Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
File:                     Qi87B4JkeC6YeHPYanROKGHypQM.mft (raw, json)
Hash identifier:          RO/2cA9mKi9SHyez8RbamTeFsncc+UqAFeItYPf4oAw=
Subject key identifier:   F5:83:36:3B:64:CE:5A:D6:E0:2A:AD:DD:49:F9:E8:E2:CE:3A:40:47
Authority key identifier: 42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03
Certificate issuer:       /CN=A91E711B/serialNumber=422F3B078264782E987873D86A744E2861F2A503
Certificate serial:       03B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
Manifest number:          03A7
Signing time:             Sat 05 Sep 2026 00:21:04 +0000
Manifest this update:     Sat 05 Sep 2026 00:21:03 +0000
Manifest next update:     Sat 12 Sep 2026 00:21:03 +0000
Files and hashes:         1: Qi87B4JkeC6YeHPYanROKGHypQM.crl (hash: QS/sDQ60JM4+PU9e+ev6tFdirskUhUkkjybn+mW7Bwo=)
                          2: 819F3DD6F5E111EC9754EB85C4F9AE02.roa (hash: 56IHYQEatEXj4WUGhSqwSd+WduSXB1pqwYgLfm/Aqxc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl
                          rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 00:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E711B, serialNumber=422F3B078264782E987873D86A744E2861F2A503
        Validity
            Not Before: Sep  5 00:21:03 2026 GMT
            Not After : Sep 12 00:21:03 2026 GMT
        Subject: CN=6a9b6070-fd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:db:c5:e6:e3:ee:5b:0f:91:f4:fb:1e:21:
                    25:48:18:68:3b:cd:36:f1:ce:8c:59:32:6a:31:79:
                    07:c9:76:9d:50:04:a9:c9:70:4b:f6:f0:59:b9:ea:
                    98:8f:3e:31:d0:52:a3:dd:32:c6:e1:5b:d1:56:37:
                    6a:05:ef:a9:da:9b:2c:d0:a2:76:29:4c:1b:6d:6d:
                    7e:04:77:41:fc:e0:44:ed:e8:99:b9:fe:4b:13:28:
                    d3:7e:f6:60:5c:4b:5a:0c:63:ac:4c:8a:78:e7:da:
                    be:36:e7:b3:19:6a:cc:df:6e:a5:9f:88:bd:fb:a0:
                    76:f5:32:cb:2f:00:1e:d7:5e:5e:44:95:9f:06:29:
                    ae:e8:bc:f6:23:7d:99:d7:7d:7e:9e:49:b6:e7:92:
                    f2:78:8c:07:79:2c:ab:67:19:27:a4:bb:7f:5e:08:
                    ad:c3:5b:79:90:7a:5d:8e:76:b6:1b:16:1f:21:7a:
                    cd:bf:ca:38:dc:02:c6:c4:a6:06:fd:02:a7:af:30:
                    6d:01:94:c0:2c:28:4e:2a:66:e0:36:6b:d8:42:69:
                    9a:75:ff:51:01:4c:e7:c7:5e:c7:54:0e:e0:5f:a7:
                    ce:e9:23:bb:4c:f3:88:1b:60:35:7a:cd:ac:dc:f6:
                    57:6d:8d:cd:a9:be:24:2e:bd:ba:20:01:6a:84:1f:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:36:3B:64:CE:5A:D6:E0:2A:AD:DD:49:F9:E8:E2:CE:3A:40:47
            X509v3 Authority Key Identifier:
