Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
File:                     8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json)
Hash identifier:          qe1U9BAVg7gbSu5okF1oHKxwU2fRkFKmOOtar3GjRYQ=
Subject key identifier:   88:91:AF:7C:0E:B4:0E:24:61:88:73:47:66:98:19:9E:1A:91:63:A1
Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79
Certificate issuer:       /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379
Certificate serial:       0DB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
Manifest number:          0DA7
Signing time:             Fri 02 Oct 2026 18:06:57 +0000
Manifest this update:     Fri 02 Oct 2026 18:06:57 +0000
Manifest next update:     Fri 09 Oct 2026 18:06:57 +0000
Files and hashes:         1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: mFNKrIRI/vxj0Jt8VRfJGcASWqp1eieToX9P5RJTbcU=)
                          2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl
                          rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3505 (0xdb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379
        Validity
            Not Before: Oct  2 18:06:57 2026 GMT
            Not After : Oct  9 18:06:57 2026 GMT
        Subject: CN=6abff2c1-5987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:b6:5d:49:29:ce:ba:24:24:54:82:f7:db:
                    0d:93:26:6a:fd:de:26:c9:68:b7:b8:7a:60:07:75:
                    f0:19:53:d0:a9:b2:8e:90:94:a3:b0:44:ae:5a:d0:
                    fc:d1:3a:db:e3:5b:be:52:99:fd:f7:c3:9a:ca:47:
                    c3:44:8c:14:04:72:81:52:da:31:ec:08:1d:40:0a:
                    d4:97:cf:80:f2:a5:20:76:30:c0:cd:6c:ae:9a:8f:
                    ee:8d:92:eb:bf:fa:61:0e:28:3c:ed:ec:3d:15:88:
                    bb:b7:d6:29:4a:2c:64:6e:f3:03:f6:60:0b:b3:eb:
                    55:fc:ef:63:31:4b:1a:29:96:cd:c9:18:3d:c7:69:
                    e9:b0:39:c3:6c:e4:5f:27:1c:89:70:1e:2d:0b:50:
                    7f:7e:dd:02:0b:9c:15:95:f5:c5:bc:8a:7e:ce:66:
                    15:3c:eb:5a:5d:5a:f5:a3:9a:7b:d1:d0:59:be:78:
                    de:b3:92:d6:cc:ef:15:0b:07:02:b2:ff:bb:60:b9:
                    81:9d:ad:f3:41:d2:48:77:02:bd:d3:0d:bb:fb:be:
                    16:74:02:d3:2c:c4:b3:c8:a6:94:26:dc:bb:57:93:
                    cd:f8:c6:7a:5b:86:4c:b8:5e:b2:34:bc:da:03:75:
                    d5:72:ae:c3:ed:0d:93:7a:40:67:17:b2:4e:92:3a:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:91:AF:7C:0E:B4:0E:24:61:88:73:47:66:98:19:9E:1A:91:63:A1
            X509v3 Authority Key Identifier:
                keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:96:69:34:3a:83:43:fa:0d:f5:62:82:68:5d:c3:ba:c7:4f:
         19:3e:54:4b:73:d3:a3:7c:67:26:31:f5:7d:a9:e6:46:49:57:
         99:03:be:a4:92:43:17:8f:c6:dd:bc:be:73:70:4e:07:cd:4a:
         d7:e0:4b:8d:ba:ff:b3:38:e6:e5:e4:37:95:bc:40:83:bb:b3:
         5d:03:4a:ba:31:56:0e:19:71:84:2f:2c:89:cd:2b:ec:b2:b6:
         a8:6a:a8:fb:5a:3b:10:dc:b3:03:47:37:c5:54:93:99:2a:51:
         19:a4:52:6e:cc:34:d2:ae:8e:d6:8a:31:1e:82:d5:3c:ce:4f:
         93:5a:06:df:27:86:da:77:dd:9a:e5:4f:22:85:04:5c:a2:3f:
         d3:be:ac:8a:4b:57:ce:c9:fb:d7:8b:69:df:e5:ce:1b:ea:76:
         47:cb:0c:d3:e2:d6:dc:ce:95:ca:02:be:c4:28:9e:f1:97:b3:
         fd:ac:70:55:76:74:c0:17:d2:0e:3c:b8:d0:bf:1d:95:e6:06:
         21:5a:e1:08:98:b0:ce:29:93:b5:cb:55:c8:ca:b1:14:a9:33:
         dc:ea:74:ea:73:16:2b:ea:bb:5f:6c:6a:45:95:43:c9:6e:c6:
         34:6a:3c:9b:8a:5f:e7:6c:58:67:18:60:0d:24:9d:c0:7e:50:
         84:99:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:33 2026 by rpki-client