Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
File:                     q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft (raw, json)
Hash identifier:          XKgHsCDkjsag1lO1ZBMA4RV5wYYAOiQlfNAZrJ7NG9M=
Subject key identifier:   8D:31:CC:5F:DF:12:D2:F0:81:3F:EE:88:36:E7:F0:CB:2D:EC:5C:77
Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5
Certificate issuer:       /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
Certificate serial:       09D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
Manifest number:          09BC
Signing time:             Tue 18 Aug 2026 20:15:32 +0000
Manifest this update:     Tue 18 Aug 2026 20:15:32 +0000
Manifest next update:     Tue 25 Aug 2026 20:15:32 +0000
Files and hashes:         1: q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl (hash: lNqxUxumv81SggcM1Pyg4w3R5PnyZDxtRoMVApaCzdE=)
                          2: B7AC544A86F111F19E006003A7EE528E.roa (hash: CD98/zBc1iRMlYgaHXvEmJhl0TajGVGfTmWFNs6GIac=)
                          3: E3829F3CB1CF11EAA8732709C4F9AE02.roa (hash: zZu8aFP4Al6GJRPpJKXmBtYypvXABswMl/UMkW8uCT8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl
                          rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 20:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2514 (0x9d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5
        Validity
            Not Before: Aug 18 20:15:32 2026 GMT
            Not After : Aug 25 20:15:32 2026 GMT
        Subject: CN=6a84bd64-399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:61:f5:81:47:36:ee:e0:ed:fe:23:ff:5d:
                    45:3a:01:0f:e2:0b:8a:13:23:9f:18:8d:f3:3e:3c:
                    45:08:69:33:16:ad:4b:ac:c1:67:ab:47:21:dd:f3:
                    6f:e9:b8:f5:f8:f3:8f:d9:29:04:b1:8e:5f:d8:0e:
                    2d:e0:25:3c:24:6f:14:da:ad:73:2e:95:c1:fb:2f:
                    1b:34:db:be:a9:83:0d:d1:67:7a:6a:11:5e:1e:2f:
                    d5:1d:87:2b:6f:ba:2b:55:9c:76:22:98:84:c3:30:
                    c0:6d:ca:c5:84:09:3d:e9:a2:ad:b4:ca:90:ae:89:
                    68:fc:df:d0:f0:b5:90:74:c0:e8:41:2c:80:7a:6d:
                    14:f3:71:98:a5:72:9c:ad:19:e4:95:57:16:30:52:
                    be:d7:e4:81:11:ed:13:78:d1:8d:d1:dc:48:60:64:
                    e8:7e:cb:2d:b5:a2:d5:cd:71:8a:51:cd:fb:44:3c:
                    36:70:76:b6:d1:19:ac:31:d6:80:7e:e2:cc:3d:39:
                    46:f9:9a:65:16:8a:68:ea:96:75:49:5a:24:eb:ae:
                    ca:e7:4b:c0:ef:d7:a5:f2:a1:11:f1:7e:ae:7c:47:
                    e4:7b:a7:06:08:d8:9e:2e:6e:fc:f6:e1:54:a6:ed:
                    16:f4:57:3b:8d:81:e8:48:d5:1d:11:66:8c:0e:d1:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:31:CC:5F:DF:12:D2:F0:81:3F:EE:88:36:E7:F0:CB:2D:EC:5C:77
            X509v3 Authority Key Identifier:
                keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:33:9a:24:a5:29:16:23:c2:e4:be:10:dc:ca:98:99:ef:0f:
         bc:f9:42:d4:b4:53:50:a7:1b:2c:ef:e0:78:51:f0:16:bb:35:
         20:71:b0:4e:0b:d1:c1:31:a2:1d:54:7d:d7:9a:06:f8:00:6f:
         9f:3e:e6:05:f1:37:8a:09:48:64:0f:8d:32:22:58:a5:a1:e7:
         0a:44:1a:10:70:9d:b6:cc:94:96:66:72:b4:10:c9:3c:ec:90:
         99:5f:8f:c2:31:89:8d:fb:39:3d:07:21:02:a3:1c:2b:99:b7:
         6b:36:e0:0d:f9:21:09:aa:77:31:ef:1e:d9:09:a4:10:56:9d:
         e6:3d:b4:3d:16:45:3f:62:7b:f3:3b:76:20:78:ea:47:cb:4b:
         40:81:fb:01:8b:a7:3c:3f:78:52:98:c1:ab:0f:d0:c6:38:5e:
         6d:68:f2:cf:bd:55:8a:26:6a:6e:42:0d:2b:95:24:03:5e:db:
         73:57:a1:1d:d0:80:8e:06:eb:fa:b8:94:71:44:3a:53:18:92:
         00:b0:36:6a:81:84:98:fb:79:36:fd:d6:e1:d6:8a:b4:ad:a9:
         3b:d4:e3:98:eb:db:d3:a2:3e:31:26:ec:0a:5d:eb:ad:fe:6e:
         2e:63:cb:0d:50:e1:cb:30:33:3e:0e:56:91:4d:a2:89:88:0c:
         70:77:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:24 2026 by rpki-client