                keyid:42:2F:3B:07:82:64:78:2E:98:78:73:D8:6A:74:4E:28:61:F2:A5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qi87B4JkeC6YeHPYanROKGHypQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E711B/505C9738F5DB11EC9D06777BC4F9AE02/Qi87B4JkeC6YeHPYanROKGHypQM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ed:76:13:a3:f0:15:ef:cd:75:5f:57:c3:f3:84:49:cd:dd:
         01:10:1c:fe:91:8d:be:2a:a8:16:3d:5d:78:5e:a4:b4:4b:bd:
         4f:0f:df:b1:9c:37:a0:62:35:09:8a:b6:5e:3a:bb:5d:48:08:
         3b:43:4c:23:76:7c:e8:7d:fd:dd:e8:54:df:da:29:1c:02:f6:
         b8:3c:78:11:45:35:00:4a:db:92:6a:42:76:98:b1:6d:ec:fa:
         63:50:0f:e0:3f:3e:74:dd:73:8b:11:1c:2b:52:5e:8e:fd:10:
         6b:50:0f:c2:10:34:64:02:69:95:3e:7c:48:83:3d:7c:7b:c8:
         85:9d:34:e6:7c:03:80:c9:a2:27:2e:23:ab:df:fe:38:d3:15:
         b5:1b:52:d8:f1:21:80:7b:61:5b:60:8b:93:d4:a3:45:14:c9:
         4b:ef:1a:82:cf:f3:8f:97:05:e9:f5:99:c7:6c:0a:6e:b6:e8:
         bc:42:ec:1c:04:09:27:a3:8f:d5:87:16:66:c3:b1:69:a8:ba:
         ac:fa:1c:fb:ba:16:bf:3e:e5:55:53:12:2e:8c:70:dc:89:c7:
         b1:0f:b6:88:2b:88:e8:d0:4e:13:3d:af:54:9b:55:27:16:99:
         32:57:a2:6c:7b:5a:a1:cd:01:58:c5:fe:63:93:a1:62:41:a5:
         e1:0e:03:10
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcxMUIxMTAvBgNVBAUTKDQyMkYzQjA3ODI2NDc4MkU5ODc4NzNEODZBNzQ0RTI4
NjFGMkE1MDMwHhcNMjYwOTA1MDAyMTAzWhcNMjYwOTEyMDAyMTAzWjAYMRYwFAYD
VQQDEw02YTliNjA3MC1mZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6jbxebj7lsPkfT7HiElSBhoO8028c6MWTJqMXkHyXadUASpyXBL9vBZueqY
jz4x0FKj3TLG4VvRVjdqBe+p2pss0KJ2KUwbbW1+BHdB/OBE7eiZuf5LEyjTfvZg
XEtaDGOsTIp459q+NuezGWrM326ln4i9+6B29TLLLwAe115eRJWfBimu6Lz2I32Z
131+nkm255LyeIwHeSyrZxknpLt/Xgitw1t5kHpdjna2GxYfIXrNv8o43ALGxKYG
/QKnrzBtAZTALChOKmbgNmvYQmmadf9RAUznx17HVA7gX6fO6SO7TPOIG2A1es2s
3PZXbY3Nqb4kLr26IAFqhB+7WwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWDNjtk
zlrW4Cqt3Un56OLOOkBHMB8GA1UdIwQYMBaAFEIvOweCZHgumHhz2Gp0Tihh8qUD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzExQi81MDVDOTczOEY1
REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VDNlllSFBZYW5ST0tHSHlw
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FpODdCNEprZUM2WWVIUFlhblJPS0dIeXBRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzExQi81MDVDOTczOEY1REIxMUVDOUQwNjc3N0JDNEY5QUUwMi9RaTg3QjRKa2VD
NlllSFBZYW5ST0tHSHlwUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcu12E6PwFe/NdV9Xw/OESc3dARAc/pGNviqoFj1deF6ktEu9Tw/fsZw3oGI1
CYq2Xjq7XUgIO0NMI3Z86H393ehU39opHAL2uDx4EUU1AErbkmpCdpixbez6Y1AP
4D8+dN1zixEcK1Jejv0Qa1APwhA0ZAJplT58SIM9fHvIhZ005nwDgMmiJy4jq9/+
ONMVtRtS2PEhgHthW2CLk9SjRRTJS+8ags/zj5cF6fWZx2wKbrbovELsHAQJJ6OP
1YcWZsOxaai6rPoc+7oWvz7lVVMSLoxw3InHsQ+2iCuI6NBOEz2vVJtVJxaZMlei
bHtaoc0BWMX+Y5OhYkGl4Q4DEA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:08:53 2026 by rpki-client