Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
File:                     jZcXcn1ujusjgHsxPAWNA1b_4WI.mft (raw, json)
Hash identifier:          qdz0z3RR4MNmFVilqL+W0c1w2o2UeOLg1JHVnBx/nW8=
Subject key identifier:   46:37:BD:84:B6:5A:0D:D4:35:F2:00:42:30:BD:C7:AC:9D:01:71:71
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Certificate issuer:       /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial:       01A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
Manifest number:          0198
Signing time:             Sat 03 Oct 2026 04:59:35 +0000
Manifest this update:     Sat 03 Oct 2026 04:59:35 +0000
Manifest next update:     Sat 10 Oct 2026 04:59:35 +0000
Files and hashes:         1: jZcXcn1ujusjgHsxPAWNA1b_4WI.crl (hash: emwaOd83smFFcobC4B9zvx9qP8HAVFvPDDPKggbjTIw=)
                          2: A7E24C00ABF411F0A0B37937C4F9AE02.roa (hash: xMQKsfdQQL8L2AvVo2XrnBPedevIGVMZCKZgRkrkDnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
                          rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
        Validity
            Not Before: Oct  3 04:59:35 2026 GMT
            Not After : Oct 10 04:59:35 2026 GMT
        Subject: CN=6ac08bb7-9358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:22:d1:a7:db:18:0b:71:f7:61:22:53:67:
                    9e:c1:5e:66:63:df:31:4f:40:a4:61:4f:09:59:95:
                    16:36:a6:18:75:e3:b3:3d:99:75:ef:fa:b9:2c:62:
                    fd:b2:a3:31:51:f2:f7:02:73:36:cc:15:1a:81:e3:
                    79:5b:25:80:79:cd:05:ce:37:7c:42:92:00:b3:1a:
                    56:be:92:0e:7f:f4:c2:b1:83:a7:39:a9:b6:ed:c5:
                    37:6d:c3:b3:be:e6:60:85:0f:a5:b8:3c:ec:28:8f:
                    2b:b9:97:eb:37:d9:9b:61:ac:20:29:9c:70:79:21:
                    23:e6:56:cd:10:c2:61:0f:aa:11:7c:16:ac:6a:22:
                    a7:f6:be:47:93:b3:fc:e2:35:4b:57:54:8b:fc:d9:
                    3b:d8:64:5a:a7:fc:8b:e2:65:85:0d:8b:86:22:6a:
                    bb:cc:5a:35:06:f3:32:2e:36:74:86:a9:e0:3f:98:
                    27:dd:65:d7:78:de:08:f5:5c:a6:78:24:c0:43:91:
                    c5:f1:7c:81:80:f9:57:19:89:c1:1c:d5:e8:9a:cb:
                    7a:03:10:9b:ee:9b:77:7c:5d:87:99:40:3e:95:85:
                    52:47:64:1a:90:2f:2d:b5:37:b1:cf:3e:53:38:2b:
                    2a:1a:f8:13:a5:54:89:0c:7e:60:35:ba:a1:38:59:
                    6e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:BD:84:B6:5A:0D:D4:35:F2:00:42:30:BD:C7:AC:9D:01:71:71
            X509v3 Authority Key Identifier:
                keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:c5:93:57:81:23:d6:ed:ae:85:e2:2b:8c:b2:9d:21:10:
         71:09:07:e3:20:03:f3:13:7c:2b:51:d1:03:52:f5:fe:48:6b:
         a1:a5:5c:7e:1e:e8:28:a6:d1:00:85:bc:e6:01:df:30:7f:0b:
         e6:e1:da:a0:da:4d:56:05:7e:9b:81:89:3d:72:a1:c1:87:e6:
         b7:ff:1d:cf:7f:60:7d:9c:41:0b:b5:ff:eb:8c:b0:19:e4:cc:
         f2:42:04:2c:ff:41:69:80:36:77:78:5e:56:3a:a7:7d:ab:15:
         d7:3e:64:f4:7f:a0:21:79:c5:50:68:e4:a3:7c:4d:61:77:a8:
         e9:5f:3a:e4:ec:89:2a:e3:b5:2d:40:61:87:26:a0:cc:d1:8e:
         23:e2:89:b0:bc:03:bd:c8:45:0e:b2:a5:42:c1:5e:0e:92:04:
         e0:f3:71:56:5b:e4:dd:03:bc:30:8b:c1:4a:09:19:a0:5b:c5:
         91:25:fe:2c:7d:45:23:a0:50:f4:4e:0d:09:27:78:2f:52:41:
         84:b8:cb:6a:b9:10:31:bd:78:08:0d:44:10:cc:ed:44:98:6a:
         cd:db:cd:8f:55:32:a7:6b:b2:9c:a1:c5:34:3c:f2:09:fa:f5:
         c0:20:29:ee:c4:51:f2:75:18:c8:0d:dc:0a:42:94:6a:04:d9:
         17:b8:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:44:02 2026 by rpki-client