Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
File:                     QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json)
Hash identifier:          VZYv/vZivQecbWNIvY0cDR+RBqk+g1PaDqFYLprKfE8=
Subject key identifier:   33:E4:F6:4A:D7:4F:FA:1F:2F:CC:97:20:82:C2:5A:8F:CA:85:8B:29
Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61
Certificate issuer:       /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
Certificate serial:       10D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
Manifest number:          27E8
Signing time:             Sun 04 Oct 2026 16:38:05 +0000
Manifest this update:     Sun 04 Oct 2026 16:38:04 +0000
Manifest next update:     Sun 11 Oct 2026 16:38:04 +0000
Files and hashes:         1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: Y3IyUzzWskNqLIMq1efsdvomEtH3DLvMMolovaibqZE=)
                          2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 9GKBxAqwPTAO+hWMiV5oav3VDxVKz2FMAbeDwl8q3ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl
                          rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4306 (0x10d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361
        Validity
            Not Before: Oct  4 16:38:04 2026 GMT
            Not After : Oct 11 16:38:04 2026 GMT
        Subject: CN=6ac280ed-1f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:80:84:e9:14:47:a7:1c:95:6f:98:25:aa:
                    9b:a6:53:b4:21:91:6c:31:c2:7f:a0:0c:d5:6b:31:
                    28:f4:89:ed:3e:36:ea:05:91:ae:0c:d0:45:64:2b:
                    17:a8:03:87:a3:1f:21:13:65:c8:4c:38:9b:6a:cb:
                    d9:96:c8:86:4d:de:71:5c:2a:7b:20:f6:8f:5e:af:
                    28:b7:0e:05:d5:f3:33:19:25:01:27:f6:82:ec:a7:
                    0a:c5:b6:7d:ca:ed:da:65:f3:93:35:1c:88:d0:96:
                    a4:94:16:34:1b:79:c9:c5:cd:e8:44:07:dc:46:f8:
                    e6:ac:de:b1:da:13:52:95:46:73:0c:53:08:c3:7b:
                    7a:28:11:3a:6b:05:3a:c4:c2:d4:78:d3:8c:1e:4d:
                    16:11:d7:67:ed:28:f5:6d:a6:9f:fc:9c:91:b2:2a:
                    cc:a4:82:50:5a:74:1f:58:b2:b1:e8:c5:6f:5a:41:
                    cc:ae:f9:cf:19:7d:82:c7:da:b1:db:7b:93:7d:01:
                    8d:68:fd:5c:bd:d1:84:a4:dd:5f:1c:d7:33:88:72:
                    76:e8:fb:58:6a:1c:fa:41:11:5a:8d:46:43:7e:37:
                    1b:96:49:1b:c6:dc:2f:b5:56:cb:52:83:e6:02:de:
                    89:54:24:3c:fb:1b:a1:f2:01:b4:1a:b7:f8:7f:1a:
                    d6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:F6:4A:D7:4F:FA:1F:2F:CC:97:20:82:C2:5A:8F:CA:85:8B:29
            X509v3 Authority Key Identifier:
                keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:07:dd:a2:94:97:1e:dd:7f:bc:01:a9:25:7b:ba:f6:f9:
         c8:0a:f9:f9:e6:3b:c8:f0:f1:d0:13:97:62:36:ca:02:41:73:
         28:f6:3d:3e:e5:ab:07:6f:03:c5:1e:17:5b:f5:cf:a4:a1:86:
         6d:2e:5d:5c:fd:ed:1a:25:e0:0f:a4:1d:e5:66:b4:49:47:00:
         56:49:9f:d3:a5:4a:4f:6c:98:f4:f4:96:40:f0:00:eb:99:b0:
         5a:6e:16:7f:b1:fe:51:61:e5:47:7d:02:58:2e:2a:9c:84:c9:
         63:68:4e:5e:79:7e:a2:af:af:04:a9:f6:da:a5:98:c0:17:cb:
         4a:e6:f2:b1:0e:c6:f6:62:f3:99:ec:cf:5e:08:30:33:fe:ba:
         13:ff:bd:95:76:d9:f2:5c:ab:a8:c2:07:e0:46:c1:80:0a:2c:
         b0:99:63:27:d3:a6:d3:47:74:0e:9a:b6:48:d1:08:e0:b6:87:
         18:a5:8e:1a:f3:8f:30:19:82:62:8a:23:5b:61:6c:f9:26:49:
         af:d3:b8:01:df:a5:8b:c0:5b:71:6f:61:4f:56:be:2d:de:0f:
         54:9f:67:d9:a7:5c:c3:b2:06:d7:91:d3:b4:f6:1d:37:53:c4:
         d8:3b:c0:b4:8d:53:bb:72:69:7c:a4:0d:80:ed:5a:a7:ec:b9:
         75:3b:bb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:39:10 2026 by rpki-client