Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
File:                     q-I6igEe0yhhVdpR9a14wbb8yT0.mft (raw, json)
Hash identifier:          GwH74ScqbHBwZzOE69SVT3exBK48UpuNhsK0NpwKei4=
Subject key identifier:   2F:24:04:2B:DB:7B:7F:91:46:0B:AA:D8:B2:C4:81:37:5A:04:AC:5B
Authority key identifier: AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D
Certificate issuer:       /CN=A91DAAAF/serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
Manifest number:          0233
Signing time:             Thu 21 May 2026 02:38:09 +0000
Manifest this update:     Thu 21 May 2026 02:38:09 +0000
Manifest next update:     Thu 28 May 2026 02:38:09 +0000
Files and hashes:         1: q-I6igEe0yhhVdpR9a14wbb8yT0.crl (hash: MUar5J6uCUb7XQPJLwdOV4meV1EtCNOSjeaJ4AY5obE=)
                          2: 34EEA87C040511EEA466E336C4F9AE02.roa (hash: Z6+FwOSORTO5IhxDQLbyy7addHO+Ye/7DWvOrUrjW0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl
                          rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAAAF, serialNumber=ABE23A8A011ED3286155DA51F5AD78C1B6FCC93D
        Validity
            Not Before: May 21 02:38:09 2026 GMT
            Not After : May 28 02:38:09 2026 GMT
        Subject: CN=6a0e7011-1ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:85:50:ea:22:e1:4a:9f:48:3c:2e:08:90:7a:
                    fb:23:56:b1:d4:07:cd:20:8f:45:df:4d:ed:d4:b9:
                    29:71:9e:40:0a:3b:a2:84:e2:e2:f4:e5:f1:db:e7:
                    06:e8:01:7d:b7:77:71:cd:25:ca:33:73:83:1b:51:
                    7f:81:d4:18:11:e8:d4:ab:04:aa:9b:88:b9:a1:19:
                    91:18:84:45:a6:6e:ea:35:56:ab:98:7f:37:60:61:
                    60:85:ac:15:05:b9:f9:53:27:aa:04:6f:64:d5:54:
                    7c:24:68:1c:22:ea:87:79:6d:98:94:20:3c:b2:bb:
                    d8:be:d3:23:07:d2:f5:cf:fd:3c:4f:be:3d:56:eb:
                    9b:2e:18:df:fd:43:87:19:3d:95:34:8c:4c:73:23:
                    26:1c:8f:c7:e2:67:84:8d:28:f3:b3:1a:37:a1:6e:
                    04:ef:14:d2:f6:0f:67:83:59:e0:55:d7:a7:9d:28:
                    43:87:16:21:31:7b:20:e8:27:64:19:5c:55:9b:fc:
                    a2:2f:8c:b4:ba:f6:6e:6c:c1:d2:7a:1c:26:23:a5:
                    02:ff:db:77:5b:08:05:92:58:d7:be:ba:eb:57:ba:
                    9b:e5:75:aa:82:a7:28:df:77:e1:54:e2:fc:5b:d3:
                    07:c1:ee:fb:cd:08:03:36:cc:8c:ab:e3:40:aa:fc:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:24:04:2B:DB:7B:7F:91:46:0B:AA:D8:B2:C4:81:37:5A:04:AC:5B
            X509v3 Authority Key Identifier:
                keyid:AB:E2:3A:8A:01:1E:D3:28:61:55:DA:51:F5:AD:78:C1:B6:FC:C9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q-I6igEe0yhhVdpR9a14wbb8yT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAAAF/56B01DC0F85111EDA86FC820C4F9AE02/q-I6igEe0yhhVdpR9a14wbb8yT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:13:c4:08:ea:8f:59:b4:d4:06:07:2e:f0:73:2e:85:9d:
         eb:49:47:39:aa:37:37:7d:1e:5c:75:44:aa:b1:6f:e8:14:d7:
         79:1b:8f:f6:b3:bc:16:05:9d:ad:ba:56:f8:24:89:26:1b:45:
         4c:e6:bd:1d:42:57:d7:e0:1f:fc:f4:25:89:39:c7:20:40:1a:
         a6:31:07:43:ad:be:88:2d:b1:a5:32:81:e4:a5:2f:7e:b4:73:
         d7:f8:00:89:d5:50:1e:88:e1:be:a8:50:e4:ea:e6:7f:a2:4d:
         4e:78:02:f7:cb:47:bb:59:d2:31:be:74:da:2c:27:02:5a:27:
         2f:75:f7:63:70:fb:5a:aa:d8:49:ba:6e:51:a1:15:5b:83:d5:
         72:36:aa:e0:8b:e3:db:f8:04:f5:25:ad:cb:dc:e2:5f:03:7f:
         78:ae:fc:d8:58:ae:eb:d8:6c:08:3f:ac:8f:48:58:de:dc:de:
         7e:4b:b2:e5:a3:09:70:d6:e9:f9:00:f8:48:f7:ad:a1:f6:0b:
         21:bb:d6:f1:cb:93:ba:68:45:da:fd:33:28:0b:82:ff:ad:8b:
         31:ec:13:5d:b1:30:5b:55:3d:a5:8a:8c:a2:01:c0:08:c0:3e:
         e9:24:c5:f3:25:58:7f:11:c2:1b:78:7e:1a:1a:56:6d:a0:43:
         71:1e:54:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFBQUYxMTAvBgNVBAUTKEFCRTIzQThBMDExRUQzMjg2MTU1REE1MUY1QUQ3OEMx
QjZGQ0M5M0QwHhcNMjYwNTIxMDIzODA5WhcNMjYwNTI4MDIzODA5WjAYMRYwFAYD
VQQDEw02YTBlNzAxMS0xZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIVQ6iLhSp9IPC4IkHr7I1ax1AfNII9F303t1LkpcZ5ACjuihOLi9OXx2+cG
6AF9t3dxzSXKM3ODG1F/gdQYEejUqwSqm4i5oRmRGIRFpm7qNVarmH83YGFghawV
Bbn5UyeqBG9k1VR8JGgcIuqHeW2YlCA8srvYvtMjB9L1z/08T749VuubLhjf/UOH
GT2VNIxMcyMmHI/H4meEjSjzsxo3oW4E7xTS9g9ng1ngVdennShDhxYhMXsg6Cdk
GVxVm/yiL4y0uvZubMHSehwmI6UC/9t3WwgFkljXvrrrV7qb5XWqgqco33fhVOL8
W9MHwe77zQgDNsyMq+NAqvwTMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC8kBCvb
e3+RRguq2LLEgTdaBKxbMB8GA1UdIwQYMBaAFKviOooBHtMoYVXaUfWteMG2/Mk9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUFBRi81NkIwMURDMEY4
NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5aGhWZHBSOWExNHdiYjh5
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EtSTZpZ0VlMHloaFZkcFI5YTE0d2JiOHlUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUFBRi81NkIwMURDMEY4NTExMUVEQTg2RkM4MjBDNEY5QUUwMi9xLUk2aWdFZTB5
aGhWZHBSOWExNHdiYjh5VDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA8kTxAjqj1m01AYHLvBzLoWd60lHOao3N30eXHVEqrFv6BTXeRuP9rO8FgWd
rbpW+CSJJhtFTOa9HUJX1+Af/PQliTnHIEAapjEHQ62+iC2xpTKB5KUvfrRz1/gA
idVQHojhvqhQ5Ormf6JNTngC98tHu1nSMb502iwnAlonL3X3Y3D7WqrYSbpuUaEV
W4PVcjaq4Ivj2/gE9SWty9ziXwN/eK782Fiu69hsCD+sj0hY3tzefkuy5aMJcNbp
+QD4SPetofYLIbvW8cuTumhF2v0zKAuC/62LMewTXbEwW1U9pYqMogHACMA+6STF
8yVYfxHCG3h+GhpWbaBDcR5UqQ==
-----END CERTIFICATE-----
Generated at Thu May 21 11:14:29 2026 by rpki-client