Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
File:                     qAw2f5IilG-YuDa86PbQA2SIHHw.mft (raw, json)
Hash identifier:          ufYZ3kG47ZFbwSlYRrBccxspBWTRmd2FjUA76PLjAgM=
Subject key identifier:   1F:3C:54:6D:9B:69:6B:28:8F:54:90:48:25:DE:CB:34:50:2B:E9:56
Authority key identifier: A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C
Certificate issuer:       /CN=A919D1D9/serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
Certificate serial:       0ED2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
Manifest number:          0EAD
Signing time:             Thu 24 Sep 2026 17:40:56 +0000
Manifest this update:     Thu 24 Sep 2026 17:40:56 +0000
Manifest next update:     Thu 01 Oct 2026 17:40:56 +0000
Files and hashes:         1: qAw2f5IilG-YuDa86PbQA2SIHHw.crl (hash: i2lk3RaAghmozE85qqCG0BX1Q5CEM56cKUMULY6e4q0=)
                          2: C2ED1EEE617111EBBC678459C4F9AE02.roa (hash: 86V/8mBMujnitGzukQBEmEQ/DrfaHm0b2pCNAHNSv7E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl
                          rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3794 (0xed2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D1D9, serialNumber=A80C367F9222946F98B836BCE8F6D00364881C7C
        Validity
            Not Before: Sep 24 17:40:56 2026 GMT
            Not After : Oct  1 17:40:56 2026 GMT
        Subject: CN=6ab560a8-3cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:f1:df:74:58:85:73:df:37:e3:2a:8c:bd:
                    68:89:87:f7:b7:b1:e7:a0:18:ba:a1:01:26:78:44:
                    eb:7a:c1:57:62:f5:98:74:50:66:15:ac:d8:ed:1b:
                    fa:ca:62:1f:51:95:2a:96:0b:22:4d:82:37:62:39:
                    77:46:c3:00:9f:bb:2e:22:93:40:f9:44:a4:49:14:
                    87:cc:5f:7e:e0:01:60:1b:59:9b:0f:d2:80:d9:7f:
                    d1:96:49:c4:a8:6c:01:fc:5f:67:94:7c:b2:14:ae:
                    d3:12:44:76:d2:19:db:32:f3:b5:24:5e:7b:43:a5:
                    90:2b:e5:2d:4c:2a:41:5f:61:8c:76:5d:9d:a1:1c:
                    f0:1e:ec:c6:08:4b:03:59:8e:d9:a2:1b:06:55:ae:
                    ca:1a:7d:0f:2d:15:15:d4:a6:da:b7:5e:7c:3d:5f:
                    90:23:60:5e:17:1a:41:ca:2a:bb:cb:2f:a5:56:4d:
                    d1:90:c2:5e:20:9a:48:d7:d9:c3:c3:9f:27:5b:48:
                    ef:a1:ca:97:b6:63:52:7e:d0:2a:c1:67:07:b5:f1:
                    cd:aa:73:8f:5b:c3:06:be:3d:a1:0c:a0:ae:d0:49:
                    c6:93:89:0f:82:1d:f1:5e:fe:85:13:e6:45:de:80:
                    ac:84:9f:14:96:4a:f9:28:e7:42:ff:4e:77:de:c4:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3C:54:6D:9B:69:6B:28:8F:54:90:48:25:DE:CB:34:50:2B:E9:56
            X509v3 Authority Key Identifier:
