Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
File:                     QJ0BHok_2Mjws-isFGkqp7udAlk.mft (raw, json)
Hash identifier:          CEyfdPd0oV+STfCWz6crMtqQYZBEaDvhJcpmJJmWywQ=
Subject key identifier:   0C:C6:A6:7C:09:69:07:AF:7A:BF:7C:FE:60:7A:FF:4C:DB:B1:3F:BB
Authority key identifier: 40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59
Certificate issuer:       /CN=A91808E1/serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
Certificate serial:       04DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
Manifest number:          04D1
Signing time:             Wed 19 Aug 2026 00:09:21 +0000
Manifest this update:     Wed 19 Aug 2026 00:09:20 +0000
Manifest next update:     Wed 26 Aug 2026 00:09:20 +0000
Files and hashes:         1: QJ0BHok_2Mjws-isFGkqp7udAlk.crl (hash: +HlXR9r6UiQFG1lt22Zt3q+TEUgoWZYLGK9XZm4AzRw=)
                          2: E7FE45667E8311ECA552B67FC4F9AE02.roa (hash: UDGIexCjWZjf9oWBoZsn81ywHvMY4QFQvNjug6FA+Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91808E1, serialNumber=409D011E893FD8C8F0B3E8AC14692AA7BB9D0259
        Validity
            Not Before: Aug 19 00:09:20 2026 GMT
            Not After : Aug 26 00:09:20 2026 GMT
        Subject: CN=6a84f431-d8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:ca:4c:0c:08:06:5a:40:e3:5b:9d:8f:f5:
                    f1:01:07:51:e0:0e:32:15:a2:cd:e8:e8:dd:63:0c:
                    30:f9:f2:48:37:1c:fe:af:66:ac:28:0b:58:a4:9d:
                    af:c2:de:1c:b4:7d:92:68:03:b3:c5:b1:9e:4d:76:
                    07:77:ab:80:74:ea:72:88:00:3f:67:b5:e8:e4:f4:
                    b1:4c:ea:72:5e:02:af:86:4a:cb:03:f8:58:92:1a:
                    3d:98:79:72:b4:88:3e:25:b3:f3:69:e9:e6:ae:52:
                    ec:43:d9:76:77:5e:7d:a5:d2:00:0e:2c:03:b0:52:
                    20:12:2c:45:c4:ca:b3:53:d1:8f:af:df:3c:f1:47:
                    0c:b6:68:76:ac:cb:83:d5:4a:8e:b6:cb:28:02:b3:
                    5f:e8:03:92:58:79:ad:09:20:27:0f:5c:ca:f3:bd:
                    6b:5c:a9:6c:40:fe:dd:d7:49:5e:cb:3e:36:cc:8f:
                    af:a3:d6:46:18:74:e2:9c:53:77:35:e3:18:64:46:
                    7a:09:3e:24:f4:9e:e8:4d:21:98:36:45:80:f0:85:
                    0f:b9:13:35:68:a0:8d:14:91:42:3a:ef:5b:0a:46:
                    ff:30:de:6f:63:8a:09:b2:99:02:88:41:d4:44:8f:
                    7c:97:c3:0f:b3:a6:e5:ae:98:0f:c4:7c:d6:eb:67:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:A6:7C:09:69:07:AF:7A:BF:7C:FE:60:7A:FF:4C:DB:B1:3F:BB
            X509v3 Authority Key Identifier:
