Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
File:                     QL0p_yZodz0y7qDscGYCir7gy54.mft (raw, json)
Hash identifier:          3elbwzpd1HF7GzFZtISKj8002YZeNCP3yp6DN603Qhs=
Subject key identifier:   7B:5D:BD:00:47:35:E5:9C:4B:C9:D2:0A:57:94:00:F6:5A:D8:15:A4
Authority key identifier: 40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E
Certificate issuer:       /CN=A91840A8/serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
Certificate serial:       06CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
Manifest number:          06CE
Signing time:             Sun 31 May 2026 22:56:14 +0000
Manifest this update:     Sun 31 May 2026 22:56:14 +0000
Manifest next update:     Sun 07 Jun 2026 22:56:14 +0000
Files and hashes:         1: QL0p_yZodz0y7qDscGYCir7gy54.crl (hash: sQ8/H+yf7Z3alGroshIbOWYG2eiTgMy87QxLxs90ov0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 22:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=40BD29FF2668773D32EEA0EC7066028ABEE0CB9E
        Validity
            Not Before: May 31 22:56:14 2026 GMT
            Not After : Jun  7 22:56:14 2026 GMT
        Subject: CN=6a1cbc8e-37a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5a:33:a5:e3:5d:ed:6e:81:4a:78:f9:fc:d1:
                    19:35:6b:b3:65:12:a7:c6:7f:23:89:6a:cb:05:9a:
                    c7:76:c3:30:23:c1:d3:b5:e0:05:f3:88:6b:b4:21:
                    00:b3:a9:fe:cd:80:7b:2f:8e:01:cb:0e:28:ae:ec:
                    21:e6:09:eb:c7:09:02:dc:5f:59:13:7b:66:85:37:
                    11:a5:9e:35:d1:79:05:63:09:29:74:2e:c3:80:d5:
                    fe:34:ee:d2:32:bd:e7:10:16:c8:79:a6:18:87:4d:
                    40:1b:99:4a:76:0a:e9:6c:b2:37:9d:c5:8a:1c:0b:
                    c3:9d:71:c0:04:9d:10:1d:d4:88:02:a1:0c:09:92:
                    a9:ac:2d:16:90:d5:4f:50:ba:59:47:21:b6:45:4e:
                    68:0a:12:8d:cc:fd:4c:0f:d8:c9:0a:be:71:fb:a3:
                    5b:07:3a:c5:d6:00:d9:32:c7:1a:92:95:08:5a:21:
                    4d:24:4b:06:89:5f:ed:db:42:13:fc:5e:78:6c:9f:
                    69:c6:f7:4f:d9:15:00:76:36:64:2d:4f:f8:49:04:
                    a8:6b:18:f3:e3:55:e5:5a:73:56:78:ed:f5:8d:62:
                    b6:fd:16:7c:76:6b:f7:32:d8:10:94:27:16:0b:b0:
                    f4:bf:d5:de:b4:c9:b9:64:ee:a7:53:ca:74:40:42:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5D:BD:00:47:35:E5:9C:4B:C9:D2:0A:57:94:00:F6:5A:D8:15:A4
            X509v3 Authority Key Identifier:
