Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
File:                     qSFNuZGEmynE8EXDNkcOnYLEjOI.mft (raw, json)
Hash identifier:          UwT3DhN1Yu5fSETyscgK4sttrg6+DJ5sWR34Fp1KO9I=
Subject key identifier:   CE:8F:7E:EE:6D:F1:8D:C0:44:BA:73:21:CD:7F:6F:8B:76:5B:6D:95
Authority key identifier: A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2
Certificate issuer:       /CN=A91EB929/serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
Manifest number:          01D8
Signing time:             Wed 19 Aug 2026 04:19:02 +0000
Manifest this update:     Wed 19 Aug 2026 04:19:02 +0000
Manifest next update:     Wed 26 Aug 2026 04:19:02 +0000
Files and hashes:         1: qSFNuZGEmynE8EXDNkcOnYLEjOI.crl (hash: H9pRZ2u94BOUZ0EwaJKdIBcUtNaY6tnmnj3tVcfsa4s=)
                          2: 469DADAE9B1D11F199542C1F6411F970.roa (hash: 7ld5vVKkgDVk7iu8ZivqDo4KyiyF+452Quc+9rok5eY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl
                          rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB929, serialNumber=A9214DB991849B29C4F045C336470E9D82C48CE2
        Validity
            Not Before: Aug 19 04:19:02 2026 GMT
            Not After : Aug 26 04:19:02 2026 GMT
        Subject: CN=6a852eb6-2d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:0b:7a:89:63:c9:4f:be:35:1b:a6:22:88:
                    e0:de:7c:60:c6:ef:a2:95:54:b5:8a:df:87:f9:eb:
                    0a:1b:45:84:f7:5c:59:71:ab:e1:b7:5e:8c:84:f2:
                    72:a0:e0:b6:21:ee:9a:18:a3:46:14:d8:c2:f1:e1:
                    9a:fd:c9:88:68:6d:d5:67:26:4c:11:15:d6:b2:2b:
                    60:dc:79:ea:53:4c:4f:28:da:a3:02:34:13:d7:5b:
                    7f:ec:70:fd:c0:25:a3:a1:04:80:e5:b3:b9:d7:72:
                    b1:33:58:4c:cd:c8:f9:67:99:e0:28:45:fd:b5:9a:
                    a8:89:d2:33:57:26:9a:25:ff:af:bc:1a:69:22:f2:
                    b2:bd:9f:a4:26:29:18:fa:28:e3:5b:7c:88:67:5c:
                    f6:96:a0:59:3c:54:20:b9:c1:e1:5f:f8:c4:f7:8d:
                    18:4a:52:f6:ae:39:6b:36:76:14:dc:4c:05:b9:bd:
                    87:e5:09:0c:b9:3f:db:82:25:9d:09:3f:38:19:bf:
                    51:d0:f8:13:b0:b0:d4:68:74:c5:77:f3:f4:68:d7:
                    6b:d8:bc:aa:d2:43:c9:fd:95:e3:91:c2:18:af:2d:
                    ba:ec:57:7c:f6:f8:17:96:59:3c:ba:ba:ff:59:5b:
                    1e:f2:64:e6:36:09:b6:a5:0d:95:c8:01:79:ee:5a:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8F:7E:EE:6D:F1:8D:C0:44:BA:73:21:CD:7F:6F:8B:76:5B:6D:95
            X509v3 Authority Key Identifier:
                keyid:A9:21:4D:B9:91:84:9B:29:C4:F0:45:C3:36:47:0E:9D:82:C4:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFNuZGEmynE8EXDNkcOnYLEjOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB929/BEBDEA98D5EE11EE9E20177DC4F9AE02/qSFNuZGEmynE8EXDNkcOnYLEjOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:57:2e:d1:51:75:f2:a7:37:2b:0c:ef:d4:f2:c7:06:f6:96:
         cf:d5:fb:8d:af:aa:7d:3c:dd:ad:5e:86:74:16:5d:69:99:f9:
         ce:5b:c7:57:6e:8e:75:98:23:36:94:56:2d:c1:a6:eb:48:5e:
         e5:77:0b:0a:dc:f0:03:49:f5:b3:5a:d1:70:76:67:b3:91:e1:
         a1:fd:6c:41:ff:6b:03:c6:47:ca:20:48:25:04:3c:c0:ee:08:
         97:af:67:92:62:56:9b:e7:6b:e5:2a:1b:e9:24:ac:33:c7:f7:
         7e:65:e5:a8:e9:75:91:71:0a:85:69:c4:7b:23:0e:eb:db:fb:
         a1:d3:54:d4:67:e8:ed:9a:32:92:2e:f6:05:96:f8:eb:99:f4:
         12:2c:75:2c:a8:66:87:de:4b:79:3b:4c:5e:16:a6:84:29:51:
         72:d2:f8:5e:3c:34:2b:5e:71:31:23:40:0c:a2:f5:7c:aa:22:
         16:90:29:14:1d:8e:50:fc:b8:7b:66:0c:3f:f1:72:16:e7:03:
         ab:7b:fe:17:08:c5:d7:d7:9f:d0:1c:42:ca:6c:43:c9:32:bc:
         32:c6:af:d9:7b:72:34:8a:ca:be:c2:1f:5c:35:6d:10:f9:2e:
         77:d6:ef:87:1f:a6:84:dc:bb:0d:01:e6:6e:31:be:a9:79:1d:
         10:9f:c2:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5MjkxMTAvBgNVBAUTKEE5MjE0REI5OTE4NDlCMjlDNEYwNDVDMzM2NDcwRTlE
ODJDNDhDRTIwHhcNMjYwODE5MDQxOTAyWhcNMjYwODI2MDQxOTAyWjAYMRYwFAYD
VQQDEw02YTg1MmViNi0yZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApUULeoljyU++NRumIojg3nxgxu+ilVS1it+H+esKG0WE91xZcavht16MhPJy
oOC2Ie6aGKNGFNjC8eGa/cmIaG3VZyZMERXWsitg3HnqU0xPKNqjAjQT11t/7HD9
wCWjoQSA5bO513KxM1hMzcj5Z5ngKEX9tZqoidIzVyaaJf+vvBppIvKyvZ+kJikY
+ijjW3yIZ1z2lqBZPFQgucHhX/jE940YSlL2rjlrNnYU3EwFub2H5QkMuT/bgiWd
CT84Gb9R0PgTsLDUaHTFd/P0aNdr2Lyq0kPJ/ZXjkcIYry267Fd89vgXllk8urr/
WVse8mTmNgm2pQ2VyAF57lpGLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6Pfu5t
8Y3ARLpzIc1/b4t2W22VMB8GA1UdIwQYMBaAFKkhTbmRhJspxPBFwzZHDp2CxIzi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjkyOS9CRUJERUE5OEQ1
RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15bkU4RVhETmtjT25ZTEVq
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FTRk51WkdFbXluRThFWEROa2NPbllMRWpPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjkyOS9CRUJERUE5OEQ1RUUxMUVFOUUyMDE3N0RDNEY5QUUwMi9xU0ZOdVpHRW15
bkU4RVhETmtjT25ZTEVqT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIFcu0VF18qc3Kwzv1PLHBvaWz9X7ja+qfTzdrV6GdBZdaZn5zlvHV26OdZgj
NpRWLcGm60he5XcLCtzwA0n1s1rRcHZns5Hhof1sQf9rA8ZHyiBIJQQ8wO4Il69n
kmJWm+dr5Sob6SSsM8f3fmXlqOl1kXEKhWnEeyMO69v7odNU1Gfo7Zoyki72BZb4
65n0Eix1LKhmh95LeTtMXhamhClRctL4Xjw0K15xMSNADKL1fKoiFpApFB2OUPy4
e2YMP/FyFucDq3v+FwjF19ef0BxCymxDyTK8Msav2XtyNIrKvsIfXDVtEPkud9bv
hx+mhNy7DQHmbjG+qXkdEJ/C6A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:39 2026 by rpki-client