                keyid:40:9D:01:1E:89:3F:D8:C8:F0:B3:E8:AC:14:69:2A:A7:BB:9D:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJ0BHok_2Mjws-isFGkqp7udAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91808E1/F90F9E887E8111ECB8873A7FC4F9AE02/QJ0BHok_2Mjws-isFGkqp7udAlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:35:5c:7f:f6:70:c6:eb:d9:71:ee:1f:f3:e4:8c:53:1b:f8:
         2c:51:e9:f8:54:ca:10:15:b3:a8:07:9e:91:16:87:be:12:42:
         fa:c2:e4:d5:9c:02:dc:2c:3b:fc:4c:b1:c1:19:1e:0a:6a:21:
         e5:e4:f4:f7:90:4e:11:ab:f9:47:08:2f:3a:4d:65:f2:fc:8b:
         74:3b:f0:a4:5f:ab:39:5a:30:f8:8b:26:39:93:47:83:fe:c6:
         37:22:6a:6e:76:68:8b:77:6d:60:18:68:0e:8f:5d:5c:a2:0c:
         47:a4:de:81:ae:97:c2:dc:5f:e5:91:85:bf:12:0c:61:f9:99:
         86:b5:ad:82:a8:ed:f2:07:1c:0d:54:69:32:3e:4e:8b:29:8b:
         84:f6:8e:e9:6a:66:fd:3e:fd:c3:81:b4:9d:b7:8c:e1:48:79:
         3f:96:b2:55:e6:19:1a:1c:c9:32:dc:e4:6a:04:0f:4b:dd:88:
         d0:34:73:a9:6c:53:3e:0e:17:89:da:2f:aa:31:b1:29:06:86:
         f9:ad:74:df:e1:bd:3c:81:84:96:b6:d8:18:4d:5e:2b:a9:41:
         5a:6e:83:d6:4a:0f:f6:71:63:0a:85:f5:df:62:0b:61:2d:6e:
         99:33:1d:e4:62:4d:1a:d5:1b:f8:9d:17:d3:31:86:bd:45:2d:
         3e:cb:f7:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA4RTExMTAvBgNVBAUTKDQwOUQwMTFFODkzRkQ4QzhGMEIzRThBQzE0NjkyQUE3
QkI5RDAyNTkwHhcNMjYwODE5MDAwOTIwWhcNMjYwODI2MDAwOTIwWjAYMRYwFAYD
VQQDEw02YTg0ZjQzMS1kOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnQ7KTAwIBlpA41udj/XxAQdR4A4yFaLN6OjdYwww+fJINxz+r2asKAtYpJ2v
wt4ctH2SaAOzxbGeTXYHd6uAdOpyiAA/Z7Xo5PSxTOpyXgKvhkrLA/hYkho9mHly
tIg+JbPzaenmrlLsQ9l2d159pdIADiwDsFIgEixFxMqzU9GPr9888UcMtmh2rMuD
1UqOtssoArNf6AOSWHmtCSAnD1zK871rXKlsQP7d10leyz42zI+vo9ZGGHTinFN3
NeMYZEZ6CT4k9J7oTSGYNkWA8IUPuRM1aKCNFJFCOu9bCkb/MN5vY4oJspkCiEHU
RI98l8MPs6blrpgPxHzW62dzywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAzGpnwJ
aQever98/mB6/0zbsT+7MB8GA1UdIwQYMBaAFECdAR6JP9jI8LPorBRpKqe7nQJZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDhFMS9GOTBGOUU4ODdF
ODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJNandzLWlzRkdrcXA3dWRB
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FKMEJIb2tfMk1qd3MtaXNGR2txcDd1ZEFsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDhFMS9GOTBGOUU4ODdFODExMUVDQjg4NzNBN0ZDNEY5QUUwMi9RSjBCSG9rXzJN
andzLWlzRkdrcXA3dWRBbGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmTVcf/ZwxuvZce4f8+SMUxv4LFHp+FTKEBWzqAeekRaHvhJC+sLk1ZwC3Cw7
/EyxwRkeCmoh5eT095BOEav5RwgvOk1l8vyLdDvwpF+rOVow+IsmOZNHg/7GNyJq
bnZoi3dtYBhoDo9dXKIMR6Tega6Xwtxf5ZGFvxIMYfmZhrWtgqjt8gccDVRpMj5O
iymLhPaO6Wpm/T79w4G0nbeM4Uh5P5ayVeYZGhzJMtzkagQPS92I0DRzqWxTPg4X
idovqjGxKQaG+a103+G9PIGElrbYGE1eK6lBWm6D1koP9nFjCoX132ILYS1umTMd
5GJNGtUb+J0X0zGGvUUtPsv3tQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:02 2026 by rpki-client