Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
File:                     quV1mn6YqnRYWY3jwZqheX8A9fU.mft (raw, json)
Hash identifier:          lLaHZUZrqzTx7zFWFjuUPmUKVeptM1s3PhhXdaBCXa8=
Subject key identifier:   0A:AA:F4:07:46:B3:81:C4:B8:24:AE:12:0A:82:E2:7C:81:CA:65:11
Authority key identifier: AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5
Certificate issuer:       /CN=A9142489/serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
Manifest number:          016E
Signing time:             Sun 11 Oct 2026 05:29:33 +0000
Manifest this update:     Sun 11 Oct 2026 05:29:32 +0000
Manifest next update:     Sun 18 Oct 2026 05:29:32 +0000
Files and hashes:         1: quV1mn6YqnRYWY3jwZqheX8A9fU.crl (hash: QcJZIty0uF3gqdophnY3v95w9+zeC9WC+pn0muWbFD4=)
                          2: 4D7DE09E9BFB11EF8E975D70C4F9AE02.roa (hash: OXlWMlN/9eXJBuwyCfwBJ/3whRZMwq6quUWKtVMgPJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 05:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=AAE5759A7E98AA7458598DE3C19AA1797F00F5F5
        Validity
            Not Before: Oct 11 05:29:32 2026 GMT
            Not After : Oct 18 05:29:32 2026 GMT
        Subject: CN=6acb1ebd-e1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:b3:89:c6:5e:3e:21:8c:25:71:37:39:83:
                    45:a8:1a:76:41:40:54:cc:77:44:1d:34:13:27:d0:
                    d1:18:7b:7b:63:2b:55:25:27:b1:39:7c:63:09:56:
                    b3:1d:8b:82:2a:c6:a3:6a:0f:c5:fb:44:7b:9f:12:
                    1e:d7:1b:5f:b5:35:f2:e6:3c:b1:17:a5:2d:7b:66:
                    94:53:4f:a8:ed:ae:50:2a:97:1f:ee:9f:ea:f3:87:
                    91:94:35:cf:79:f0:d5:6a:b3:c8:c3:01:7b:70:58:
                    bf:5c:4d:8f:fb:ca:13:67:7e:8c:55:ab:78:20:38:
                    92:a7:e6:15:fb:50:ab:0c:a5:58:47:38:80:6e:65:
                    8a:eb:fe:22:3b:11:7f:d2:55:e4:b1:70:74:04:53:
                    29:f5:06:a6:6b:27:ee:70:68:76:b9:40:92:aa:9e:
                    83:1b:d5:85:ec:80:25:76:13:81:b8:ac:88:0a:87:
                    32:86:9e:9d:fe:02:b9:1c:c7:80:6b:03:14:b0:bc:
                    1d:1d:fa:19:5c:bc:6e:b3:3c:ae:ae:23:26:a0:cc:
                    79:a3:b3:8e:44:49:bf:a1:80:5f:dc:a5:e8:50:f9:
                    b1:d4:81:61:c8:23:4c:f6:05:a0:b6:eb:f4:d2:b4:
                    fe:a6:f1:c8:04:9b:ab:a8:d8:31:79:b8:87:6d:ab:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:F4:07:46:B3:81:C4:B8:24:AE:12:0A:82:E2:7C:81:CA:65:11
            X509v3 Authority Key Identifier:
                keyid:AA:E5:75:9A:7E:98:AA:74:58:59:8D:E3:C1:9A:A1:79:7F:00:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quV1mn6YqnRYWY3jwZqheX8A9fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3A3F28369BFA11EFBEB9846EC4F9AE02/quV1mn6YqnRYWY3jwZqheX8A9fU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:ba:cc:75:73:c1:1a:e7:43:bd:57:3b:26:d2:8c:e1:31:
         37:cb:58:67:a2:6d:a0:36:4e:cd:fb:a6:48:07:19:77:8f:09:
         d6:4f:1c:57:90:1d:cb:71:f8:6f:1a:15:d1:f8:d4:1b:fe:c6:
         63:c4:ed:ac:d6:06:cc:d0:2e:e0:8d:80:f0:77:c2:68:41:6b:
         60:c0:b5:30:b6:b2:48:c8:30:f8:b1:cc:d3:e5:85:d8:a0:6d:
         f3:56:02:9a:f5:b7:1e:58:57:94:df:eb:69:dc:12:c1:3d:5c:
         d1:be:66:9a:2c:b8:a5:f4:51:8b:83:a9:e1:cf:42:9f:ba:5e:
         c6:20:a8:d3:79:b4:ea:83:c7:2c:ef:b6:e9:dd:97:f4:7e:94:
         79:76:15:3a:fc:e1:f3:69:2d:aa:38:bd:a4:3b:4b:00:2e:ff:
         89:67:fa:db:0b:16:fc:a6:a1:4b:8e:15:32:39:e4:62:de:c3:
         07:07:74:6b:36:56:46:03:51:73:e3:da:b1:4a:63:db:df:40:
         6e:27:76:10:82:da:80:19:6f:94:3c:37:2b:40:a1:45:ed:3e:
         12:44:60:4c:3e:90:de:34:a8:59:d2:76:b4:48:75:42:fa:e7:
         0d:5f:39:f4:e1:06:77:36:ef:6a:f5:58:a4:df:57:e4:c4:e3:
         af:9c:57:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:10:43 2026 by rpki-client