Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File:                     _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier:          Ep2QGRzx6lgfFLuR17+5ycgedQRRL4YQwjL4Fz2I+qQ=
Subject key identifier:   2A:DB:AA:F1:C3:7D:43:E9:BE:6A:3D:63:E0:AB:17:4F:E5:1A:98:BD
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       0E2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number:          0DE0
Signing time:             Sun 20 Sep 2026 17:55:43 +0000
Manifest this update:     Sun 20 Sep 2026 17:55:42 +0000
Manifest next update:     Sun 27 Sep 2026 17:55:42 +0000
Files and hashes:         1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: XYuAahwHQMpMITSsrMFK1+sEz/lvUv2uHccUZG73360=)
                          2: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
                          3: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3630 (0xe2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: Sep 20 17:55:42 2026 GMT
            Not After : Sep 27 17:55:42 2026 GMT
        Subject: CN=6ab01e1f-8365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:0d:7e:fc:85:87:18:42:2c:cb:69:6c:8c:
                    78:61:63:d9:45:38:5d:5a:0d:1f:5f:23:e1:9e:e4:
                    00:91:6d:5b:61:2a:50:60:72:9b:8d:c8:42:d5:0e:
                    9e:26:99:53:14:32:29:1a:b9:a6:1d:51:73:60:92:
                    0f:e6:70:1d:9a:07:35:ea:86:00:90:2c:7d:f8:31:
                    02:69:21:ce:32:68:41:38:0a:40:a0:69:1e:94:61:
                    7e:ee:b2:29:95:f0:b7:29:37:c2:75:bc:ce:e2:ff:
                    d6:6e:9e:85:11:54:64:ac:c0:7f:18:64:85:83:25:
                    1d:d1:73:15:fa:3f:14:61:d3:b2:7b:74:a0:7a:9e:
                    af:b6:bf:5c:5b:9c:1d:e0:ef:64:6f:b2:f9:57:14:
                    6e:c1:33:d5:3b:81:2c:58:a1:b3:f0:7d:a7:a1:e5:
                    fa:0f:83:c8:4b:00:61:69:2a:f2:8c:07:d7:72:70:
                    95:fd:9e:50:19:5d:21:c9:2b:00:6e:01:88:35:b3:
                    e2:87:86:02:5d:f6:f4:89:ce:f9:a6:07:e4:0d:ea:
                    df:9a:76:91:68:56:d0:fc:22:2a:ff:14:1e:74:0e:
                    f2:2c:23:7e:a2:82:13:4b:6a:ba:48:2d:45:1f:8f:
                    90:6d:ae:07:a5:38:6e:92:4d:1a:39:07:b5:4d:a0:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DB:AA:F1:C3:7D:43:E9:BE:6A:3D:63:E0:AB:17:4F:E5:1A:98:BD
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:dd:90:c0:2f:57:91:8e:a7:de:a0:8c:90:71:3c:7d:cd:
         b8:9d:21:9a:ed:fe:46:3f:39:64:eb:a9:98:fb:a7:e9:eb:19:
         be:08:8e:fd:e1:a1:93:6b:2d:ce:0d:a3:ea:80:7d:8c:ef:b4:
         0d:3a:14:50:6a:ae:a6:d3:f3:ea:18:52:b9:55:fe:5d:52:5b:
         76:fd:16:5b:a3:01:8b:a1:19:c4:fc:fe:3b:e3:c4:d8:df:c4:
         58:e0:ea:f1:28:47:9d:40:d1:d6:e7:42:72:63:92:19:b4:5d:
         a1:b5:e3:64:1b:db:d3:36:be:9d:71:1f:e2:c2:5e:e6:8c:be:
         2e:c6:fe:5a:ab:bb:5c:05:18:de:86:ea:58:cd:bb:8a:86:82:
         ef:dc:a6:f3:20:1a:ec:c2:21:bb:16:3b:ec:25:09:71:b5:db:
         fe:d4:d3:53:fe:e7:3a:ba:0f:e8:2b:08:27:ea:b6:32:4e:55:
         8e:dd:e9:0a:ba:bb:b9:d9:aa:a5:63:f4:9e:5e:79:1b:2a:36:
         fe:4b:04:ea:55:58:01:48:43:a1:f8:36:75:a2:92:df:d2:2b:
         89:18:a5:ff:80:7a:5e:a4:55:92:37:bc:3a:0c:e5:9f:9d:9e:
         ff:2a:ef:0c:b6:ef:fa:fa:0d:9b:2a:80:97:76:27:b3:e8:eb:
         cf:c9:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:30:52 2026 by rpki-client