Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
File:                     qleQsPfXYr6TK53GEbfWm5BoWk4.mft (raw, json)
Hash identifier:          0MRY4IgAfnLh9tuwWAlKzpOV3aWqo7DdCtZHufK256o=
Subject key identifier:   0A:DD:3B:EB:B0:97:11:54:33:AD:4B:DB:29:9D:E0:6F:07:FD:22:EB
Authority key identifier: AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E
Certificate issuer:       /CN=A91977F9/serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
Certificate serial:       0323
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
Manifest number:          031C
Signing time:             Wed 19 Aug 2026 01:28:40 +0000
Manifest this update:     Wed 19 Aug 2026 01:28:39 +0000
Manifest next update:     Wed 26 Aug 2026 01:28:39 +0000
Files and hashes:         1: qleQsPfXYr6TK53GEbfWm5BoWk4.crl (hash: KssqCGGqKg6JbgkDv2PjItYKHN6QnzZq90bAZkWb/TA=)
                          2: 728286AE27BF11EDA6A02960C4F9AE02.roa (hash: 7veWVwTDcJIQiqB140/ZwdfOWsgZaB/7p0PlC1ugVfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl
                          rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91977F9, serialNumber=AA5790B0F7D762BE932B9DC611B7D69B90685A4E
        Validity
            Not Before: Aug 19 01:28:39 2026 GMT
            Not After : Aug 26 01:28:39 2026 GMT
        Subject: CN=6a8506c7-e445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:7e:4a:85:18:49:89:8d:f6:d9:dd:dc:e7:
                    0c:66:06:52:a8:03:60:fc:26:3d:54:24:ac:91:b3:
                    5c:e2:cc:46:ee:fe:94:7f:77:c8:ce:f8:f5:a8:1a:
                    cb:d2:38:14:e3:dd:b1:70:fd:fd:63:c5:1e:45:77:
                    d7:5b:12:2e:b9:52:70:05:02:bd:ed:31:bd:f2:df:
                    f1:a8:00:6d:20:49:c7:18:84:5b:29:1e:c8:0d:82:
                    97:71:a5:b8:cc:7d:a1:75:93:71:e5:c6:0e:8b:db:
                    6d:04:a3:ab:3b:dc:c6:7e:97:8a:5d:c6:32:29:d4:
                    c9:d5:a8:5d:98:79:e4:53:6c:e2:fa:1e:04:73:fc:
                    73:b3:ec:23:fa:c8:62:b9:35:e1:89:b2:fb:05:02:
                    8a:39:26:28:5c:be:6c:54:0b:8d:6c:4e:42:db:06:
                    7f:9b:e1:be:b4:fb:b3:04:64:3d:d5:3d:ee:29:5a:
                    f2:57:5d:bc:c9:59:90:14:5c:e6:d1:2e:0f:28:97:
                    c3:c3:c2:be:47:10:8d:00:b9:72:55:6a:6e:3a:51:
                    12:74:1c:45:61:45:77:24:d7:ef:29:f2:6f:fc:de:
                    a2:59:68:9d:c4:95:7f:e8:1e:2f:02:5b:e4:ac:27:
                    c5:fc:bb:10:13:fc:5d:61:8c:d7:79:73:c9:22:ca:
                    35:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:3B:EB:B0:97:11:54:33:AD:4B:DB:29:9D:E0:6F:07:FD:22:EB
            X509v3 Authority Key Identifier:
                keyid:AA:57:90:B0:F7:D7:62:BE:93:2B:9D:C6:11:B7:D6:9B:90:68:5A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qleQsPfXYr6TK53GEbfWm5BoWk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977F9/2AECE66A27BD11EDB5884D5FC4F9AE02/qleQsPfXYr6TK53GEbfWm5BoWk4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:a4:93:2e:c7:6d:e5:ab:2e:9d:9a:64:7e:2d:62:d8:af:
         0c:5f:2d:2a:ab:c3:a1:19:41:0b:16:ac:12:3b:ce:91:1b:c8:
         4f:63:9a:6e:96:6e:61:a4:ed:e1:f6:a0:31:fc:0b:d5:c3:78:
         c5:89:1c:76:33:8e:d2:77:e6:89:29:a7:bd:b1:47:e4:27:c7:
         4b:d1:41:d2:f7:c4:24:90:05:4e:a0:e0:d3:55:00:b2:1c:98:
         1b:96:52:42:56:32:0e:89:8f:6a:6c:95:56:24:18:40:91:98:
         ab:c0:83:19:e0:48:c6:20:33:91:69:f2:2c:77:29:6b:46:41:
         b8:19:f7:71:d0:71:62:d9:a4:1b:92:c7:e9:30:48:94:99:b9:
         c7:b6:65:51:d9:26:5f:d5:9a:c7:f3:bd:a3:97:f4:fa:be:d7:
         80:9d:1c:26:35:ed:49:9b:7f:9e:96:a1:62:d7:5d:e1:45:ac:
         ac:bc:e4:fc:f7:d5:a1:9b:f6:20:36:71:ae:9a:9a:f1:fc:34:
         a3:ab:12:7e:7e:3c:6b:97:7d:dd:65:fb:1c:6e:cf:bc:ee:29:
         44:00:19:f1:13:55:ce:96:6a:66:fa:fd:9c:0d:d2:17:ef:10:
         94:96:3d:b4:51:45:76:de:f5:1c:1d:36:de:07:23:70:1c:81:
         18:1a:65:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:43 2026 by rpki-client