Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
File:                     Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft (raw, json)
Hash identifier:          QLwuyZufxZ7Gt4/nXIWgaqczGBxH3kEsF2Z+EkNtTSs=
Subject key identifier:   DA:3F:A8:8C:38:DB:CE:17:60:4B:F1:2D:B8:50:2A:C2:96:F9:71:BD
Authority key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Certificate issuer:       /CN=A918B16C/serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
Manifest number:          42
Signing time:             Fri 25 Sep 2026 08:43:24 +0000
Manifest this update:     Fri 25 Sep 2026 08:43:23 +0000
Manifest next update:     Fri 02 Oct 2026 08:43:23 +0000
Files and hashes:         1: Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl (hash: GOt5H+jGnP1Wb4B1hfzACYZ4XhWuOoRJAyHjY8WIcd4=)
                          2: 5717F26C76DC11F1B27CFF067EA30FBC.roa (hash: UnxraCxdQ4lE3he3/K4k1PrHUY4Y6JC7kU/SixWY2p8=)
                          3: b3URnCNopdBPb5-olOwDCxwCfu0.asa (hash: FhVtU0L7B5W6b9aiDhTNFv0YOjbDTC+YisKb8AYU78U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
        Validity
            Not Before: Sep 25 08:43:23 2026 GMT
            Not After : Oct  2 08:43:23 2026 GMT
        Subject: CN=6ab6342b-6c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:26:ab:88:48:9a:82:d2:46:73:b9:13:6c:
                    29:6e:2c:a9:f9:9a:50:37:c0:74:1b:9c:8b:c8:47:
                    3c:22:77:c8:e4:02:94:bd:9a:95:44:17:b2:30:cf:
                    31:f5:7b:78:58:5c:52:6a:57:5a:0f:52:eb:96:9a:
                    c7:9f:15:e8:23:f2:b8:b6:50:d7:34:ab:c7:69:cb:
                    42:57:3c:26:b5:b1:d2:ee:31:3e:ee:0d:3f:4b:09:
                    9a:e7:00:c1:f2:ac:07:22:7c:00:40:28:95:12:3e:
                    e7:d4:ec:58:b0:61:72:1b:75:66:42:e1:e1:05:85:
                    3a:c7:fd:6b:bb:ac:c3:89:e6:3a:b1:a9:8e:15:29:
                    3e:ef:58:8a:6a:17:24:03:76:f6:2a:11:60:ea:13:
                    f9:60:98:9c:ae:31:e5:2d:75:c6:c2:a4:31:e1:50:
                    30:16:5d:f0:ba:aa:f4:08:3b:5f:6c:cf:5e:07:3f:
                    1b:e1:7c:07:4c:91:79:35:70:ca:8f:1c:0c:3f:cd:
                    c8:da:aa:c2:29:c1:7f:29:ff:a4:41:83:0b:7d:12:
                    05:39:fd:51:31:0b:77:e7:bd:1a:ba:2d:34:c1:b1:
                    c0:89:7d:31:6d:2f:10:3f:36:26:a1:76:55:1e:8a:
                    ea:b3:fe:2c:c3:bb:07:0b:04:07:d9:20:8e:fb:9a:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3F:A8:8C:38:DB:CE:17:60:4B:F1:2D:B8:50:2A:C2:96:F9:71:BD
            X509v3 Authority Key Identifier:
