Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File:                     IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier:          IDP8jbeYKjaQ02y20U0lIyDPp8o6yW5AYrustALfXQE=
Subject key identifier:   CA:AC:DE:1C:B9:AC:B8:A8:48:8F:8B:68:EB:F1:5F:C3:71:7D:3E:FD
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer:       /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial:       0C5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number:          0C38
Signing time:             Sat 10 Oct 2026 18:49:43 +0000
Manifest this update:     Sat 10 Oct 2026 18:49:42 +0000
Manifest next update:     Sat 17 Oct 2026 18:49:42 +0000
Files and hashes:         1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: RsKE4XI4Mg7Dl5Zyw1ykeXnivm5lRRocjiB3ve9bpWo=)
                          2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: EolASXb1KltLVGZYGCtQ/6/WNNv9j4lXlevPtfmwzdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
                          rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3167 (0xc5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
        Validity
            Not Before: Oct 10 18:49:42 2026 GMT
            Not After : Oct 17 18:49:42 2026 GMT
        Subject: CN=6aca88c7-b2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:75:db:38:59:30:a7:5a:fc:0a:88:ab:96:
                    d3:66:52:5e:59:af:5c:77:43:1d:0b:97:d8:45:04:
                    b2:db:01:bc:1b:6f:b0:35:96:19:5f:93:5c:e7:36:
                    bd:b3:6f:e1:5e:cd:14:00:86:87:e7:87:f8:90:f6:
                    ad:00:c7:f8:e2:49:c0:ee:3e:c0:bf:0b:28:2c:b1:
                    ae:68:37:20:a8:14:54:4b:40:c9:70:71:af:95:57:
                    27:2b:0f:96:d0:cf:02:72:76:aa:b9:6a:4b:03:e4:
                    00:0b:8d:fc:a1:3f:cd:f5:d1:d4:f2:d0:65:c6:59:
                    7f:e3:43:da:17:25:23:a9:63:ea:7d:83:c3:62:0b:
                    fb:22:28:1f:95:25:c4:9c:03:77:f6:ba:fb:85:d6:
                    60:36:3e:d5:d8:77:e7:00:33:a0:37:c3:ba:40:fa:
                    c7:70:93:a8:75:10:03:4c:72:1b:8f:5a:de:7b:90:
                    7d:69:69:1a:f3:10:61:3a:78:46:98:0e:8c:f0:3c:
                    43:78:86:8e:9e:73:59:a4:97:ad:9c:f0:27:e3:23:
                    29:b3:bf:93:e1:99:11:00:82:40:b6:7f:2c:6f:64:
                    6c:ce:a0:84:a4:9e:02:92:ee:f1:9e:27:56:96:8e:
                    73:02:77:0a:c6:04:4a:94:14:bc:9a:d9:39:a9:4b:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:DE:1C:B9:AC:B8:A8:48:8F:8B:68:EB:F1:5F:C3:71:7D:3E:FD
            X509v3 Authority Key Identifier:
                keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:79:20:1e:c8:a3:6e:48:fd:1c:1d:3e:01:a0:07:e0:f4:
         1f:25:42:6a:36:db:e2:49:05:87:13:45:5e:f7:96:ed:c5:b4:
         7a:c6:5c:d1:b7:c6:1f:61:97:3b:b4:05:d3:f4:05:ac:e3:07:
         50:cc:a0:ca:04:41:a6:59:1f:8f:4d:4a:2a:3f:8e:de:2d:1e:
         19:ed:66:3b:dd:1c:d8:52:cd:f2:5b:50:75:23:32:9b:ab:3b:
         be:d2:bf:02:b4:e4:98:6b:1c:81:7a:ef:58:dc:4a:71:18:ff:
         df:f8:46:24:b2:34:28:7e:a8:57:a7:f7:b4:e4:a8:3a:c3:59:
         41:8c:bf:07:d9:21:d3:50:53:b1:1d:06:25:d4:04:9d:39:2f:
         be:2a:48:00:51:88:82:09:d2:1b:da:29:83:b8:2d:d0:1d:4f:
         4b:e5:a0:13:64:22:52:46:a6:dc:79:62:78:8c:a7:6b:88:d4:
         15:4c:f7:5a:51:1f:48:d0:fb:a4:35:f9:c2:2e:34:0d:a6:02:
         58:a5:d1:b2:03:23:72:f3:81:e3:bf:7a:67:4f:c4:48:a5:81:
         6e:74:44:9a:2f:4c:20:c8:27:34:86:e2:92:27:16:f0:01:5a:
         42:f1:3c:d8:90:4d:56:59:49:58:01:da:5e:0a:d5:33:61:5b:
         70:b9:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:52:32 2026 by rpki-client