Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
File:                     u3QQVrccdV0D-5zyFKQSTKTzdgw.mft (raw, json)
Hash identifier:          ewXblx48Fcq1um5LOzTV60Bnt/WlegC3S5Ly3yryeIw=
Subject key identifier:   FC:98:6D:DC:DF:20:62:2B:ED:84:81:21:AD:F9:29:B0:19:EE:69:89
Authority key identifier: BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C
Certificate issuer:       /CN=A916A0AA/serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
Certificate serial:       0D18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
Manifest number:          0D0C
Signing time:             Sun 04 Oct 2026 18:24:02 +0000
Manifest this update:     Sun 04 Oct 2026 18:24:02 +0000
Manifest next update:     Sun 11 Oct 2026 18:24:02 +0000
Files and hashes:         1: u3QQVrccdV0D-5zyFKQSTKTzdgw.crl (hash: MqAvD8tUx3HBxbWtDcz0LicDcJLJe+8/PsHSUno76OY=)
                          2: 5AD6AAFE0F1111EA932F3E45C4F9AE02.roa (hash: 1c7oqXTwOjBxpWnURCwd9ROwsARCXBKMI1YgV6KP1z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3352 (0xd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AA, serialNumber=BB741056B71C755D03FB9CF214A4124CA4F3760C
        Validity
            Not Before: Oct  4 18:24:02 2026 GMT
            Not After : Oct 11 18:24:02 2026 GMT
        Subject: CN=6ac299c2-c775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:9a:c2:41:7a:ec:5e:4b:97:c7:c2:dc:47:
                    6c:aa:b6:05:3f:8e:aa:b4:44:fa:8b:a6:af:34:59:
                    da:40:f2:68:bd:b5:d6:b6:8d:ea:2f:b3:ca:be:b1:
                    66:f3:99:63:de:54:8e:f7:47:60:9a:6d:c3:fd:82:
                    6a:f4:8d:6b:27:f3:b1:e9:8b:83:9e:ec:91:42:68:
                    e8:bb:a6:62:8b:94:27:aa:44:b9:78:08:fd:c7:05:
                    d4:c1:f6:fd:4b:62:6e:e9:d8:92:b8:fd:cc:ea:f3:
                    1f:02:f6:cd:25:bb:2b:c5:a1:c9:4a:58:ad:dd:34:
                    f0:0c:69:63:e4:ce:14:2c:3d:bd:93:ef:97:3a:90:
                    92:b6:ba:cd:46:f3:0d:88:97:6b:80:e9:09:7c:f8:
                    bb:53:99:71:ed:7d:26:0e:27:88:f2:21:c4:02:35:
                    46:68:e9:ef:48:5a:6d:39:54:e6:22:0d:1f:35:fb:
                    8a:80:04:10:f5:fb:0e:3e:22:2f:a6:88:89:53:77:
                    ce:e1:b5:c0:de:91:e3:bc:78:03:0e:95:21:78:c0:
                    ec:a5:a5:15:7a:ea:b3:e4:4e:1f:0a:9e:9d:b6:60:
                    f4:49:9b:3e:08:22:10:ea:27:6e:c4:d4:38:9c:b5:
                    d7:c1:57:5e:e5:2d:aa:41:66:fa:7f:2c:98:8c:64:
                    76:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:6D:DC:DF:20:62:2B:ED:84:81:21:AD:F9:29:B0:19:EE:69:89
            X509v3 Authority Key Identifier:
                keyid:BB:74:10:56:B7:1C:75:5D:03:FB:9C:F2:14:A4:12:4C:A4:F3:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u3QQVrccdV0D-5zyFKQSTKTzdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AA/6A4FFC7A0F1011EAA969FE43C4F9AE02/u3QQVrccdV0D-5zyFKQSTKTzdgw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:77:fc:bd:3d:26:7a:1e:fc:c7:a5:a6:96:ec:76:c6:bd:d1:
         c1:7d:6d:2c:a5:1b:8f:5d:b9:e2:7f:f5:06:1d:fb:3d:63:c3:
         04:83:1f:e9:90:b7:9c:df:90:c3:01:65:0e:78:0d:f8:a4:2e:
         09:64:f3:f8:25:c2:d5:9d:b5:06:5c:26:99:a0:5a:ee:80:c0:
         54:f1:3d:58:9d:40:df:c4:69:f6:94:45:66:06:0f:9a:2b:42:
         dd:65:18:fd:37:60:8c:ab:6e:66:24:8f:84:21:85:37:9b:f1:
         0d:b8:1a:a0:8e:2c:96:12:68:90:75:94:e9:89:e0:35:99:3a:
         bb:52:37:92:07:56:20:03:21:df:ce:d1:7b:94:e5:dd:6c:3c:
         94:fa:47:92:af:b3:76:c4:93:b6:18:93:75:75:f5:29:bf:cf:
         f1:aa:c4:44:6a:15:6f:74:68:48:a1:c5:a7:83:89:6a:ac:cd:
         0c:84:1d:07:64:af:d3:9d:17:91:a2:74:e0:4a:91:69:cf:f0:
         04:ed:99:bf:1b:23:e1:03:f1:0b:18:8d:57:e4:58:68:93:ba:
         42:6d:af:23:1c:82:83:28:4a:52:a3:a4:8b:f4:1b:72:00:53:
         a6:a3:c8:71:e0:24:dd:f7:c7:6d:f3:89:1a:82:53:2f:42:05:
         1e:45:86:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:50:39 2026 by rpki-client