Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
File:                     qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json)
Hash identifier:          d20NoRog9MNPc96Lw+7+vyE1L23Imu3RlLVWYXJT2Os=
Subject key identifier:   C6:12:89:4A:60:B4:BC:67:E7:AC:48:19:B6:BB:B8:D8:FC:21:55:1F
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Certificate issuer:       /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial:       1118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
Manifest number:          10FE
Signing time:             Fri 16 Oct 2026 17:23:05 +0000
Manifest this update:     Fri 16 Oct 2026 17:23:04 +0000
Manifest next update:     Fri 23 Oct 2026 17:23:04 +0000
Files and hashes:         1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: T9MMdFPxypXY46UEeEZYx043UufLcAdikuLcn6J0pMs=)
                          2: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: GDAnZb/56NjHKOSDOXY9bNI/CfCE20/WA0Nzn9nbjnU=)
                          3: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sBJRcb1jeiSo6W9iH/QWFKlKGnbO+XkPqf2UK7Z9wiI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
                          rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 17:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4376 (0x1118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
        Validity
            Not Before: Oct 16 17:23:04 2026 GMT
            Not After : Oct 23 17:23:04 2026 GMT
        Subject: CN=6ad25d79-0fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:46:8e:90:97:ae:b0:b9:95:7f:b9:91:ae:9f:
                    7f:65:31:c8:a9:4c:73:53:9f:f7:8b:af:52:e9:df:
                    22:dc:9d:2d:75:07:c6:a2:a3:cf:af:9e:1c:db:bc:
                    9e:58:67:a1:05:c1:16:93:06:da:c7:95:ff:81:a4:
                    90:d3:a9:0d:1d:43:05:6c:c1:fb:d0:82:f1:f6:a9:
                    58:3b:23:9b:33:77:dd:82:fd:14:a9:12:49:c4:38:
                    8e:bb:a5:e9:0e:c2:48:e5:5e:98:40:68:57:85:08:
                    25:63:b2:b4:bc:5c:22:f3:f4:79:10:14:ad:d7:ba:
                    0b:6f:60:3f:7d:39:00:5b:7d:3c:05:3a:2c:85:45:
                    eb:8d:32:7c:6c:40:28:e8:7a:77:b0:3f:b3:5f:c7:
                    10:e4:b6:e9:2f:a9:12:41:63:c7:71:13:b2:2f:3c:
                    0e:ff:57:b8:a2:6d:9b:ee:8b:dd:ff:9e:e0:dc:7e:
                    fb:08:45:1e:63:2c:f3:50:7e:00:80:37:43:11:6d:
                    ea:35:ec:a0:ec:bd:74:88:e7:25:1d:82:8b:53:98:
                    f1:02:9a:a7:56:cd:28:2b:1a:a8:7d:f7:77:8b:3d:
                    8b:c6:8b:9b:df:6c:9c:09:2f:8d:e3:2f:35:35:74:
                    0d:d8:66:3e:45:9c:42:b6:ab:b4:a1:51:7e:f1:5f:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:89:4A:60:B4:BC:67:E7:AC:48:19:B6:BB:B8:D8:FC:21:55:1F
            X509v3 Authority Key Identifier:
                keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:3f:e8:99:98:22:9f:bb:f2:fc:2b:9a:65:9c:91:d3:31:
         eb:80:c5:ab:62:4f:e3:e7:91:0d:fc:ed:73:88:26:2e:26:e2:
         03:fd:62:3e:74:65:75:b2:a7:a9:bb:bc:83:c7:a1:fb:fb:bb:
         d9:12:5c:1c:3c:60:28:90:00:8b:21:99:86:0b:8f:37:1b:e0:
         60:02:bf:c6:5c:34:d6:8b:cb:79:d9:a2:61:5e:c3:93:98:da:
         20:06:f5:25:0b:ae:fd:17:d3:e8:d0:d0:9f:b2:2d:fa:fb:99:
         a0:11:89:22:27:59:84:30:f1:a8:4c:e2:e0:49:34:bd:34:e9:
         52:d7:c5:46:de:aa:7e:7d:2e:a9:f5:89:50:fe:ac:30:18:7f:
         80:3d:de:a7:26:ad:8e:6c:90:d7:72:c7:d6:c5:5b:61:1a:e3:
         c1:27:d5:3b:e0:55:a4:75:26:7b:90:62:52:05:bf:93:30:ec:
         b6:6b:34:53:af:37:88:c0:36:bc:12:54:04:bf:d3:d5:df:4a:
         24:36:fa:80:2d:01:0b:6b:86:55:c3:7c:a8:c0:b1:2f:1f:39:
         7d:ed:66:6d:f8:e9:5b:39:d3:cd:bd:11:a6:49:1c:d8:5a:d3:
         a6:a1:33:b1:cf:32:f3:59:55:e7:df:3c:38:a0:c1:12:33:b7:
         f3:bf:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:59:30 2026 by rpki-client