Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
File:                     QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft (raw, json)
Hash identifier:          gBcNO+oM0bMs6sifS7oBnvOiTPd+ddG5pGZ56hkTaSA=
Subject key identifier:   33:48:B6:7B:2F:6C:18:98:EB:4A:0C:77:D1:18:B5:DA:40:6A:84:8A
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Certificate issuer:       /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
Manifest number:          D2
Signing time:             Wed 19 Aug 2026 07:25:34 +0000
Manifest this update:     Wed 19 Aug 2026 07:25:33 +0000
Manifest next update:     Wed 26 Aug 2026 07:25:33 +0000
Files and hashes:         1: QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl (hash: YAS41iucBHtWqpkcL0qBFA+hua9MQZ9IU2aGyG4vxvA=)
                          2: C5B717905EDA11F0A5EAB579C4F9AE02.roa (hash: QMKJuZ7u5H3meG/M2oUJBI1bKAy18Acbebk2aAAz4oI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
                          rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
        Validity
            Not Before: Aug 19 07:25:33 2026 GMT
            Not After : Aug 26 07:25:33 2026 GMT
        Subject: CN=6a855a6e-b87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:07:ff:13:f2:fa:8a:be:e1:95:08:58:7f:
                    4a:fc:04:6e:57:01:6b:ae:b8:17:5b:70:60:ad:0e:
                    3b:bb:8a:09:f2:0f:e2:78:85:a0:1f:2e:0e:a8:1e:
                    5e:1b:2d:c7:59:c4:9d:5c:8c:c1:a6:e0:6f:5e:27:
                    ea:6f:c3:8e:bc:f1:0a:c9:5f:61:a3:c7:5a:39:2a:
                    ce:67:63:7c:2a:40:ba:af:7e:61:6e:77:7d:2a:f1:
                    70:44:32:80:15:52:c1:3d:cd:27:02:6d:ee:9b:f8:
                    0b:8e:12:e5:8a:f0:89:da:90:21:20:ce:87:a9:e4:
                    ca:42:66:2f:f6:68:81:d1:ac:26:91:75:fc:cb:e0:
                    82:61:7f:98:56:01:d7:24:62:31:4f:da:a3:17:80:
                    27:76:26:2c:8b:50:8d:cc:1e:23:08:ea:fc:2b:7f:
                    11:2f:00:64:72:fe:9e:fd:1f:be:b5:a6:11:67:ee:
                    0e:c5:25:f0:95:ae:9d:16:fa:b5:e7:29:4b:5c:7a:
                    45:c8:d8:d1:89:cf:8c:64:a0:5a:f0:35:74:a3:d2:
                    07:88:bb:7d:bb:93:99:d1:d9:e4:f8:f9:16:e1:d1:
                    50:e8:05:0c:28:5f:19:2a:f7:5d:2a:f2:fe:95:94:
                    8e:cc:26:c1:a9:fa:cc:e7:51:78:71:1e:67:9f:d5:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:B6:7B:2F:6C:18:98:EB:4A:0C:77:D1:18:B5:DA:40:6A:84:8A
            X509v3 Authority Key Identifier:
                keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:e7:3a:2b:5a:a4:f3:28:33:c9:f3:4e:94:e2:38:0a:34:
         2a:cd:3e:1d:ef:f1:b8:06:7d:e2:55:8d:82:c1:b7:3b:58:bf:
         ca:cc:57:82:76:02:13:d3:40:10:c3:69:80:37:b5:3d:bd:56:
         31:a8:c1:fc:14:e4:7e:d8:f5:e0:31:19:0a:97:d6:c0:69:f8:
         e0:9e:17:99:0b:5d:58:26:22:6c:ce:32:06:10:e1:dc:fd:3b:
         d0:25:2d:6c:22:26:e7:c4:33:c1:62:97:ab:2f:ac:94:34:43:
         cd:61:2f:e7:49:fe:4a:71:97:15:b8:c4:af:d8:04:16:16:a3:
         b5:3e:8d:19:1b:6f:7e:44:da:a2:a1:5a:31:6e:6e:15:47:4b:
         2e:53:90:3a:0a:0c:7c:5c:01:fa:df:77:fa:72:be:6b:7c:48:
         1c:7f:4f:eb:ca:b8:8b:99:a7:ba:bb:20:1a:c9:e8:36:be:6b:
         f3:1b:81:7e:e7:b9:2d:d2:e6:6a:21:9a:6b:56:8e:14:38:87:
         33:28:ac:0e:54:19:04:cc:13:49:70:8a:d9:32:db:c8:1c:3a:
         aa:6a:e5:f8:d7:6f:4c:fb:04:8c:e9:20:9a:38:7d:4e:0f:fa:
         d4:66:3e:a4:dc:a2:15:0c:77:ee:6a:36:d2:fc:92:45:34:27:
         93:02:af:d7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI1REYxMTAvBgNVBAUTKDQxQjQzNDkxNUE0OTE5RENFRjU3RDY5NzdDNDA0ODBE
RkMzMTEzNEQwHhcNMjYwODE5MDcyNTMzWhcNMjYwODI2MDcyNTMzWjAYMRYwFAYD
VQQDEw02YTg1NWE2ZS1iODdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmJkH/xPy+oq+4ZUIWH9K/ARuVwFrrrgXW3BgrQ47u4oJ8g/ieIWgHy4OqB5e
Gy3HWcSdXIzBpuBvXifqb8OOvPEKyV9ho8daOSrOZ2N8KkC6r35hbnd9KvFwRDKA
FVLBPc0nAm3um/gLjhLlivCJ2pAhIM6HqeTKQmYv9miB0awmkXX8y+CCYX+YVgHX
JGIxT9qjF4AndiYsi1CNzB4jCOr8K38RLwBkcv6e/R++taYRZ+4OxSXwla6dFvq1
5ylLXHpFyNjRic+MZKBa8DV0o9IHiLt9u5OZ0dnk+PkW4dFQ6AUMKF8ZKvddKvL+
lZSOzCbBqfrM51F4cR5nn9VDAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNItnsv
bBiY60oMd9EYtdpAaoSKMB8GA1UdIwQYMBaAFEG0NJFaSRnc71fWl3xASA38MRNN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjVERi9FRjRBRDQ1MjVF
RDUxMUYwOUNGMUQ1MENDNEY5QUUwMi9RYlEwa1ZwSkdkenZWOWFYZkVCSURmd3hF
MDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FiUTBrVnBKR2R6dlY5YVhmRUJJRGZ3eEUwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjVERi9FRjRBRDQ1MjVFRDUxMUYwOUNGMUQ1MENDNEY5QUUwMi9RYlEwa1ZwSkdk
enZWOWFYZkVCSURmd3hFMDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXFvnOitapPMoM8nzTpTiOAo0Ks0+He/xuAZ94lWNgsG3O1i/ysxXgnYCE9NA
EMNpgDe1Pb1WMajB/BTkftj14DEZCpfWwGn44J4XmQtdWCYibM4yBhDh3P070CUt
bCIm58QzwWKXqy+slDRDzWEv50n+SnGXFbjEr9gEFhajtT6NGRtvfkTaoqFaMW5u
FUdLLlOQOgoMfFwB+t93+nK+a3xIHH9P68q4i5mnursgGsnoNr5r8xuBfue5LdLm
aiGaa1aOFDiHMyisDlQZBMwTSXCK2TLbyBw6qmrl+NdvTPsEjOkgmjh9Tg/61GY+
pNyiFQx37mo20vySRTQnkwKv1w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:43:30 2026 by rpki-client