Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
File:                     aQwWqX7kC4mmTLMfYqmaVjAILcM.mft (raw, json)
Hash identifier:          Vor0zBIZw7pafG2KHxSivcFbnNf2AkfIMbr2MNKYhCo=
Subject key identifier:   0D:07:7A:22:52:C3:95:5A:39:30:F3:18:C2:5A:72:25:74:39:28:CD
Authority key identifier: 69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3
Certificate issuer:       /CN=A916763E/serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
Manifest number:          0129
Signing time:             Fri 25 Sep 2026 05:49:11 +0000
Manifest this update:     Fri 25 Sep 2026 05:49:11 +0000
Manifest next update:     Fri 02 Oct 2026 05:49:11 +0000
Files and hashes:         1: aQwWqX7kC4mmTLMfYqmaVjAILcM.crl (hash: v1FKTx4rsN7TuiJdAxXAF/quKL1KntjxlJ8rzuPMDUw=)
                          2: 56AF0502E0F211F0800F01165C6F56BC.roa (hash: J2a7iM0fZLEZAccPI28TD717i8txm6lypswcT4NP6zA=)
                          3: 8DD9218AF90211EF99692E40C4F9AE02.roa (hash: YrscevCTgMEXORacALOLXs7H2TVHpxUFXdVBTzVREG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl
                          rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916763E, serialNumber=690C16A97EE40B89A64CB31F62A99A5630082DC3
        Validity
            Not Before: Sep 25 05:49:11 2026 GMT
            Not After : Oct  2 05:49:11 2026 GMT
        Subject: CN=6ab60b57-4b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bb:4a:e4:d5:12:af:6d:41:eb:62:a4:23:33:
                    05:67:c2:ff:c9:cf:51:db:c0:9b:d1:1b:3d:e2:f4:
                    56:29:88:5a:71:e0:17:a9:c8:d9:23:f6:24:d6:79:
                    f2:7e:c3:00:f5:28:15:81:6e:f4:8b:08:a0:a4:af:
                    a7:86:9d:48:54:7c:66:ed:a3:51:34:1f:30:ed:42:
                    10:1f:0e:01:1b:c3:6d:cd:55:e1:15:47:97:13:a8:
                    a7:5f:76:f7:0d:47:58:b1:69:9b:43:54:40:20:f6:
                    d3:a8:96:f9:6d:21:9d:29:1a:7e:31:c4:4d:45:3d:
                    2d:28:d0:38:cd:a8:e1:26:79:16:7a:a9:29:1a:c8:
                    d5:8d:a5:1b:e8:b6:89:65:bc:f5:77:1b:a3:da:d2:
                    ba:81:56:08:be:48:cb:04:fd:c8:d0:6f:3f:be:32:
                    04:06:e0:a8:d9:49:8f:41:a8:6d:5b:c3:15:c7:cd:
                    27:f0:06:39:6f:db:92:43:dc:cf:25:89:bf:f7:04:
                    82:1c:9c:d1:a1:26:9d:a2:a7:0e:98:6b:12:eb:df:
                    0f:6d:d4:38:b2:62:1a:3b:69:66:1c:1e:bc:bf:90:
                    3d:a3:0c:33:f4:85:b3:dd:56:ec:e6:16:db:c1:ea:
                    e7:5f:27:61:98:a0:79:79:16:88:46:6d:1e:58:f8:
                    a8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:07:7A:22:52:C3:95:5A:39:30:F3:18:C2:5A:72:25:74:39:28:CD
            X509v3 Authority Key Identifier:
                keyid:69:0C:16:A9:7E:E4:0B:89:A6:4C:B3:1F:62:A9:9A:56:30:08:2D:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQwWqX7kC4mmTLMfYqmaVjAILcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916763E/85795FECF90111EF9C24C812C4F9AE02/aQwWqX7kC4mmTLMfYqmaVjAILcM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5d:75:2d:33:75:a4:1f:b1:74:86:62:16:ef:ad:66:38:54:
         e2:09:b3:77:71:09:96:e2:ed:0e:d5:5b:84:63:2f:10:83:05:
         38:79:19:94:6d:29:6e:40:22:b1:9f:31:32:8f:db:19:a5:06:
         62:a6:9a:35:64:e7:82:af:da:82:7a:05:46:74:49:ae:ce:b1:
         78:44:c5:c1:61:6f:43:9a:a8:ee:9a:04:ce:50:fe:5e:54:17:
         67:02:04:c9:81:56:7f:db:20:c2:f3:39:5c:ef:c5:26:e4:29:
         1d:a3:6c:b6:40:99:f9:42:b1:19:c4:a7:00:9b:d3:97:b9:5d:
         53:39:d6:6b:09:cd:63:22:ea:a1:1a:e2:62:fb:e2:b0:bd:97:
         e0:f6:ad:cf:13:a3:ee:a1:26:5c:f5:0d:a7:e8:26:0d:72:8e:
         c8:1c:4c:b6:f7:1d:01:35:55:34:54:73:24:43:39:e9:9f:ec:
         7a:23:d0:19:11:41:40:f5:85:1b:cf:4d:d8:13:e7:c6:65:f8:
         d9:54:10:fb:f9:e2:17:4f:1e:8d:c9:4d:38:cf:c9:db:5e:8e:
         51:bf:54:12:17:66:3b:a8:96:57:16:67:7a:46:72:97:ba:b1:
         5b:53:06:29:aa:4b:e8:70:d9:17:85:66:50:88:da:be:00:f9:
         d0:7c:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:14 2026 by rpki-client