Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
File:                     IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json)
Hash identifier:          XyxHKzYkKyGCc65NZZ2hu/2MvARqcy2LYh04n7KHMB0=
Subject key identifier:   D4:7F:54:A8:CF:1F:45:CF:EC:25:A3:33:7E:0E:23:A9:F7:C1:4E:B2
Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7
Certificate issuer:       /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
Certificate serial:       0C5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
Manifest number:          0C37
Signing time:             Thu 08 Oct 2026 18:53:08 +0000
Manifest this update:     Thu 08 Oct 2026 18:53:07 +0000
Manifest next update:     Thu 15 Oct 2026 18:53:07 +0000
Files and hashes:         1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: etMaP0AUZIcB/B8G806v3N79M/7fS0B7T0nGvxloRUo=)
                          2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: EolASXb1KltLVGZYGCtQ/6/WNNv9j4lXlevPtfmwzdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl
                          rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 18:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7
        Validity
            Not Before: Oct  8 18:53:07 2026 GMT
            Not After : Oct 15 18:53:07 2026 GMT
        Subject: CN=6ac7e693-213d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:50:dc:d7:06:be:fa:78:3a:e3:3c:17:bc:
                    9b:c5:30:1b:87:c0:cb:ce:fc:9a:bb:c2:8c:2a:b2:
                    e3:1a:91:49:6d:7d:ea:a2:13:d2:3f:c2:f0:eb:39:
                    40:fb:92:5a:d5:dc:0f:52:e6:37:55:e4:d5:d1:d0:
                    3a:99:5b:53:6e:7d:08:a6:9c:cc:d1:60:f0:8d:b3:
                    fa:89:5d:1f:02:2c:c6:66:84:c4:c0:9c:a7:66:c4:
                    eb:0c:89:4a:9a:08:ac:5c:1c:fa:38:7d:63:58:c6:
                    9c:14:b2:78:a6:e9:d5:52:f7:55:b1:d5:4f:01:be:
                    c7:87:a4:bc:b6:da:2c:ee:5c:28:78:97:15:7f:3c:
                    b3:92:57:cf:87:38:43:45:c0:20:1a:18:bf:f6:ca:
                    4a:f7:2e:83:29:dc:88:61:e1:b0:9f:06:de:d2:a7:
                    43:e3:2b:80:ee:2c:7d:8c:23:73:8f:44:84:e9:41:
                    f9:ae:f6:3a:2c:36:59:87:2f:6f:2a:72:43:00:25:
                    14:4f:08:03:82:0c:00:06:cd:73:fb:4e:bd:31:37:
                    b8:27:f1:f4:1b:00:95:73:3a:ac:74:0d:be:1a:b6:
                    de:a2:71:51:dc:8e:6f:c1:f1:15:fd:b2:59:bb:87:
                    b3:ec:be:de:66:c5:63:17:d6:e5:27:b4:ff:5f:68:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7F:54:A8:CF:1F:45:CF:EC:25:A3:33:7E:0E:23:A9:F7:C1:4E:B2
            X509v3 Authority Key Identifier:
                keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:30:08:6b:e0:b0:68:37:19:c4:6c:2a:17:09:0c:55:53:f3:
         eb:e0:45:71:ce:2a:57:3a:61:8d:7c:7e:85:87:0c:18:1a:e2:
         3c:c1:38:ef:fd:9d:6a:24:2e:40:26:ae:05:ec:f8:6c:c7:df:
         d6:46:ff:76:d4:10:83:cd:0a:40:d1:72:b1:2b:5b:22:c9:ae:
         15:0f:74:03:c9:89:30:40:36:93:63:40:5f:fe:7a:af:98:9a:
         6b:8f:df:f7:6d:d3:cb:07:4d:92:7d:47:ff:a9:10:7b:ad:89:
         c2:99:3c:af:cf:a3:25:f9:f9:3c:70:46:04:c6:a8:44:a1:2e:
         ae:ae:ed:f6:56:f6:fb:1f:2c:d4:e8:bd:5a:d5:6c:24:ef:df:
         1e:7e:7c:bc:97:30:92:49:57:25:4c:d3:2e:ad:8d:08:5d:6c:
         12:19:9a:f5:e5:9a:34:15:39:97:09:d0:f5:f4:c4:b3:f1:35:
         c4:4a:35:34:32:ec:98:bd:d0:f8:9d:99:df:67:ea:ea:be:f1:
         88:59:da:81:37:35:43:a2:1c:dd:2a:8a:b1:9b:d7:8c:1c:c2:
         6e:42:d5:69:75:a6:8a:bc:6d:9c:28:b9:ca:a7:88:47:e9:60:
         39:7d:e8:aa:d6:ec:f9:08:49:bd:d5:39:44:17:5a:f8:64:87:
         1b:07:a9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:33:31 2026 by rpki-client