Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
File:                     qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json)
Hash identifier:          SljgnqLrNZPpSeXddKWksb4qF0VzTqgZKVSyVvGS06c=
Subject key identifier:   B9:C1:A6:D9:2E:8A:86:F5:20:6D:50:22:88:57:2D:A8:08:D8:79:FB
Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F
Certificate issuer:       /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
Certificate serial:       06E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
Manifest number:          06AE
Signing time:             Sun 26 Jul 2026 23:15:08 +0000
Manifest this update:     Sun 26 Jul 2026 23:15:08 +0000
Manifest next update:     Sun 02 Aug 2026 23:15:08 +0000
Files and hashes:         1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: F7KeqHQTTyAwg2DYTHeiacoS0HTPHyR4S9O4xjLAt0o=)
                          2: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=)
                          3: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=)
                          4: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl
                          rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1764 (0x6e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F
        Validity
            Not Before: Jul 26 23:15:08 2026 GMT
            Not After : Aug  2 23:15:08 2026 GMT
        Subject: CN=6a6694fc-fbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:db:f9:ec:0d:fd:70:ff:ee:87:c2:b1:48:
                    88:47:28:8b:cf:23:1a:51:29:ae:24:9b:1b:25:99:
                    a1:ad:d5:80:bc:0d:5c:80:67:13:a3:d8:cb:c1:50:
                    22:41:e5:a5:5e:97:fb:52:8c:09:9b:46:9b:8c:d1:
                    76:3b:5c:c2:e5:aa:c4:32:f6:38:31:de:6d:8c:e8:
                    71:f6:43:b1:6c:64:ba:27:86:d6:15:8d:88:29:2f:
                    10:b1:16:c7:59:99:34:da:54:84:5d:03:25:f0:89:
                    62:ff:6b:af:2c:b3:20:15:52:7c:d3:7d:61:da:2c:
                    4d:0c:1c:c6:37:f2:b0:ff:bd:19:fa:10:4d:15:de:
                    5a:33:6a:80:f8:a1:0e:bb:cc:f5:55:f1:e1:bc:69:
                    41:a8:76:f5:4b:8a:65:5b:4e:94:e3:fd:d7:50:86:
                    e4:0c:b7:e4:e8:b7:6b:12:11:f6:ec:b9:20:ad:38:
                    3a:60:31:e8:89:7c:93:a8:35:83:c0:0e:fc:cb:c6:
                    92:a1:76:4e:51:b8:25:8e:40:56:c5:d9:43:18:6e:
                    89:51:17:92:36:3c:da:41:ed:02:c5:c3:ef:17:47:
                    bd:6e:fb:81:4e:e9:02:a0:9e:b2:31:d8:2f:fe:64:
                    66:0d:62:53:0c:7c:58:f3:26:60:71:d2:a4:b7:3b:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:A6:D9:2E:8A:86:F5:20:6D:50:22:88:57:2D:A8:08:D8:79:FB
            X509v3 Authority Key Identifier:
                keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:76:b6:b9:1c:9d:8e:01:3f:27:44:7b:25:a8:3d:73:ae:51:
         05:ba:83:2d:dc:43:31:ee:ea:0d:29:77:80:bb:49:69:60:48:
         00:bb:5b:57:bf:ce:ca:9a:c2:ae:bc:42:ad:70:e1:e2:0a:c9:
         60:68:6f:bf:1f:8d:fe:b5:b4:49:f9:d8:e1:0a:4d:92:b0:8c:
         d3:d8:12:07:4f:02:83:06:5f:14:fc:2b:d7:58:4f:ec:89:ca:
         e6:f0:ea:1e:e1:89:d5:79:cb:5d:ce:63:25:e5:a8:87:dc:2f:
         d1:1a:d0:c9:89:9b:1c:6b:7a:e0:3a:ae:e6:37:d0:70:5d:0f:
         ba:d5:d4:09:d2:1e:bc:57:af:36:e3:8c:44:02:a8:3b:dc:cd:
         23:70:63:47:49:56:8b:a1:98:1d:13:df:88:a1:91:82:b2:bb:
         f2:32:c5:8b:fd:34:89:78:05:0b:3b:f4:ff:0b:ab:6c:dc:4c:
         cb:ad:29:b3:aa:e9:78:87:6c:cd:b0:2b:a6:d4:e4:93:5f:56:
         94:c0:c1:08:6d:b8:9e:fa:de:8b:c1:c0:b8:6c:71:2a:58:b0:
         22:cd:c6:a3:be:1d:dc:f4:4b:12:b5:9b:c8:df:dd:51:7e:3f:
         cc:e7:dc:a4:97:11:4f:ee:9d:63:3e:1f:7d:94:56:b4:e8:35:
         85:da:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:07 2026 by rpki-client