Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          8Xs9ndGFPgt1uIM+G/GAyMZPZZ0JcSFGFeb3bWvWbmw=
Subject key identifier:   98:8C:65:71:E8:16:4D:B1:9B:F4:B1:15:0C:DD:3B:4F:51:C8:4B:4E
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       03F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          0364
Signing time:             Sat 03 Oct 2026 01:27:43 +0000
Manifest this update:     Sat 03 Oct 2026 01:27:43 +0000
Manifest next update:     Sat 10 Oct 2026 01:27:43 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: LsKhle1ObOcVUhQ6lrivDHD3rEowxnx5+pDEHX7N+U0=)
                          2: 460770DE8F0411F1812E6F496D11F970.roa (hash: MPHZ4gZ7BUbaXJ4GyjND7xBqAuLWN8we1t6I6nFoW+E=)
                          3: 1B444154BCD811F188A4973A3611F970.roa (hash: Am/sCXyyVDmnL84xWclmgM26GsrBrlnxEcQWKb/ezQA=)
                          4: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=)
                          5: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          6: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          7: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          8: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          9: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          10: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          11: E9A2C6AAAC1711F1AC2C3D313311F970.roa (hash: IUVg4aIeQJz80P8SnnQNdARYWjlA4YkPhCYesR8rZeY=)
                          12: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
                          13: AAFF38CC7CF911F1BF3745CD5DA30FBC.roa (hash: 41180uIkYX6ypunpJR0wZ+Ob3N/HYbkDfmA9Kieuceo=)
                          14: AA65E9CE7CF911F1BF3745CD5DA30FBC.roa (hash: VsVW210rfsi+fEPH7TRhYAoRWgsqSNO0ugQGNB8wDQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct  3 01:27:43 2026 GMT
            Not After : Oct 10 01:27:43 2026 GMT
        Subject: CN=6ac05a0f-83d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:95:0d:f0:b3:92:59:a4:fe:c4:e1:45:b2:
                    1e:af:66:41:2f:e7:93:79:95:8a:a9:41:67:ce:64:
                    ee:c8:50:1d:d8:d8:6c:05:46:86:e7:82:b8:10:82:
                    41:f3:de:2f:77:47:1d:74:d5:c4:7e:97:db:63:ac:
                    39:98:20:24:80:06:70:a7:45:67:e3:6a:36:58:22:
                    75:81:f0:c1:ca:40:21:4b:c2:f6:39:d6:51:08:25:
                    29:1e:1d:7d:fe:b9:35:a9:12:4b:9d:7f:df:d3:0d:
                    42:54:c7:d5:52:d0:2c:c4:72:bf:78:26:00:93:29:
                    18:8b:43:c6:84:80:9d:fd:4e:8f:f3:c1:88:06:fd:
                    3f:95:31:64:cf:a1:00:46:d3:78:ef:54:b7:b8:a7:
                    ff:a0:32:cc:cf:09:10:08:71:5c:f0:76:85:81:6c:
                    b0:3a:d0:68:4c:f3:f4:e7:3b:d8:1e:42:5e:aa:6c:
                    19:7c:be:e2:98:07:3b:cb:8f:fa:f0:b4:2d:b9:ea:
                    66:4f:75:fc:77:b1:9d:fa:88:70:46:0c:0e:7a:41:
                    e6:68:96:cd:18:b2:9a:05:cf:b1:89:51:3e:dd:09:
                    80:bd:53:9b:5b:f0:6d:e6:16:40:5b:d4:07:8e:c9:
                    44:36:d7:e5:b1:2e:b0:39:93:87:4e:5c:48:ac:ab:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:65:71:E8:16:4D:B1:9B:F4:B1:15:0C:DD:3B:4F:51:C8:4B:4E
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4c:24:9b:29:e1:4a:47:19:2a:c0:80:f9:7d:bf:07:97:22:
         1a:9a:96:80:8a:a2:43:39:35:86:3c:6e:01:76:55:ab:04:19:
         bc:0f:3e:bc:00:58:14:f5:39:62:e2:e5:79:da:42:83:77:09:
         b8:60:02:04:70:cb:ec:d1:f9:6a:b0:e5:52:0c:86:62:d5:40:
         d2:82:3c:82:73:a9:6c:a5:5f:58:c7:80:8e:67:8e:3d:1d:3e:
         a5:e5:f6:a1:ed:d5:91:e5:32:3c:0b:16:bf:1b:39:f6:da:55:
         89:d7:dc:e0:42:df:97:20:06:16:81:db:d4:e9:e9:3e:0b:31:
         90:88:f2:01:20:70:12:8a:87:18:4e:6e:be:34:b8:9d:da:5d:
         f3:e9:d8:66:16:d7:32:53:72:1f:87:ba:19:85:4f:7c:ee:93:
         a6:87:1a:db:b6:43:fd:b0:9c:8a:17:3e:35:47:43:b4:3d:f5:
         e6:e6:c4:44:c6:2a:51:a5:22:fa:c7:c6:fe:1c:99:e7:39:db:
         d2:aa:21:fe:3b:7a:a2:0f:42:f7:3f:ae:76:0a:63:1a:64:8e:
         e3:9e:9e:d4:0b:7a:c2:ba:24:32:c5:31:bb:f5:4b:41:82:d3:
         6b:87:e5:12:02:9c:85:07:1f:3d:b5:cc:cd:71:31:51:6c:6c:
         f7:97:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:36:29 2026 by rpki-client