                keyid:A8:0C:36:7F:92:22:94:6F:98:B8:36:BC:E8:F6:D0:03:64:88:1C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qAw2f5IilG-YuDa86PbQA2SIHHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1D9/6A39A0DEC33811E98048FB7DC4F9AE02/qAw2f5IilG-YuDa86PbQA2SIHHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:15:ce:7a:a8:34:76:64:a4:13:6b:f8:b3:fd:49:90:a7:0c:
         f4:f5:7c:d0:fb:e8:91:49:7c:88:28:53:7b:b7:dc:ba:3a:0a:
         fb:de:4b:9d:56:a4:81:7d:e9:0f:c3:e5:c0:98:a0:7c:58:76:
         24:0b:d0:be:b4:d5:18:d2:e2:71:7e:72:79:03:4f:b5:a7:60:
         c6:5d:74:26:2b:69:b4:ea:81:e3:64:b6:8c:fa:aa:8f:00:c7:
         e1:fb:fe:42:a7:30:a4:6f:db:cc:70:71:66:de:5d:6b:f3:e7:
         b0:6d:79:d1:a9:ea:96:7e:e2:40:67:c1:0e:83:10:63:81:79:
         64:87:5f:3d:0d:53:fd:94:e8:9d:0a:71:df:23:d8:9c:ca:7a:
         b2:a8:a9:b9:7f:98:20:42:8c:d5:cb:fe:c4:05:a5:53:a9:28:
         57:b4:23:70:5c:52:f1:a6:a4:98:b6:cc:a5:39:15:a8:1a:c3:
         d4:a2:91:66:c6:92:6e:c1:fe:40:35:98:c6:89:2f:9c:34:84:
         c5:4c:d9:01:43:84:df:db:75:f7:8d:79:60:c0:cd:35:9b:75:
         53:0a:a7:5e:57:b1:7c:08:8b:ef:96:00:b1:9d:06:c6:56:05:
         c3:63:d2:83:d2:5f:2e:2c:e5:59:2d:58:2c:42:d8:20:ba:54:
         43:11:b5:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQxRDkxMTAvBgNVBAUTKEE4MEMzNjdGOTIyMjk0NkY5OEI4MzZCQ0U4RjZEMDAz
NjQ4ODFDN0MwHhcNMjYwOTI0MTc0MDU2WhcNMjYxMDAxMTc0MDU2WjAYMRYwFAYD
VQQDEw02YWI1NjBhOC0zY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdbx33RYhXPfN+MqjL1oiYf3t7HnoBi6oQEmeETresFXYvWYdFBmFazY7Rv6
ymIfUZUqlgsiTYI3Yjl3RsMAn7suIpNA+USkSRSHzF9+4AFgG1mbD9KA2X/RlknE
qGwB/F9nlHyyFK7TEkR20hnbMvO1JF57Q6WQK+UtTCpBX2GMdl2doRzwHuzGCEsD
WY7ZohsGVa7KGn0PLRUV1Kbat158PV+QI2BeFxpByiq7yy+lVk3RkMJeIJpI19nD
w58nW0jvocqXtmNSftAqwWcHtfHNqnOPW8MGvj2hDKCu0EnGk4kPgh3xXv6FE+ZF
3oCshJ8Ulkr5KOdC/0533sSxhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB88VG2b
aWsoj1SQSCXeyzRQK+lWMB8GA1UdIwQYMBaAFKgMNn+SIpRvmLg2vOj20ANkiBx8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDFEOS82QTM5QTBERUMz
MzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxHLVl1RGE4NlBiUUEyU0lI
SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FBdzJmNUlpbEctWXVEYTg2UGJRQTJTSUhIdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDFEOS82QTM5QTBERUMzMzgxMUU5ODA0OEZCN0RDNEY5QUUwMi9xQXcyZjVJaWxH
LVl1RGE4NlBiUUEyU0lISHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASRXOeqg0dmSkE2v4s/1JkKcM9PV80PvokUl8iChTe7fcujoK+95LnVakgX3p
D8PlwJigfFh2JAvQvrTVGNLicX5yeQNPtadgxl10JitptOqB42S2jPqqjwDH4fv+
QqcwpG/bzHBxZt5da/PnsG150anqln7iQGfBDoMQY4F5ZIdfPQ1T/ZTonQpx3yPY
nMp6sqipuX+YIEKM1cv+xAWlU6koV7QjcFxS8aakmLbMpTkVqBrD1KKRZsaSbsH+
QDWYxokvnDSExUzZAUOE39t19415YMDNNZt1UwqnXlexfAiL75YAsZ0GxlYFw2PS
g9JfLizlWS1YLELYILpUQxG1FQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:51:34 2026 by rpki-client