Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File:                     5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier:          z8dFoLvThVYj2dICnUS4icoOeSWQxkjCOGbHZmewzx0=
Subject key identifier:   A0:79:43:0A:62:D0:50:9D:5B:59:1E:23:74:78:D8:E8:D8:DC:67:D7
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer:       /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial:       038D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number:          0387
Signing time:             Wed 07 Oct 2026 00:52:13 +0000
Manifest this update:     Wed 07 Oct 2026 00:52:12 +0000
Manifest next update:     Wed 14 Oct 2026 00:52:12 +0000
Files and hashes:         1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: KWBMT2X18PXSkAOERjN5QMawzYpER1YGd7tpYG0kAWU=)
                          2: E757164C074511EDB229157DC4F9AE02.roa (hash: Zl7LXpi5GCQkUZpj3niObwuPVXDBddJa9YjT3A72qXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
                          rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
        Validity
            Not Before: Oct  7 00:52:12 2026 GMT
            Not After : Oct 14 00:52:12 2026 GMT
        Subject: CN=6ac597bd-0282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:7d:2d:3a:7f:4f:81:94:15:bb:1e:02:40:
                    7c:3c:14:f9:b1:af:2e:45:7b:5e:9c:7b:5e:83:cf:
                    bb:98:e8:c0:62:61:fe:11:8f:0c:13:e9:7a:d4:06:
                    74:39:9d:ef:a5:78:08:a2:24:9f:1c:8c:bd:9c:f4:
                    e2:c3:b5:ed:26:ae:8d:8f:cd:4f:b7:2a:07:d1:06:
                    68:92:5c:f3:a4:87:79:80:f9:8b:10:8d:17:bc:44:
                    91:68:a8:01:ac:31:c3:ef:ca:b8:42:fb:5e:d7:da:
                    b7:e0:04:88:ad:97:10:0b:02:06:96:7c:37:eb:9b:
                    a1:e9:3d:04:62:7b:68:61:6b:3a:f3:02:a4:15:13:
                    c4:95:08:2d:fc:e5:6c:da:9e:c9:af:71:eb:09:44:
                    16:86:5b:44:cc:75:2c:29:91:87:1c:a8:bc:35:32:
                    3a:90:2f:af:a2:15:33:cd:cf:2c:5a:41:d3:a3:46:
                    d6:bd:7b:89:20:2d:05:90:20:d2:49:f5:be:75:a2:
                    c7:83:3f:d4:17:54:d1:ea:0d:a8:3f:e1:5c:d1:d8:
                    e2:0f:55:67:69:db:cf:85:25:e0:ad:be:1d:b8:1a:
                    70:17:49:44:bf:eb:c7:04:f8:cb:6e:01:72:7f:85:
                    59:98:3d:94:87:9f:ff:57:f2:d6:5d:64:23:0f:42:
                    d5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:79:43:0A:62:D0:50:9D:5B:59:1E:23:74:78:D8:E8:D8:DC:67:D7
            X509v3 Authority Key Identifier:
                keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:04:ad:69:ff:a5:42:12:f5:0f:13:b6:64:2b:55:eb:19:57:
         cb:57:2c:9a:0a:22:3b:8c:da:a4:43:5d:20:7a:71:0a:e4:9e:
         fc:b0:41:88:e8:77:1a:cf:75:0c:a1:8e:30:7b:ac:99:7a:95:
         d0:0e:02:63:06:1f:40:ed:6e:00:85:93:88:43:75:9c:0b:2d:
         11:f0:ba:3d:5c:71:25:b3:74:a0:7c:23:32:5a:55:67:f1:2d:
         60:07:9d:cc:7c:f1:6d:9b:a3:72:e3:7d:a8:1e:66:0a:aa:1b:
         96:ea:bf:a3:96:f5:14:98:ff:5a:c6:49:3d:61:08:a5:a8:dc:
         8b:6f:32:b5:91:55:1b:f7:de:bc:82:4c:3f:46:c5:ce:da:07:
         88:7c:db:70:6f:c5:ee:2e:79:20:c8:46:35:71:18:1d:b8:2e:
         2c:1e:57:06:f1:0b:9a:df:7e:b8:f4:fb:98:3c:ae:43:85:80:
         cb:54:54:9c:04:21:61:37:18:ab:fc:5e:73:60:43:bc:b8:a6:
         6e:c2:85:9f:c7:f2:31:79:3a:13:95:b6:cd:33:51:9e:88:28:
         20:fc:13:35:63:22:4a:97:c6:dc:8e:f2:9c:e9:46:fe:60:23:
         fe:bc:14:ad:61:05:37:e7:73:45:c6:85:ed:60:59:55:15:8d:
         4c:96:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:40:12 2026 by rpki-client