                keyid:43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:18:b7:91:38:d8:a2:34:ad:11:f3:0c:03:61:95:5d:3d:
         41:30:db:b4:43:43:5d:31:46:09:6d:af:59:5c:10:2a:52:03:
         49:32:e2:a5:ee:3d:4f:a1:eb:cd:27:a6:fd:3f:45:70:2c:11:
         df:77:05:7a:f5:bf:6a:64:7e:41:f9:99:5c:f0:da:cc:9b:6d:
         5d:2b:3a:28:a2:dd:32:7b:1c:d6:97:28:c8:db:5e:76:93:a0:
         ee:54:32:98:86:3d:9e:09:c5:e0:14:c5:87:36:35:b3:3d:77:
         86:dc:ae:92:a3:29:fa:65:7f:99:7d:e1:08:86:91:1b:f8:c3:
         16:02:71:03:4a:4f:7e:b4:c7:9a:78:a7:83:9e:11:28:7e:75:
         d8:1a:ca:40:fe:cb:de:48:22:48:71:10:f1:55:f6:4d:2f:be:
         1f:aa:c1:2f:f3:3a:af:87:1f:d9:b8:30:fc:b2:af:3f:10:77:
         a5:45:b2:74:e6:b1:35:ec:ed:b7:36:03:63:41:aa:a9:94:af:
         35:52:ca:46:ff:6d:d3:c0:42:02:4c:b8:ae:c8:24:71:9a:30:
         95:10:b7:9e:f8:24:84:85:dc:2b:cd:8b:4a:e3:dc:16:e5:ec:
         26:29:9c:54:ce:44:90:95:b7:2f:17:7c:c3:c6:e8:a7:1b:53:
         d1:a9:04:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QjE2QzExMC8GA1UEBRMoNDM4RkY3Nzg0MjA2Nzg4MkM2RDQ5M0Y2NkI2MTI1RUYy
MTk1RDU0NzAeFw0yNjA5MjUwODQzMjNaFw0yNjEwMDIwODQzMjNaMBgxFjAUBgNV
BAMTDTZhYjYzNDJiLTZjNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9TCariEiagtJGc7kTbCluLKn5mlA3wHQbnIvIRzwid8jkApS9mpVEF7IwzzH1
e3hYXFJqV1oPUuuWmsefFegj8ri2UNc0q8dpy0JXPCa1sdLuMT7uDT9LCZrnAMHy
rAcifABAKJUSPufU7FiwYXIbdWZC4eEFhTrH/Wu7rMOJ5jqxqY4VKT7vWIpqFyQD
dvYqEWDqE/lgmJyuMeUtdcbCpDHhUDAWXfC6qvQIO19sz14HPxvhfAdMkXk1cMqP
HAw/zcjaqsIpwX8p/6RBgwt9EgU5/VExC3fnvRq6LTTBscCJfTFtLxA/NiahdlUe
iuqz/izDuwcLBAfZII77msfRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2j+ojDjb
zhdgS/EtuFAqwpb5cb0wHwYDVR0jBBgwFoAUQ4/3eEIGeILG1JP2a2El7yGV1Ucw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCMTZDLzRFQTQ0N0JBNjNG
RjExRjFCQTI2RTQ1RDk1NDdBODg4L1E0XzNlRUlHZUlMRzFKUDJhMkVsN3lHVjFV
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUTRfM2VFSUdlSUxHMUpQMmEyRWw3eUdWMVVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC
MTZDLzRFQTQ0N0JBNjNGRjExRjFCQTI2RTQ1RDk1NDdBODg4L1E0XzNlRUlHZUlM
RzFKUDJhMkVsN3lHVjFVYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBuTRi3kTjYojStEfMMA2GVXT1BMNu0Q0NdMUYJba9ZXBAqUgNJMuKl7j1PoevN
J6b9P0VwLBHfdwV69b9qZH5B+Zlc8NrMm21dKzooot0yexzWlyjI2152k6DuVDKY
hj2eCcXgFMWHNjWzPXeG3K6Soyn6ZX+ZfeEIhpEb+MMWAnEDSk9+tMeaeKeDnhEo
fnXYGspA/sveSCJIcRDxVfZNL74fqsEv8zqvhx/ZuDD8sq8/EHelRbJ05rE17O23
NgNjQaqplK81UspG/23TwEICTLiuyCRxmjCVELee+CSEhdwrzYtK49wW5ewmKZxU
zkSQlbcvF3zDxuinG1PRqQQU
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:08:55 2026 by rpki-client