Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
File:                     Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft (raw, json)
Hash identifier:          zi+Dx7yA8u187D+GavVdTlpdnhlCDuM3X9H9MG3zRJ0=
Subject key identifier:   BF:E9:03:3E:D2:FB:E6:DC:23:F4:14:A2:DD:BA:E3:40:5F:85:F6:37
Authority key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Certificate issuer:       /CN=A918B16C/serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
Manifest number:          3F
Signing time:             Sat 19 Sep 2026 08:39:07 +0000
Manifest this update:     Sat 19 Sep 2026 08:39:06 +0000
Manifest next update:     Sat 26 Sep 2026 08:39:06 +0000
Files and hashes:         1: Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl (hash: 0DGAJv1EJOtN48CqlL0+R/24pREQyrwTSg/iGjgSXbI=)
                          2: b3URnCNopdBPb5-olOwDCxwCfu0.asa (hash: FhVtU0L7B5W6b9aiDhTNFv0YOjbDTC+YisKb8AYU78U=)
                          3: 5717F26C76DC11F1B27CFF067EA30FBC.roa (hash: UnxraCxdQ4lE3he3/K4k1PrHUY4Y6JC7kU/SixWY2p8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
        Validity
            Not Before: Sep 19 08:39:06 2026 GMT
            Not After : Sep 26 08:39:06 2026 GMT
        Subject: CN=6aae4a2a-db6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:c2:0e:c0:9c:b2:f7:4f:d5:8d:aa:20:1d:
                    1c:fb:6f:66:31:7b:7e:5a:56:c7:1e:0d:50:43:78:
                    41:1d:e6:7c:5f:52:8e:65:83:43:61:c9:8a:79:10:
                    05:10:8e:85:0f:ab:68:00:ee:f2:23:72:e9:d9:8d:
                    5e:5c:27:38:5b:3d:b9:63:1c:d5:4f:27:e0:d7:f1:
                    6e:ec:78:c3:6e:26:98:37:dc:c9:43:d9:94:f0:f2:
                    32:c5:a3:8f:4e:d9:2f:32:c8:46:c7:1c:ae:06:7e:
                    7f:ed:12:ed:3b:d7:1f:a5:ab:63:0f:52:46:07:7f:
                    35:84:e1:45:d4:f3:7a:40:5d:e1:23:5b:ee:f9:5c:
                    82:48:44:36:d2:0b:a0:37:4b:b9:14:bc:d0:e0:a8:
                    5f:18:34:32:96:29:86:9c:25:c9:fa:a3:40:c7:69:
                    87:73:bc:aa:74:2f:8e:42:19:7c:a3:a4:bf:cc:82:
                    69:0a:cd:d6:5c:1c:0d:39:e2:f2:28:54:6c:a7:29:
                    09:57:94:4d:44:3d:99:2d:cd:ff:28:e4:94:de:aa:
                    14:d3:8b:89:41:05:12:1f:f3:9b:28:48:ef:fa:22:
                    18:02:29:47:a4:cd:25:18:69:9c:02:27:86:b6:68:
                    9a:7d:9f:70:60:f3:93:1e:f2:88:c5:d7:a9:90:70:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E9:03:3E:D2:FB:E6:DC:23:F4:14:A2:DD:BA:E3:40:5F:85:F6:37
            X509v3 Authority Key Identifier:
                keyid:43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d6:ce:f3:68:d2:fe:61:9e:ec:75:4d:e6:58:b9:25:e1:d8:
         09:50:c5:67:89:3b:2b:88:4c:f5:32:da:22:49:8a:55:06:3e:
         0f:aa:d6:06:06:74:35:ca:c3:66:10:f5:a9:ff:36:8c:45:41:
         76:79:26:94:4e:83:8e:7d:a1:7d:a0:4c:f1:7f:37:17:c3:d0:
         77:d1:c6:9b:18:a2:73:a1:b5:93:2e:0b:eb:24:7b:2e:9f:8b:
         cd:81:43:94:bf:61:a1:b9:5f:bb:c2:c8:f9:45:e9:02:18:0c:
         aa:b7:30:ea:0e:64:b3:e5:61:95:39:5e:d4:1d:3c:69:f7:e6:
         31:3a:d2:71:ef:11:57:ea:55:f5:a0:66:0b:63:cb:fc:68:ef:
         bb:67:94:f8:fb:fb:c0:28:c2:ce:33:16:1a:59:30:49:2d:af:
         23:60:ef:17:60:01:c0:62:b6:bf:23:2f:99:dd:91:56:ee:b1:
         d4:96:81:4f:62:69:91:73:83:de:95:ca:93:c8:1f:13:aa:79:
         2e:b2:b7:84:74:ca:70:8a:d7:bc:b9:31:8c:0a:c1:9b:06:be:
         70:76:a0:e6:5b:39:1a:3e:21:c1:c1:32:ac:58:21:75:68:c3:
         e5:6a:c4:f9:77:64:d3:de:30:8c:d1:7b:71:20:eb:61:d5:43:
         b8:d8:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:46:56 2026 by rpki-client