Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
File:                     QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json)
Hash identifier:          +MC/g3BxN183Md4K30L/bhfNSqbQbfBqnVuguQwlMmY=
Subject key identifier:   30:9E:EB:81:54:61:58:D9:8E:E2:93:F7:3F:7F:67:B5:E7:DE:0E:01
Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85
Certificate issuer:       /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
Certificate serial:       0778
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
Manifest number:          0770
Signing time:             Tue 18 Aug 2026 21:57:48 +0000
Manifest this update:     Tue 18 Aug 2026 21:57:47 +0000
Manifest next update:     Tue 25 Aug 2026 21:57:47 +0000
Files and hashes:         1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: 8JWUUbsRxMCGm6PeIVOmWp48Zd0UZbTDkNOfm1lMDzw=)
                          2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: 1Chxn96nNA7oNUELmf6ynN2eqdlPAPSq53GJ8LyaxFM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl
                          rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485
        Validity
            Not Before: Aug 18 21:57:47 2026 GMT
            Not After : Aug 25 21:57:47 2026 GMT
        Subject: CN=6a84d55c-ef56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:2a:80:7c:ab:f0:b5:21:60:11:86:04:ec:
                    80:9d:62:e5:a4:e2:2c:c5:38:45:2d:3e:d4:1a:6c:
                    76:a4:2f:ab:ae:c0:8c:6f:7a:d6:ad:05:66:31:d6:
                    ee:29:83:b4:aa:0d:1e:d6:fa:df:01:56:d0:d0:41:
                    25:29:f9:d7:89:1a:df:cb:58:b9:4c:c2:ef:56:96:
                    7b:fa:91:b1:9a:66:3e:e5:1a:44:ac:6e:66:1b:39:
                    8d:50:56:ed:42:78:7b:00:6d:16:7e:78:cb:5f:b1:
                    69:a3:45:9e:46:d9:5d:91:e4:b5:69:d4:d4:65:53:
                    7a:a1:63:34:42:00:85:f7:f9:e4:44:7f:1d:38:31:
                    92:85:da:82:b8:8e:41:e6:2d:94:4f:e0:be:bc:cf:
                    21:fa:60:d5:8d:41:28:6e:e7:06:ed:5f:50:e7:16:
                    9d:dd:7c:f5:e8:e5:5e:bf:2d:02:3c:97:07:65:c2:
                    34:bf:ba:aa:20:6b:de:9f:3d:44:6c:c5:d0:2e:aa:
                    ea:92:83:31:64:79:22:95:71:ac:91:61:29:66:74:
                    a5:e2:2b:84:3b:39:49:ec:9d:71:af:49:4b:6d:db:
                    02:b8:74:25:63:ee:ed:5b:d5:a2:27:36:5f:3b:7d:
                    11:99:64:aa:42:64:89:29:fd:7e:5a:ac:33:76:9f:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9E:EB:81:54:61:58:D9:8E:E2:93:F7:3F:7F:67:B5:E7:DE:0E:01
            X509v3 Authority Key Identifier:
                keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a2:59:cf:49:88:ff:76:95:2c:3a:9f:82:4c:28:aa:f1:7d:
         2a:53:5f:a2:7a:3a:76:21:1f:c4:4e:f8:7b:a8:58:27:e7:7d:
         6c:44:85:d8:bf:a2:5d:a9:51:78:cf:1a:f2:98:f6:12:5b:df:
         09:a5:41:a5:aa:f1:7f:c9:64:85:b4:da:ed:17:cc:1a:e5:41:
         b9:0e:11:52:b4:54:0c:07:6f:d5:0c:fb:1f:4c:81:1a:15:2b:
         02:25:8e:51:53:b4:c5:45:dd:7c:19:0f:eb:68:01:cc:f5:af:
         b6:fb:30:08:7e:e2:8f:c0:91:d6:2e:ee:c5:9b:8a:88:0b:4c:
         74:3f:ab:dd:89:46:3a:3e:0f:4b:83:9a:97:c3:cf:2f:1c:ff:
         e5:fa:eb:ea:ee:35:00:ea:e1:89:af:77:d4:28:54:53:3e:5d:
         82:4f:55:d2:84:5a:0a:bb:10:33:f3:57:e0:ff:f2:85:c2:3c:
         d5:35:3b:15:ba:b6:65:ed:b3:d2:5b:59:b4:99:32:2b:a1:5a:
         66:2f:81:73:f2:8a:ac:af:2a:0f:23:2d:e7:2e:b0:07:89:fe:
         7f:d1:14:77:3c:c5:e5:92:3e:3c:39:15:f8:d1:0d:0f:3a:c4:
         1f:89:b7:a2:9f:f2:4d:38:ed:6a:6b:ac:68:7f:59:a9:7c:b4:
         6a:04:94:11
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1
MzM3Q0E0ODUwHhcNMjYwODE4MjE1NzQ3WhcNMjYwODI1MjE1NzQ3WjAYMRYwFAYD
VQQDEw02YTg0ZDU1Yy1lZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvM0qgHyr8LUhYBGGBOyAnWLlpOIsxThFLT7UGmx2pC+rrsCMb3rWrQVmMdbu
KYO0qg0e1vrfAVbQ0EElKfnXiRrfy1i5TMLvVpZ7+pGxmmY+5RpErG5mGzmNUFbt
Qnh7AG0WfnjLX7Fpo0WeRtldkeS1adTUZVN6oWM0QgCF9/nkRH8dODGShdqCuI5B
5i2UT+C+vM8h+mDVjUEobucG7V9Q5xad3Xz16OVevy0CPJcHZcI0v7qqIGvenz1E
bMXQLqrqkoMxZHkilXGskWEpZnSl4iuEOzlJ7J1xr0lLbdsCuHQlY+7tW9WiJzZf
O30RmWSqQmSJKf1+Wqwzdp8pkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCe64FU
YVjZjuKT9z9/Z7Xn3g4BMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy
NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE
R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAL6JZz0mI/3aVLDqfgkwoqvF9KlNfono6diEfxE74e6hYJ+d9bESF2L+iXalR
eM8a8pj2ElvfCaVBparxf8lkhbTa7RfMGuVBuQ4RUrRUDAdv1Qz7H0yBGhUrAiWO
UVO0xUXdfBkP62gBzPWvtvswCH7ij8CR1i7uxZuKiAtMdD+r3YlGOj4PS4Oal8PP
Lxz/5frr6u41AOrhia931ChUUz5dgk9V0oRaCrsQM/NX4P/yhcI81TU7Fbq2Ze2z
0ltZtJkyK6FaZi+Bc/KKrK8qDyMt5y6wB4n+f9EUdzzF5ZI+PDkV+NENDzrEH4m3
op/yTTjtamusaH9ZqXy0agSUEQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:30:43 2026 by rpki-client