                keyid:40:BD:29:FF:26:68:77:3D:32:EE:A0:EC:70:66:02:8A:BE:E0:CB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QL0p_yZodz0y7qDscGYCir7gy54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/67907734A19611EB8200CF09C4F9AE02/QL0p_yZodz0y7qDscGYCir7gy54.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:08:b2:05:20:82:1f:c7:13:f7:ca:6c:e8:7d:ff:fd:09:
         d7:ca:fc:94:b3:7e:7f:4b:eb:a5:a7:73:dd:b9:57:d8:76:d9:
         7a:2b:26:32:37:5b:8e:4b:1e:73:f6:40:f6:78:f9:74:dd:96:
         76:6a:13:a2:a9:78:b4:ac:62:1f:d1:bc:b9:44:78:30:35:78:
         c8:9c:ae:84:75:44:77:5e:50:4d:e1:7e:e0:41:aa:a7:60:8c:
         2b:2d:62:5d:6e:fa:bc:10:18:83:c3:87:12:90:42:94:3f:31:
         a1:6c:98:bb:21:da:41:2b:8b:11:ca:23:0b:5f:45:1f:64:b1:
         00:b3:21:ec:20:39:1a:75:2d:9e:3b:90:ef:46:7c:67:78:84:
         83:14:d4:96:3e:50:0c:7e:c3:26:7c:03:32:ad:74:00:2a:60:
         c9:44:38:4e:52:20:f6:cd:f3:a8:de:43:00:44:e6:86:7b:5d:
         8d:7e:e5:54:e5:b6:8e:84:e0:bf:1c:4c:f4:92:ed:43:63:36:
         9e:09:76:c8:d9:42:48:bd:6d:d6:5e:2a:2b:79:81:09:4a:12:
         9a:16:75:29:58:a8:fc:b5:f3:3a:95:78:5b:ce:cb:5d:09:cc:
         ba:4f:44:3a:95:a9:5b:8a:13:a7:dd:9f:d2:94:f5:4a:4b:c4:
         6c:1e:e9:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKDQwQkQyOUZGMjY2ODc3M0QzMkVFQTBFQzcwNjYwMjhB
QkVFMENCOUUwHhcNMjYwNTMxMjI1NjE0WhcNMjYwNjA3MjI1NjE0WjAYMRYwFAYD
VQQDEw02YTFjYmM4ZS0zN2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lozpeNd7W6BSnj5/NEZNWuzZRKnxn8jiWrLBZrHdsMwI8HTteAF84hrtCEA
s6n+zYB7L44Byw4oruwh5gnrxwkC3F9ZE3tmhTcRpZ410XkFYwkpdC7DgNX+NO7S
Mr3nEBbIeaYYh01AG5lKdgrpbLI3ncWKHAvDnXHABJ0QHdSIAqEMCZKprC0WkNVP
ULpZRyG2RU5oChKNzP1MD9jJCr5x+6NbBzrF1gDZMscakpUIWiFNJEsGiV/t20IT
/F54bJ9pxvdP2RUAdjZkLU/4SQSoaxjz41XlWnNWeO31jWK2/RZ8dmv3MtgQlCcW
C7D0v9XetMm5ZO6nU8p0QEL/EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtdvQBH
NeWcS8nSCleUAPZa2BWkMB8GA1UdIwQYMBaAFEC9Kf8maHc9Mu6g7HBmAoq+4Mue
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC82NzkwNzczNEEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6MHk3cURzY0dZQ2lyN2d5
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FMMHBfeVpvZHoweTdxRHNjR1lDaXI3Z3k1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC82NzkwNzczNEExOTYxMUVCODIwMENGMDlDNEY5QUUwMi9RTDBwX3lab2R6
MHk3cURzY0dZQ2lyN2d5NTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFeEIsgUggh/HE/fKbOh9//0J18r8lLN+f0vrpadz3blX2HbZeismMjdbjkse
c/ZA9nj5dN2WdmoToql4tKxiH9G8uUR4MDV4yJyuhHVEd15QTeF+4EGqp2CMKy1i
XW76vBAYg8OHEpBClD8xoWyYuyHaQSuLEcojC19FH2SxALMh7CA5GnUtnjuQ70Z8
Z3iEgxTUlj5QDH7DJnwDMq10ACpgyUQ4TlIg9s3zqN5DAETmhntdjX7lVOW2joTg
vxxM9JLtQ2M2ngl2yNlCSL1t1l4qK3mBCUoSmhZ1KVio/LXzOpV4W87LXQnMuk9E
OpWpW4oTp92f0pT1SkvEbB7pCg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:09 2026 by rpki-client