Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
File:                     kw3fQQEGkDvrmRnJm94BY4cGVa4.mft (raw, json)
Hash identifier:          qCgeoOQBgTTua48Vb1XnfIKBXOPGjjJUyV7DXRSxsMM=
Subject key identifier:   DC:D8:68:23:52:89:1E:A0:3C:25:84:0B:75:A0:70:05:42:DC:59:6F
Authority key identifier: 93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE
Certificate issuer:       /CN=A9198553/serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
Manifest number:          014F
Signing time:             Thu 15 Oct 2026 06:19:23 +0000
Manifest this update:     Thu 15 Oct 2026 06:19:23 +0000
Manifest next update:     Thu 22 Oct 2026 06:19:23 +0000
Files and hashes:         1: kw3fQQEGkDvrmRnJm94BY4cGVa4.crl (hash: AvxKAUYw+bfNA0of5hMxSrjm/91DbwV+zAEprSUJZU4=)
                          2: B56BC994E18A11EF94F99968C4F9AE02.roa (hash: gMKROOsdZBai7uwNPJMhA7wmGBXyz5SGNbYDb5CcdnA=)
                          3: 854C34B410A611F1B36A7FF1393D8C67.roa (hash: T+es4R7Kz78aarIocXiX4PtIykpBJj/m83J7r+F3puc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl
                          rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 06:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198553, serialNumber=930DDF410106903BEB9919C99BDE0163870655AE
        Validity
            Not Before: Oct 15 06:19:23 2026 GMT
            Not After : Oct 22 06:19:23 2026 GMT
        Subject: CN=6ad0706b-5a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f8:bf:7f:5e:1e:fe:7a:1c:2e:51:bf:96:4c:
                    b8:91:30:79:4b:a4:26:7a:17:b3:36:84:16:a3:49:
                    5f:bd:b5:88:16:f5:33:53:e9:30:a7:1e:f2:d8:4a:
                    22:66:aa:24:55:0d:30:c8:b2:1c:a7:12:7c:79:32:
                    29:02:85:83:86:d1:8c:7c:8e:ec:40:e0:e5:4b:3a:
                    23:e6:de:e7:be:d5:d9:b5:6a:0a:f8:e3:11:8c:7d:
                    1d:06:37:77:9c:f9:95:97:86:80:8c:d9:5e:54:91:
                    f3:a2:03:8d:d8:13:22:e9:36:68:14:22:a2:ca:5a:
                    e7:b1:b7:2b:72:48:67:2d:be:c2:f4:eb:0c:19:6d:
                    0d:12:2d:22:59:d2:fa:fd:22:42:9b:11:a0:57:88:
                    14:fa:7d:19:9b:c2:16:0c:a5:9f:24:8a:99:1b:f7:
                    b4:07:cb:08:24:f6:53:05:50:d9:2e:c6:e7:58:0c:
                    97:31:11:7c:c2:6f:74:bb:74:f4:6d:44:7a:e3:af:
                    cf:66:19:79:6c:9f:b3:9e:07:51:52:b1:a0:9c:cc:
                    7d:c2:22:e1:c7:fc:c0:bb:0a:69:2c:d3:d2:5e:0f:
                    8f:bb:70:ea:be:d6:77:08:4e:74:15:dd:82:e2:11:
                    50:8e:86:ec:55:02:17:bc:4b:b7:74:fb:58:fc:5b:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:68:23:52:89:1E:A0:3C:25:84:0B:75:A0:70:05:42:DC:59:6F
            X509v3 Authority Key Identifier:
                keyid:93:0D:DF:41:01:06:90:3B:EB:99:19:C9:9B:DE:01:63:87:06:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kw3fQQEGkDvrmRnJm94BY4cGVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198553/A59BFFE4D2ED11EF8DEE5120C4F9AE02/kw3fQQEGkDvrmRnJm94BY4cGVa4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e1:57:d3:cd:cd:8b:c8:a2:aa:32:d3:74:65:90:18:fa:3a:
         ce:bb:29:b6:4e:8a:fd:33:cd:71:7a:6a:f3:f6:29:6f:11:cb:
         f1:0b:3c:d2:93:00:82:7e:b1:ab:77:df:f2:ed:9f:77:15:c9:
         6d:73:f5:d1:15:60:61:4d:e5:da:52:5f:4d:e9:60:f8:cd:27:
         61:a1:c8:0c:37:31:c9:ff:66:62:f6:cf:7c:24:c9:54:d2:e9:
         b9:d5:0e:93:17:b2:5a:c7:b5:7b:00:cc:d6:c3:60:40:5a:58:
         d0:a3:d0:57:fd:f5:65:d2:47:81:68:de:42:fb:aa:72:32:ab:
         78:78:2a:af:3d:72:e6:24:20:be:d0:4d:06:ad:36:e8:bd:0a:
         00:50:6b:77:1a:cf:9b:63:f9:25:c6:de:42:35:0d:87:86:0f:
         c7:4b:dc:f4:5b:32:ce:1e:7c:63:4e:31:17:2e:be:74:ad:79:
         9f:08:23:13:28:95:1c:f9:13:a7:e9:a4:ae:bc:f7:35:39:9f:
         dd:80:01:85:c7:b8:46:a9:ba:d4:e4:ae:5d:57:fd:44:24:e8:
         be:74:7d:1f:46:25:40:a5:08:34:4a:91:ea:14:a7:0a:18:4e:
         da:62:42:35:40:03:36:77:89:00:dc:6b:6e:94:7c:ae:74:21:
         d9:61:93:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 00:11:22 2026 by rpki-client