Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          oKW2BXm21TUxzKuWxu4JP3ORqecVhCqTpcNisXxKCzU=
Subject key identifier:   7A:C3:CA:9B:13:75:04:4B:63:72:73:5E:2F:4D:44:6D:2C:F5:6F:A2
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          0369
Signing time:             Sun 11 Oct 2026 01:53:29 +0000
Manifest this update:     Sun 11 Oct 2026 01:53:28 +0000
Manifest next update:     Sun 18 Oct 2026 01:53:28 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: BPn7fwvb67wfIOKR0v5LWwmpDXGX3keOQkd1W4PiPus=)
                          2: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          3: 460770DE8F0411F1812E6F496D11F970.roa (hash: MPHZ4gZ7BUbaXJ4GyjND7xBqAuLWN8we1t6I6nFoW+E=)
                          4: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          5: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          6: 1B444154BCD811F188A4973A3611F970.roa (hash: Am/sCXyyVDmnL84xWclmgM26GsrBrlnxEcQWKb/ezQA=)
                          7: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=)
                          8: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          9: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          10: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          11: E9A2C6AAAC1711F1AC2C3D313311F970.roa (hash: IUVg4aIeQJz80P8SnnQNdARYWjlA4YkPhCYesR8rZeY=)
                          12: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 01:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 11 01:53:28 2026 GMT
            Not After : Oct 18 01:53:28 2026 GMT
        Subject: CN=6acaec18-99ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:58:56:2f:97:48:c6:1f:d8:3b:63:fc:c0:
                    ee:0c:7d:8e:d8:bc:f3:5f:d7:88:01:a1:91:49:20:
                    13:a6:4d:d1:8a:77:f3:5d:8e:cf:e8:10:0b:2b:d2:
                    c7:c8:a5:d9:88:28:1c:66:f6:5a:c0:16:96:58:8f:
                    a3:e4:3d:e3:3b:11:4c:50:bd:ac:09:fe:3c:70:2f:
                    92:92:9c:7d:ac:33:28:9c:45:54:be:b3:cc:ac:89:
                    d2:01:13:8b:ba:e0:8e:f7:a7:c2:f8:d1:cc:78:b7:
                    3e:80:84:80:dc:a4:57:70:92:39:09:a1:ab:c6:71:
                    a1:1a:9d:85:af:0b:fd:8d:30:c8:b2:f9:d1:45:12:
                    85:40:d5:f9:7d:be:82:71:a5:94:ee:61:3c:35:ce:
                    d6:36:77:5e:32:b5:4f:f8:90:3f:ef:a8:22:af:83:
                    2d:6c:30:9b:6e:fe:20:14:ae:d7:c2:f6:e1:e6:57:
                    ff:b8:5f:48:59:b3:e2:be:09:69:35:38:f8:44:23:
                    49:09:07:36:fa:60:71:2b:d9:93:10:ec:6d:2d:c0:
                    da:b0:d0:60:d9:57:c4:8c:a6:e7:5d:91:52:09:ce:
                    5a:63:f2:ca:5d:39:02:3c:ae:c9:e3:b0:c5:07:1e:
                    4c:dd:61:02:ef:16:10:f8:06:f4:0e:d3:98:67:16:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C3:CA:9B:13:75:04:4B:63:72:73:5E:2F:4D:44:6D:2C:F5:6F:A2
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:77:23:2a:23:7b:8e:60:41:d7:88:df:bc:ce:2c:e4:d9:
         33:59:08:f3:e1:c8:40:1c:81:7f:82:83:45:08:59:38:27:77:
         e7:1e:de:cc:88:e7:61:8c:61:31:d8:88:e6:c5:a9:b6:2e:d7:
         d9:9f:70:46:e4:3c:40:fc:32:46:83:76:55:6e:7f:78:b6:e8:
         c6:95:1a:c6:7e:08:91:ba:52:a4:c2:83:df:bf:6b:a9:c8:82:
         cf:20:5e:d7:aa:f6:c7:a8:75:96:84:dc:95:70:7e:77:67:57:
         87:e2:c4:06:cc:ac:a7:32:ba:1d:25:8f:be:72:25:46:75:57:
         dd:e1:d8:4a:1a:ba:d4:12:17:01:56:8c:2c:8b:42:7c:ad:7b:
         09:a1:2a:31:09:b0:f8:e3:84:cd:cf:e5:d9:57:f1:e4:2d:33:
         e1:d2:c7:ed:11:73:c2:08:76:50:9b:3c:16:ac:a3:d2:c4:23:
         b0:d8:88:be:e6:12:c3:19:3e:f1:84:e3:7b:fa:61:b1:6f:47:
         9a:49:2d:85:54:fa:d1:58:c4:5d:f6:ce:35:d8:62:f6:f9:73:
         6a:f9:ae:4b:ef:ea:9d:35:ed:0f:f3:f5:9a:e1:96:ac:d1:5d:
         4a:48:04:dc:77:37:69:e1:a3:ca:7a:c8:75:7c:fd:c7:a2:58:
         26:17:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:18:32 2026 by rpki-client