Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
File:                     QpCYAlfGdws2CulWLaWJPGDa2nc.mft (raw, json)
Hash identifier:          TF6wh16aVUzmqY/Xo/Y4pXIoltcmqE0SVx81PkJaB1g=
Subject key identifier:   B0:CE:0C:B1:41:5E:22:A2:AA:D7:6A:AE:4C:BE:0E:52:3E:37:B8:83
Authority key identifier: 42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77
Certificate issuer:       /CN=A91C3B89/serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
Certificate serial:       09B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
Manifest number:          09B7
Signing time:             Tue 18 Aug 2026 20:14:02 +0000
Manifest this update:     Tue 18 Aug 2026 20:14:01 +0000
Manifest next update:     Tue 25 Aug 2026 20:14:01 +0000
Files and hashes:         1: QpCYAlfGdws2CulWLaWJPGDa2nc.crl (hash: uAoTN9L9j6UZCCrkHIyz2dLZnJzYzxGd8hdnhJt57rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl
                          rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2487 (0x9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3B89, serialNumber=4290980257C6770B360AE9562DA5893C60DADA77
        Validity
            Not Before: Aug 18 20:14:01 2026 GMT
            Not After : Aug 25 20:14:01 2026 GMT
        Subject: CN=6a84bd0a-5f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1e:75:ac:e0:58:e1:c8:70:23:42:59:e3:cc:
                    b6:f1:a8:ba:1f:87:ca:71:6d:45:04:30:24:f6:d8:
                    94:7b:31:9e:59:90:a4:15:fd:35:b7:a1:8a:9f:5c:
                    8f:dc:96:9a:db:5f:53:86:69:6e:c3:84:29:7f:6f:
                    c3:ae:20:f9:d7:61:d3:a5:ac:d9:5a:93:61:e8:77:
                    96:c2:96:3b:53:f4:d8:c0:83:b9:ef:da:c5:a6:b6:
                    80:b1:e7:15:37:ab:51:02:d4:18:cb:ff:27:80:29:
                    18:af:bc:d2:1e:b8:05:9d:f0:4e:21:56:e2:99:9e:
                    60:ef:3e:5f:db:94:a6:3a:8a:68:3f:10:e8:bd:13:
                    11:7d:d3:a3:40:80:bd:a4:27:31:a8:cb:a4:f4:f1:
                    71:5a:0e:ed:ba:52:6b:7e:be:ce:ab:3b:0a:de:1c:
                    96:2f:01:33:50:16:b1:fc:cb:a8:3a:5a:8e:df:c5:
                    a7:00:54:d8:1e:16:60:2a:e4:76:22:67:c1:76:16:
                    ad:c7:ca:ed:de:fa:8b:fc:45:5f:13:14:92:da:49:
                    83:f8:6d:d1:b8:1e:5c:fd:3e:74:01:1d:8c:cd:c6:
                    26:33:6f:de:43:59:43:51:90:12:5e:0b:e9:71:1d:
                    e3:9c:21:01:8f:01:08:ff:45:17:f3:e4:c5:2a:7c:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CE:0C:B1:41:5E:22:A2:AA:D7:6A:AE:4C:BE:0E:52:3E:37:B8:83
            X509v3 Authority Key Identifier:
                keyid:42:90:98:02:57:C6:77:0B:36:0A:E9:56:2D:A5:89:3C:60:DA:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QpCYAlfGdws2CulWLaWJPGDa2nc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B89/D8356BACB07411EA87B60F73C4F9AE02/QpCYAlfGdws2CulWLaWJPGDa2nc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:72:3e:96:e1:c5:af:83:86:5f:13:9b:0d:2c:a5:25:ba:ea:
         53:fe:a6:2b:bc:87:37:d1:78:c7:48:2c:24:d3:a3:31:24:e9:
         57:cf:86:4c:1f:47:c0:76:d1:de:1f:8f:44:db:c5:22:56:a6:
         fc:de:da:30:67:59:63:54:69:35:67:d4:b9:aa:06:1d:d6:0e:
         90:e5:3a:cb:60:a6:03:65:0e:0b:fc:b0:6c:23:66:45:25:2f:
         c2:92:c8:fd:3a:0e:78:de:44:35:ed:fe:f9:b4:dc:cd:9f:68:
         d4:ba:7e:0b:fc:34:3a:8a:6a:cf:78:50:fe:26:49:f7:8b:12:
         55:40:fe:cd:1d:8e:b8:10:f5:0e:ed:0c:32:80:5b:62:4b:70:
         3a:63:f9:28:af:c5:5c:6c:e1:f3:12:d2:10:a3:4a:bf:eb:fc:
         d1:89:46:1d:53:35:0f:84:31:4f:a0:68:01:d5:65:26:15:1b:
         16:ee:d9:fb:dc:9a:46:66:fe:89:ed:3c:d6:cd:69:2b:dd:e2:
         4b:09:74:83:9c:f0:2a:5e:90:94:16:98:fe:83:04:33:b1:31:
         58:a1:db:fb:e8:de:cd:b4:e1:82:6f:25:f6:31:09:ae:45:66:
         16:80:6e:24:bb:ab:1b:11:ac:df:8d:82:ac:8f:13:6c:ad:7b:
         e2:f6:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:39 2026 by rpki-client