Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
File:                     QVQG7YC02Sekeai6BCEWri0RoaY.mft (raw, json)
Hash identifier:          ZIU8OJIAHVE9wVD5+n7pvR+tE0wXTwTbGj1ishLob24=
Subject key identifier:   5B:B0:33:98:C9:2B:11:DE:74:02:6A:9E:57:7D:C7:4F:00:C0:16:22
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       19DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
Manifest number:          199B
Signing time:             Sun 26 Jul 2026 16:31:42 +0000
Manifest this update:     Sun 26 Jul 2026 16:31:42 +0000
Manifest next update:     Sun 02 Aug 2026 16:31:42 +0000
Files and hashes:         1: QVQG7YC02Sekeai6BCEWri0RoaY.crl (hash: mbL7lWmQpk5Zf7jFiYUovIoKreMGFXNbgwoZy089Lg0=)
                          2: 62C9C1CEE03111EEBECE581EC4F9AE02.roa (hash: oJ78RBqmIFf7+EGXON56ghZc5dhDEqf/WgrDgi33iRc=)
                          3: 43E9842C185A11EF9D0C4338C4F9AE02.roa (hash: mnfTgIuPlsM7FOE7wG43XOpMDWMOBSC6RbV4JXFx0HM=)
                          4: 215F871ECF5E11F0872AA04EC4F9AE02.roa (hash: UJesNWFWd4QVKVnMq2EE5fzwYbSAHuhH8hkx2Vt9ZG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl
                          rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 16:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6622 (0x19de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1, serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Jul 26 16:31:42 2026 GMT
            Not After : Aug  2 16:31:42 2026 GMT
        Subject: CN=6a66366e-f635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:c0:25:22:ab:84:8e:9f:fa:ff:c0:27:7f:
                    8b:9b:ab:9f:5c:7d:4e:9f:0c:1b:75:3a:81:05:ae:
                    c2:5f:67:cb:fb:c3:9a:06:9d:aa:5a:c5:ca:9e:ef:
                    be:e3:20:03:31:5f:36:d6:12:1a:37:70:d1:a1:cc:
                    06:0e:76:0e:6e:74:29:02:42:f4:a3:f7:04:15:75:
                    ed:8f:a3:a4:20:20:10:15:7e:78:91:7f:dd:9a:a4:
                    10:72:70:06:2c:03:38:81:52:2c:97:dc:4b:84:16:
                    f8:a3:45:f5:5d:71:81:7d:a3:92:36:cb:66:03:8d:
                    dc:23:28:6e:a0:ee:4b:fb:49:71:04:35:b0:fa:16:
                    9f:6f:ba:0b:57:dd:e1:ec:b9:cf:bc:99:e2:97:04:
                    7a:da:d6:2f:db:bd:c7:d5:48:b4:d9:c9:70:49:82:
                    7c:f9:a3:b7:15:79:a9:75:f7:60:88:7b:e2:58:a5:
                    b0:d1:a9:28:cc:b2:46:3e:d9:aa:a6:80:eb:0f:ae:
                    03:ce:f7:98:9b:dd:fc:2e:3a:c2:9e:e7:d3:42:11:
                    d2:5f:8f:18:37:47:c3:5d:2e:30:c6:4b:d3:ea:26:
                    8f:8c:b9:dc:50:63:8a:6f:fa:15:bf:c1:97:8a:83:
                    e0:c9:9a:cd:bc:93:1d:39:55:fd:2a:ea:a3:ef:ec:
                    1a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B0:33:98:C9:2B:11:DE:74:02:6A:9E:57:7D:C7:4F:00:C0:16:22
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:02:d8:d6:89:ed:9f:10:14:38:be:7b:14:76:e8:10:78:
         5c:e7:4c:0e:bb:ec:93:83:f6:a2:c4:40:ce:44:c0:b8:73:e7:
         81:e5:ab:e9:ef:d9:a9:c4:c5:5c:c7:e0:30:70:67:2f:6f:cc:
         dd:7a:57:30:05:e0:b4:c8:e0:48:a5:dc:39:f7:9c:46:f2:19:
         cc:4a:8f:22:2a:84:c8:7a:7a:84:b8:b7:42:09:46:2f:67:ee:
         4f:4a:41:de:1a:1b:1d:fe:1a:bd:ff:51:26:3c:7c:be:a5:28:
         68:1a:61:d4:44:8c:78:91:2d:e1:b0:71:5b:e5:c8:1a:5b:c3:
         e3:b6:06:24:cb:76:f9:dd:4c:72:d1:d0:72:e8:e6:72:5b:ec:
         99:bc:f9:05:98:49:f4:54:90:2a:34:ee:37:16:5e:d3:be:3a:
         63:7b:be:c9:19:c3:bb:cf:de:c1:cc:81:a0:5f:60:a6:c8:68:
         bc:04:ee:11:d3:3c:23:85:61:52:f6:e9:59:1b:0e:ef:18:08:
         b8:0f:70:cc:3f:a0:66:ef:dc:9e:87:cc:25:ad:cf:a2:26:e7:
         1f:1f:d7:d6:3f:45:e9:1d:c9:db:29:2e:c4:42:35:13:c7:72:
         6c:48:22:8b:d2:44:f0:b4:0b:d5:cd:a5:ae:23:23:69:ff:9a:
         65:c3:7f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:48:26 2026 by rpki-client