Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          nW56ANWBjvqmbtthaPqv216kUS0VzFesB/E01bzJpHE=
Subject key identifier:   67:5A:55:94:76:F3:A8:9B:AE:0B:41:AE:FC:AB:1F:27:00:41:B4:E3
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       196A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          1943
Signing time:             Tue 22 Sep 2026 16:21:56 +0000
Manifest this update:     Tue 22 Sep 2026 16:21:55 +0000
Manifest next update:     Tue 29 Sep 2026 16:21:55 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: 8PjjxYvORcmZ86f41lRy49X09Mx2n6hV7lNQw20BFGA=)
                          2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: ugAdyITyl3jjkM5TSX/sl89uA0LzGbZjsV8crXd5c5E=)
                          3: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: UaUfBSgIdj9KKGl52SHu3L34u8bPrTfYu+3DtVvRz+c=)
                          4: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: yfibStgl4mXerGufqCVOrviIGUB8px5dSSyzGRYwGIo=)
                          5: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: Vi/z+ybxC9owzZhA5rem9ojMHdxbp7LyWOc9Ai5M6UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6506 (0x196a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Sep 22 16:21:55 2026 GMT
            Not After : Sep 29 16:21:55 2026 GMT
        Subject: CN=6ab2ab23-4b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:0e:bb:f3:7c:60:08:89:0a:1b:f6:83:a5:
                    ca:b7:ca:06:c0:38:a0:22:cb:42:ff:fb:2a:47:6c:
                    59:b3:83:45:07:b3:fa:0d:2d:2b:c9:b0:d1:9c:b1:
                    c8:a0:ed:d0:c8:dc:cf:a1:7e:95:6c:fb:33:95:c9:
                    2b:91:f3:ce:97:ee:5e:cf:9e:97:6f:79:22:f4:fc:
                    a0:5b:75:3c:83:56:c1:32:80:95:6f:74:22:65:cd:
                    61:13:77:88:78:7a:79:ba:bd:8a:82:f2:e4:18:7e:
                    8c:7d:91:64:11:a8:8d:eb:80:93:0c:51:eb:d2:e3:
                    e7:df:c6:12:d0:fd:4e:66:0c:21:61:d9:7b:fe:ba:
                    d0:3f:19:a5:99:27:bb:2d:47:94:f3:d0:53:99:fc:
                    e4:83:21:68:33:8b:62:11:56:b9:a3:2d:99:a2:a0:
                    ea:1a:95:cb:b7:90:c2:cc:d6:b9:f9:3a:c2:8a:95:
                    56:14:7b:17:89:7b:65:e7:7f:f1:9b:48:74:e3:42:
                    ea:a8:6f:68:76:d6:fa:54:be:13:b5:61:74:0a:86:
                    07:03:95:3c:ed:66:74:ee:88:af:c2:4a:5c:71:8d:
                    51:86:ae:26:d9:c2:ec:58:15:b7:a7:06:2e:d6:82:
                    e6:93:91:c3:6a:bf:a3:05:0a:3f:62:0b:dd:f1:dd:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5A:55:94:76:F3:A8:9B:AE:0B:41:AE:FC:AB:1F:27:00:41:B4:E3
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f0:ad:a1:d4:1d:db:7c:99:c2:4b:98:f3:11:02:c3:f0:3d:
         a8:f6:9f:95:2b:e5:bb:1f:bc:e2:58:de:8f:f6:2a:11:a3:f5:
         a7:98:88:b0:29:91:4e:4d:9a:fd:59:62:39:8c:20:19:88:4f:
         11:5e:bc:05:df:3a:8c:dd:c0:fa:a7:60:3e:50:21:3c:a8:e0:
         3c:d8:63:e0:da:9a:55:99:ed:8a:4c:e5:a8:de:26:04:9f:76:
         bb:5d:15:36:bd:34:63:2a:7f:82:1d:cf:20:2d:80:b4:b9:50:
         a0:e5:e4:a5:67:57:06:f7:ff:0a:be:4d:30:0c:a3:64:8a:ac:
         f6:59:9c:bb:00:2f:8c:06:52:f9:e1:45:f5:be:c5:04:76:56:
         d1:59:15:35:19:82:03:04:2a:23:f2:f1:4f:5b:f1:fe:1e:56:
         6d:02:c9:6f:8c:24:62:38:ed:44:b7:f9:eb:0f:8e:8b:e9:ae:
         c5:bf:37:91:48:59:44:be:3e:33:6c:08:1f:25:14:95:bb:54:
         63:f1:44:0f:e9:1e:e0:dd:e0:45:c8:c2:47:23:e8:9e:b6:68:
         33:12:01:c3:a5:c0:e4:46:02:fc:02:dd:8f:72:f7:1f:bd:eb:
         b0:a7:09:ab:75:06:35:82:65:0b:1e:eb:48:d5:f9:21:c9:5e:
         a1:ca:3c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:03:32 2026 by rpki-client