Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
File:                     tNQViTJWcWZLLGBPEt4EdX4uzNs.mft (raw, json)
Hash identifier:          OXuQ6I1wuUTvYmISeXhoTjGWGo8Dp5wnFewtjBlUU1c=
Subject key identifier:   A9:44:EB:8E:38:C9:27:2E:4E:3E:57:14:1F:DC:8B:12:5A:39:B4:95
Authority key identifier: B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB
Certificate issuer:       /CN=A916432A/serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
Certificate serial:       0871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
Manifest number:          0866
Signing time:             Thu 08 Oct 2026 21:03:06 +0000
Manifest this update:     Thu 08 Oct 2026 21:03:06 +0000
Manifest next update:     Thu 15 Oct 2026 21:03:06 +0000
Files and hashes:         1: tNQViTJWcWZLLGBPEt4EdX4uzNs.crl (hash: B8F2aVBk9UyzFPYrfD/aktXZODCLszH9FKIHz22Ppt0=)
                          2: 67CD2004292211EB8A9B3D73C4F9AE02.roa (hash: tcE4gvT48rVkQCBAi3c3JCe7vlGJ11O5lP9n2KM3sUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl
                          rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 21:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916432A, serialNumber=B4D41589325671664B2C604F12DE04757E2ECCDB
        Validity
            Not Before: Oct  8 21:03:06 2026 GMT
            Not After : Oct 15 21:03:06 2026 GMT
        Subject: CN=6ac8050a-3af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:c9:f3:51:8b:98:ba:9d:ec:45:42:87:3c:
                    21:cc:fa:55:e9:6e:44:2e:88:2a:8c:0e:7e:2c:c5:
                    a6:88:86:92:e4:40:ff:4f:35:54:30:db:2b:b7:89:
                    47:a5:18:f4:90:4c:49:91:bf:51:2a:f3:ef:db:f7:
                    8e:7f:16:61:63:26:71:74:2d:01:a9:94:94:0c:d8:
                    0f:ef:85:c4:47:70:e8:bb:4a:2a:31:bc:d1:06:26:
                    80:0b:df:df:f5:00:56:96:6a:8c:4c:11:d8:3c:74:
                    51:f8:93:bf:37:90:a1:43:57:b4:99:44:00:65:84:
                    69:a0:13:77:b3:74:44:c5:11:1a:fc:ee:83:0b:ed:
                    a5:c5:c2:c1:37:36:7b:4e:bf:57:0f:53:ca:e6:8d:
                    4d:e8:3a:fb:ee:f6:5a:b7:8e:56:60:f8:bb:e9:fb:
                    8a:ac:24:20:7d:0e:11:1f:13:3a:03:97:e2:e8:1b:
                    0f:06:3d:07:4c:43:43:4c:0b:81:3c:84:d2:a5:4b:
                    6c:c2:bc:c4:cf:7f:61:a5:82:b7:a5:1c:5e:73:d8:
                    4f:bd:89:f6:69:52:f6:e4:7c:fb:ff:9d:68:7d:19:
                    4d:3c:3d:78:34:f1:30:4a:9d:e1:44:58:51:1b:ce:
                    c4:bf:39:42:12:76:31:c9:f5:e5:d6:8d:df:88:02:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:EB:8E:38:C9:27:2E:4E:3E:57:14:1F:DC:8B:12:5A:39:B4:95
            X509v3 Authority Key Identifier:
                keyid:B4:D4:15:89:32:56:71:66:4B:2C:60:4F:12:DE:04:75:7E:2E:CC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNQViTJWcWZLLGBPEt4EdX4uzNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916432A/A613F55A1B7511EB98254009C4F9AE02/tNQViTJWcWZLLGBPEt4EdX4uzNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ea:2d:75:f4:d5:cd:92:63:4b:b5:bd:03:79:30:66:67:fa:
         65:12:d5:36:73:e0:72:d0:46:c2:b5:ec:59:89:1b:6d:d7:da:
         f4:2d:98:6e:9a:67:d3:46:d9:49:d6:94:95:90:54:8f:01:6e:
         b0:ae:b8:20:6f:9b:e9:8a:6a:9e:e9:9c:6a:7e:32:ad:54:d6:
         68:c2:21:b2:4b:12:f8:c5:10:08:b9:78:26:56:c9:84:ac:06:
         d4:71:a9:db:fe:50:bb:2e:44:2d:8a:c9:65:40:76:9b:be:cd:
         87:66:73:39:61:06:0b:bd:df:bd:a1:08:cc:d5:e1:aa:72:fc:
         a0:db:e5:65:f3:5b:62:b6:02:12:df:aa:a0:86:f4:81:c3:e6:
         fb:18:4e:15:90:50:e8:56:12:de:7c:f7:a7:f1:28:96:4b:51:
         53:f7:f1:c7:b8:fc:78:12:b0:9e:9a:16:e5:84:1d:ac:cd:c1:
         ca:0d:5f:38:90:fa:d3:83:df:c4:69:f4:d9:ad:1a:54:b6:4d:
         5f:55:11:6d:eb:92:ec:ef:93:e6:83:ab:94:2e:2c:fb:52:f1:
         44:7f:48:74:f7:a9:3a:9c:5c:b8:6f:70:8b:ef:3e:56:ab:e4:
         93:26:9b:28:15:3f:9b:65:35:9d:51:f9:54:b0:08:1f:5e:bb:
         95:70:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:45:09 2026 by rpki-client