Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File:                     Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier:          mcQC5ii0FNnXnduqe+VfQ7SuYQBwpYSXCUYHaQzjWu0=
Subject key identifier:   DC:EF:D2:7C:3D:0A:C2:D9:98:F4:89:E2:F6:BA:B8:AB:BA:49:FB:F2
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       0173
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number:          0166
Signing time:             Mon 11 May 2026 04:54:04 +0000
Manifest this update:     Mon 11 May 2026 04:54:04 +0000
Manifest next update:     Mon 18 May 2026 04:54:04 +0000
Files and hashes:         1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: ecp/BwsJrkK+q2hM6sYmJTKlkaLheo7exGxfSRvq1j4=)
                          2: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vZ2S+w3GcPa+h6MU9zMiF5RlRO5/+gC76nWMxy6HcwM=)
                          3: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: qO2Q3Q5zR4BZKw3pBS7JR4NiTCN8t4Ujvg2GOjsbNkA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: May 11 04:54:04 2026 GMT
            Not After : May 18 04:54:04 2026 GMT
        Subject: CN=6a0160ec-3b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:4d:4d:28:e9:de:23:3d:b8:f9:5f:23:6a:
                    54:41:4b:49:ce:84:90:44:50:0b:f6:b0:92:72:b9:
                    e8:8e:1f:c2:e4:e1:76:f1:4e:16:fd:fa:7b:85:94:
                    67:10:42:c9:08:15:00:20:a2:4b:84:6f:4f:b7:36:
                    46:61:03:df:b4:07:1b:37:f5:a7:34:30:df:88:26:
                    68:9f:c9:01:ee:07:b9:27:67:0f:ce:94:6a:65:42:
                    70:cd:56:d9:2c:21:6a:4a:38:60:92:04:d2:3c:bc:
                    b1:ea:45:e8:15:df:3b:79:78:6e:e1:3f:67:06:76:
                    29:99:21:78:62:f8:ac:b1:8a:7b:cd:9b:e6:f5:78:
                    65:21:16:d1:d9:08:5c:48:09:2a:e5:33:f5:69:df:
                    0b:cd:de:24:99:63:a8:49:ae:85:fe:f3:71:b6:4b:
                    1a:76:0c:f5:b1:d1:b0:a5:88:4f:f4:88:0a:95:8d:
                    84:14:a7:e6:e7:73:07:7a:23:ba:17:10:70:83:1e:
                    39:ad:43:c8:21:66:57:0e:1c:02:c0:15:dd:1f:f7:
                    84:6a:55:54:24:48:fb:a1:fb:e5:e0:96:a1:4a:db:
                    b7:7c:5d:b0:19:ee:01:00:b8:9c:42:48:98:0e:61:
                    5e:c0:1f:86:75:7c:33:71:32:2e:d4:4d:29:ef:a6:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:D2:7C:3D:0A:C2:D9:98:F4:89:E2:F6:BA:B8:AB:BA:49:FB:F2
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:5c:60:88:61:ab:e4:ec:e8:04:47:69:0b:2f:3a:2f:90:5f:
         7f:dc:a7:04:48:c2:4d:5b:9e:c9:a1:43:c8:d0:8f:e2:5a:df:
         4b:e3:a8:b7:2e:a1:e7:01:fc:c1:b1:fd:8f:f3:34:15:e6:7f:
         66:3d:78:d2:6b:a1:1b:90:e1:07:67:90:79:f6:4a:2a:6f:6a:
         a9:38:ad:af:57:2c:dd:6a:71:8e:80:72:34:dc:60:3e:b5:3f:
         f3:d0:39:ca:f0:a8:99:77:6e:2d:69:29:e1:53:a4:9d:8f:76:
         eb:7c:83:e9:8f:0c:0b:f0:ac:04:a5:b1:92:40:5e:8a:4a:fd:
         35:a6:1b:c4:bb:eb:2b:94:32:d6:22:99:99:20:8d:26:c8:8d:
         c6:7f:6e:95:93:6c:94:0c:41:98:1e:01:25:2d:e5:aa:b6:e5:
         65:43:90:f9:ac:ac:c9:33:8e:57:91:8f:0c:5d:27:e3:d9:de:
         0f:f3:8e:e0:20:12:e1:30:52:4e:69:36:44:a5:45:76:2f:53:
         54:06:a4:28:9b:74:8c:8c:c5:ce:74:da:c1:e8:61:ad:b8:37:
         43:c4:66:d8:ba:2e:e4:c2:cb:2b:bc:40:89:c8:7c:65:7c:91:
         c8:fd:48:b2:0e:50:26:8c:58:67:c8:2d:d1:76:be:d7:cc:bc:
         e9:e5:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:19 2026 by rpki-client