Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File:                     aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier:          SzwZwZ5RAp+jcaZKWAZ8Wz+5jwZsSQO2tHXDn+ouO9U=
Subject key identifier:   50:45:90:F5:8F:6F:62:BD:5F:37:92:58:73:43:09:C0:03:E0:1E:7F
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer:       /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number:          0132
Signing time:             Fri 09 Oct 2026 06:19:42 +0000
Manifest this update:     Fri 09 Oct 2026 06:19:41 +0000
Manifest next update:     Fri 16 Oct 2026 06:19:41 +0000
Files and hashes:         1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: a8+9ZlVHeOpnQJbnBDlNjSib0oP7sUXT/+E/DS+RfYU=)
                          2: 56AF0502E0F211F0800F01165C6F56BC.roa (hash: NYzWyGk9uhD9n+TL3gb/PLvk/rkZN6N8fMngM8GFBro=)
                          3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: 8V0+YqoT9Ygy2j3FGJzEb49JAt6w8WpTb74g+XVKFNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
                          rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
        Validity
            Not Before: Oct  9 06:19:41 2026 GMT
            Not After : Oct 16 06:19:41 2026 GMT
        Subject: CN=6ac8877d-55ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:8f:c6:b6:43:86:09:d3:73:f3:e3:79:fd:
                    5d:aa:81:a5:2b:71:1f:5a:30:2b:f9:01:c0:fd:57:
                    82:f4:23:a1:64:5b:6d:72:09:1a:55:02:b3:1f:38:
                    c7:e2:a1:33:6f:7c:6d:79:ca:fd:1e:02:a0:3b:a6:
                    0b:7c:3b:48:b8:31:81:46:34:08:bb:46:79:c0:26:
                    8d:4a:59:4a:40:4d:00:db:d1:44:3a:11:aa:4f:c0:
                    10:c1:29:30:6a:19:9d:79:0a:2f:d9:f6:49:03:c3:
                    ce:05:6d:b8:1b:99:e3:1a:bd:94:40:2a:65:9e:9d:
                    9a:2c:e6:eb:d6:73:8d:bf:5a:95:b4:0a:8e:ae:ce:
                    b8:ff:6f:0d:6f:84:3b:86:60:4d:49:9f:13:d8:4e:
                    03:e4:90:6a:09:92:27:b7:31:92:3b:15:1d:38:7e:
                    1c:43:e9:52:c4:6f:ff:7f:5e:ad:ef:fd:2d:4d:d9:
                    6b:ee:b5:50:88:36:2d:11:df:ef:64:35:bb:d8:01:
                    9a:ec:f3:71:ad:07:02:2b:76:24:e9:53:81:71:ee:
                    7d:b8:70:45:f1:8c:73:87:15:36:90:33:6c:d9:23:
                    eb:42:8c:df:78:fe:2d:43:1b:5b:b7:5f:ff:2f:70:
                    2c:5e:03:4e:2c:55:0c:df:40:e1:95:c2:5d:3d:07:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:90:F5:8F:6F:62:BD:5F:37:92:58:73:43:09:C0:03:E0:1E:7F
            X509v3 Authority Key Identifier:
                keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:37:42:2b:dd:52:c1:06:8c:47:15:2d:1c:6e:0b:f4:e4:45:
         71:71:42:01:7c:40:75:a0:b7:8c:6e:78:1d:5e:9c:31:5c:ca:
         6a:d3:5e:e4:74:88:81:81:ab:de:68:3b:e6:a4:eb:a5:c2:17:
         b2:56:fe:6b:6a:f5:b3:ea:ee:0c:8d:d1:ab:a3:55:bd:af:3a:
         fb:d1:1a:0c:70:73:12:50:f4:53:f7:26:ec:63:4d:f9:7d:a5:
         5a:f1:56:7f:23:60:30:a6:8d:75:55:aa:21:83:17:0f:8f:bd:
         ad:44:3a:95:d1:5e:fe:27:cb:11:d1:ec:b5:3e:a1:24:66:61:
         23:96:90:97:f7:f1:0c:c7:da:f9:89:10:84:99:f8:39:8e:21:
         a9:1d:8b:7e:a7:99:dc:2d:6f:9b:bc:b7:26:6e:ac:3e:51:dd:
         41:4e:e3:0e:c3:17:43:f5:46:95:17:fd:11:27:f5:64:3f:fa:
         85:b3:1f:c6:31:42:4e:0a:9a:bb:fa:7a:5f:76:ff:cf:94:42:
         85:e5:bf:c9:1c:ad:97:51:2d:77:a8:4c:d4:57:bc:64:48:61:
         9a:7c:98:c5:38:7b:ec:0a:8c:85:ce:8e:21:6d:79:cf:c0:6a:
         80:4d:e7:2c:04:86:da:42:3f:45:47:2c:7c:72:92:4f:8c:eb:
         e8:ce:4c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:26:08 2026 by rpki-client