Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
File:                     Q2NMcBuh8e_Oj1aqatHbKUWh258.mft (raw, json)
Hash identifier:          B3OePOVuzyUo5P5+qkzdfo96WhNKfD8ObrvflsehIHA=
Subject key identifier:   0B:BA:63:2D:5D:99:D1:9B:BE:61:D0:5B:84:29:E6:64:3E:8E:93:5C
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Certificate issuer:       /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial:       01AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
Manifest number:          01A2
Signing time:             Sun 11 Oct 2026 04:49:32 +0000
Manifest this update:     Sun 11 Oct 2026 04:49:32 +0000
Manifest next update:     Sun 18 Oct 2026 04:49:32 +0000
Files and hashes:         1: Q2NMcBuh8e_Oj1aqatHbKUWh258.crl (hash: Mo9OiIxQATUNPAGvVB5Vldb0YEqTs/jT/SpIjsrnPUw=)
                          2: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (hash: POI2gtWNO02fmkeuPIBgEnMpIQB9HpbIZTb9ltFjGKA=)
                          3: ABA45B1A740611F0B304387CC4F9AE02.roa (hash: NoRAYMKDz7ruenjU4EI/k6TTzNlrpDAvnAEzcechXd0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
        Validity
            Not Before: Oct 11 04:49:32 2026 GMT
            Not After : Oct 18 04:49:32 2026 GMT
        Subject: CN=6acb155c-529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c5:9a:1a:c6:36:14:ba:44:9e:0e:82:9e:74:
                    45:82:f4:35:50:0c:77:15:5b:98:02:83:39:3d:59:
                    27:ac:49:e8:07:ce:df:3a:ed:d1:0d:9c:fe:57:d4:
                    b9:58:38:07:ad:b2:1c:1d:2f:25:11:ea:e3:46:91:
                    a8:ce:22:32:00:1c:11:56:1e:ea:de:5a:76:f2:32:
                    8c:a0:f4:e9:0d:c6:6f:f1:49:1c:de:b3:3c:4d:eb:
                    d1:ed:01:5b:62:4d:f8:b4:47:ab:29:5f:ef:8e:bc:
                    48:42:a4:2f:50:b6:f2:23:64:0d:11:f0:49:52:b3:
                    d2:94:9d:5c:0f:8f:12:1c:f1:23:9c:c6:7f:76:4d:
                    a4:11:b7:fa:4e:94:02:3e:36:38:cc:89:75:d4:88:
                    60:2e:c7:e5:b9:21:51:0e:d0:30:62:d3:4c:41:a4:
                    3d:ac:98:8d:bb:e4:26:c9:08:9f:b8:ce:7d:34:51:
                    2e:09:46:22:c1:aa:bd:5b:d2:43:70:67:e0:53:22:
                    ef:67:98:28:18:3b:58:8f:15:61:7a:55:66:c8:a8:
                    43:b2:4a:ad:6f:4f:bd:11:25:d1:d9:4f:9b:34:a5:
                    91:a1:a2:ab:51:b4:87:be:8c:54:30:37:6e:c9:a4:
                    7a:c4:f0:31:61:45:87:87:ce:f1:d0:e8:6d:1f:5c:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BA:63:2D:5D:99:D1:9B:BE:61:D0:5B:84:29:E6:64:3E:8E:93:5C
            X509v3 Authority Key Identifier:
                keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c7:40:7f:c2:8a:da:47:bc:24:7e:a0:d4:ee:2a:82:aa:6e:
         b9:bf:9c:a5:b7:1d:fe:fb:f1:48:f2:c7:6d:cc:38:09:96:b1:
         3a:f3:14:f8:9f:81:ac:be:c7:8e:d4:a1:26:a9:a9:57:49:03:
         1d:0c:be:f4:d5:77:fe:02:f5:11:25:8b:aa:66:2d:8b:86:c2:
         60:5c:96:7f:cf:c6:f4:5e:fd:00:1b:0d:fe:4b:5c:20:9a:65:
         86:5a:4c:59:8c:a9:a5:bc:46:9f:a9:6d:6b:6d:69:33:92:b4:
         54:12:e0:1e:e9:0f:63:b6:38:da:9f:74:86:d1:25:01:99:7d:
         7c:7c:3d:c9:59:a4:0b:58:a6:99:03:69:33:39:97:8c:1c:89:
         c4:e6:73:21:98:ce:f2:2f:a9:f6:e1:2d:24:ac:20:96:37:ca:
         67:c2:40:71:9d:f5:cd:1b:0c:a4:ea:d0:3d:9f:7d:23:41:41:
         73:71:77:df:ba:e5:98:bc:38:e5:d3:59:64:1b:af:ab:5d:9f:
         2d:dc:25:40:36:cd:57:f4:59:d0:31:90:33:d2:8a:57:8b:39:
         71:ad:49:25:57:1b:a9:11:a3:66:2e:92:c5:fa:f7:13:7b:be:
         73:d8:f6:1e:d0:24:2c:3f:64:f6:89:61:c5:38:da:20:53:cb:
         ae:5a:06:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5
NDVBMURCOUYwHhcNMjYxMDExMDQ0OTMyWhcNMjYxMDE4MDQ0OTMyWjAYMRYwFAYD
VQQDEw02YWNiMTU1Yy01MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcWaGsY2FLpEng6CnnRFgvQ1UAx3FVuYAoM5PVknrEnoB87fOu3RDZz+V9S5
WDgHrbIcHS8lEerjRpGoziIyABwRVh7q3lp28jKMoPTpDcZv8Ukc3rM8TevR7QFb
Yk34tEerKV/vjrxIQqQvULbyI2QNEfBJUrPSlJ1cD48SHPEjnMZ/dk2kEbf6TpQC
PjY4zIl11IhgLsfluSFRDtAwYtNMQaQ9rJiNu+QmyQifuM59NFEuCUYiwaq9W9JD
cGfgUyLvZ5goGDtYjxVhelVmyKhDskqtb0+9ESXR2U+bNKWRoaKrUbSHvoxUMDdu
yaR6xPAxYUWHh87x0OhtH1yJhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAu6Yy1d
mdGbvmHQW4Qp5mQ+jpNcMB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB
MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy
NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTQ5Qy9ERTg3MThDNDRBMzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhl
X09qMWFxYXRIYktVV2gyNTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATcdAf8KK2ke8JH6g1O4qgqpuub+cpbcd/vvxSPLHbcw4CZaxOvMU+J+BrL7H
jtShJqmpV0kDHQy+9NV3/gL1ESWLqmYti4bCYFyWf8/G9F79ABsN/ktcIJplhlpM
WYyppbxGn6lta21pM5K0VBLgHukPY7Y42p90htElAZl9fHw9yVmkC1immQNpMzmX
jByJxOZzIZjO8i+p9uEtJKwgljfKZ8JAcZ31zRsMpOrQPZ99I0FBc3F337rlmLw4
5dNZZBuvq12fLdwlQDbNV/RZ0DGQM9KKV4s5ca1JJVcbqRGjZi6Sxfr3E3u+c9j2
HtAkLD9k9olhxTjaIFPLrloGLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:29:02 2026 by rpki-client