYZNK0W6fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCl8T3r5
hiVLHy1CvELv0IleeGcdMB8GA1UdIwQYMBaAFEFdHvV92nil/JUkBUJIQAKM1H2Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFGQy8zMDRBODlEQ0RF
MzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVLWDhsU1FGUWtoQUFvelVm
WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWMGU5WDNhZUtYOGxTUUZRa2hBQW96VWZaay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDFGQy8zMDRBODlEQ0RFMzQxMUVDOTY0MDU2M0RDNEY5QUUwMi9RVjBlOVgzYWVL
WDhsU1FGUWtoQUFvelVmWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWFrtjtJgdMgLudXmCPvgUZpHk1UXQErFhtkbH+7MeUDakZJcuUNyQck6HWUP
5jTfath42GBEMz/m4IxtYCjf0oxxSvtSZDfibnnogZeMarMki5ThyWms6alt28aj
tU3OqAZzX/70ExtiWVUImTdvvm61jasJBWsC75nLc1UVjXwVavF0F785waKZOlq2
dA+U3s5Hsyu/FyN8eOAmPnNAls6mlE510V+oTuAzHti8RfbtIW0FU+5FAtFi1K2o
QzlibgMf+1jUP80dT7DlgMnKNKRgJ49rCU0ZS8whmoB7bR2NCN7QGchs90IW11FI
bQxLIXv+N5BvZakr4HUxKSJzQg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:02 2026 by rpki-client