Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
File:                     qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft (raw, json)
Hash identifier:          ZCWGs66UYuhF4x7LPJ6wSp011ossqhPbz2NIEnd2N1k=
Subject key identifier:   80:2F:DB:F3:F1:27:E3:98:15:30:3E:ED:60:C1:D8:3E:E0:29:8D:85
Authority key identifier: AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B
Certificate issuer:       /CN=A91E4EF7/serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
Certificate serial:       1BFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
Manifest number:          1BE1
Signing time:             Sun 14 Jun 2026 16:12:30 +0000
Manifest this update:     Sun 14 Jun 2026 16:12:30 +0000
Manifest next update:     Sun 21 Jun 2026 16:12:30 +0000
Files and hashes:         1: qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl (hash: zZT856b2XE3A8YufJwaMviUs8n6l3PFFWm7EVl+egtE=)
                          2: E24736EC9D9011EC89314083C4F9AE02.roa (hash: 7UZYPuwQDAPrdcrwJXsBYa/SwYNkxbesU3WpZSjYsEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Jun 2026 16:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7163 (0x1bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF7, serialNumber=AAB524E595A530E12C13AA211C2EF26B69DD9C9B
        Validity
            Not Before: Jun 14 16:12:30 2026 GMT
            Not After : Jun 21 16:12:30 2026 GMT
        Subject: CN=6a2ed2ee-cbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:0d:e2:8e:fe:02:32:c0:f0:d7:6f:98:fc:
                    f8:2b:9f:2c:36:b4:76:83:84:c6:3c:5b:64:70:aa:
                    c5:4e:d8:f0:06:85:42:24:bf:ca:7d:9c:d8:a4:81:
                    23:ed:e9:ab:b6:22:b7:9b:fe:37:17:d7:cd:44:9c:
                    90:b6:08:b7:7c:14:c2:ee:e2:00:84:66:e9:7e:97:
                    e7:a0:9c:c1:fe:e3:8c:75:37:5d:5a:75:12:80:db:
                    fb:60:80:27:29:71:ee:f7:40:04:eb:97:f0:b8:bc:
                    01:62:d8:65:fd:9b:2c:a2:55:c2:ff:6e:48:e2:3b:
                    6b:37:3d:ab:07:b5:62:09:6e:ab:f6:e6:25:0d:97:
                    77:8f:ee:77:d0:8c:8f:9c:f0:ab:ea:e6:61:67:08:
                    75:e2:c5:92:9d:e8:55:4f:33:4a:40:06:b6:6a:82:
                    66:c7:17:29:fa:fd:f2:9b:14:bd:8d:78:ac:2b:5f:
                    46:ab:dd:f4:2d:87:99:39:5b:76:52:6f:ee:32:65:
                    25:fa:ac:1d:f1:a9:99:14:8a:08:c9:a4:83:0e:e1:
                    3e:8b:3d:ca:ae:23:8e:dc:fb:1d:2c:7d:4a:98:c3:
                    ef:71:2c:e4:79:c0:57:20:3b:31:e9:a0:ee:9f:02:
                    aa:aa:3d:97:1c:d2:67:11:aa:c2:34:b1:6b:49:be:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:DB:F3:F1:27:E3:98:15:30:3E:ED:60:C1:D8:3E:E0:29:8D:85
            X509v3 Authority Key Identifier:
                keyid:AA:B5:24:E5:95:A5:30:E1:2C:13:AA:21:1C:2E:F2:6B:69:DD:9C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF7/C46FD7741B8F11E7AC4C7229C4F9AE02/qrUk5ZWlMOEsE6ohHC7ya2ndnJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:2c:ec:88:9a:50:b9:1b:71:17:7c:da:7d:7e:11:6f:fa:
         18:dd:8a:ea:b0:f3:1d:6e:8b:b3:b3:ec:65:8d:d1:b0:d9:95:
         a0:df:02:e2:44:96:08:68:53:d7:cf:07:26:dc:d8:a7:5e:c1:
         1f:f6:25:5e:db:7c:89:cd:3a:da:e0:01:10:5c:78:25:a9:fe:
         81:5c:ca:58:8e:93:e3:c6:59:d7:96:79:fd:a1:1a:fa:81:1c:
         35:27:e6:d2:5c:bf:e2:bd:5e:e0:94:27:46:2c:8a:c5:ea:57:
         34:ed:16:56:67:da:86:57:59:2f:83:96:c6:a4:40:f6:6c:d5:
         bc:e7:5d:ab:49:1e:e6:be:e1:61:a3:56:b7:c7:4a:da:fd:e3:
         e6:51:3e:f4:36:2f:39:ef:79:d7:3a:42:18:a0:13:e6:3e:9c:
         bd:54:d5:fe:e0:62:80:6c:8e:6c:f7:78:8d:30:c2:1f:ea:67:
         38:ff:5b:05:ac:c1:26:e1:37:52:ee:43:89:8e:d8:e8:84:c3:
         26:bd:03:8d:aa:bc:e7:21:5e:6f:c9:8e:2f:08:36:3b:ac:3b:
         9f:76:15:f9:a8:cf:df:e4:23:9f:e5:93:eb:e9:0c:7f:ec:38:
         cb:39:5c:47:ef:61:c2:73:4b:18:90:3f:bd:32:17:b3:a9:ca:
         0c:e8:7b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 10:09:55 2026 by rpki-client