Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          +s7N/f6uhk4ZKFTisTkplkKgKkdk8gABO3Prgmp0lz4=
Subject key identifier:   E8:39:21:AF:F8:20:05:13:01:CA:06:8B:8D:78:F2:62:5F:06:89:84
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       190D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          18EA
Signing time:             Sat 04 Apr 2026 16:21:48 +0000
Manifest this update:     Sat 04 Apr 2026 16:21:48 +0000
Manifest next update:     Sat 11 Apr 2026 16:21:48 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: l0Dkm5VsJUny8pGF51/Icq1Gk9mBgO4B/T1L//pXOJA=)
                          2: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: gpPf8YHxUumqTPOX7/waaXvtALxStgij8JmqlVAXhlc=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: QtWEc3antTd2K+91CBKQnCvQy2+FDNwa+QWniiVB1lI=)
                          4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: aze7oRbnjZ11dpJLkBi4xyiEoCsX64SwDqIgSioB2cM=)
                          5: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: awYe5rrh007RCSjsVd7jO0qaN9guB6y5rbMfa7rSYvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6413 (0x190d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Apr  4 16:21:48 2026 GMT
            Not After : Apr 11 16:21:48 2026 GMT
        Subject: CN=69d13a9c-19af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:3b:29:2a:a4:da:de:c2:4a:eb:b9:a7:e2:
                    2e:7b:e2:06:38:28:3e:dc:68:67:a0:9c:ad:6c:db:
                    d6:0d:ae:85:b6:98:c9:c6:89:3c:1c:b0:82:c9:5c:
                    46:ae:6c:08:cb:19:c5:f1:96:97:66:77:8b:a0:b3:
                    35:d8:ee:7a:42:81:fd:1d:d6:c7:f9:65:56:20:d7:
                    0f:af:9b:56:39:42:83:95:eb:67:88:22:ef:65:2b:
                    30:1f:a1:df:5c:7a:e9:b2:12:48:66:a3:c8:ce:ed:
                    28:cb:37:a7:69:06:58:5c:fb:06:3f:c5:36:38:f8:
                    08:53:d3:e9:a0:bd:53:98:4f:9c:5a:57:22:d8:de:
                    a3:d3:c3:a5:9f:42:18:33:2d:a4:aa:bd:9b:1c:e2:
                    9a:9c:1d:d1:07:dd:0e:77:4d:31:7b:f1:cc:95:20:
                    7a:81:bc:c8:a1:2c:95:d6:84:2a:78:e7:7a:63:3f:
                    cc:e2:93:98:fd:b4:aa:31:f0:c4:46:11:81:c2:7f:
                    3d:ba:ef:db:d1:32:4b:c2:c5:28:0c:e4:04:80:a8:
                    1a:87:08:eb:4f:5f:b2:87:17:d2:fd:b9:6e:a9:35:
                    10:d7:78:00:6c:3f:71:b6:20:89:c9:ad:57:cd:42:
                    94:4d:5f:ba:5f:52:70:72:ad:e3:45:bf:44:53:6a:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:39:21:AF:F8:20:05:13:01:CA:06:8B:8D:78:F2:62:5F:06:89:84
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:c2:fa:50:72:bf:f1:f5:f3:b8:d2:44:69:21:a1:fa:ec:
         72:bf:09:00:dd:a3:75:51:52:d7:46:e8:c9:c4:05:84:a4:4d:
         14:b8:1a:1f:20:6f:cf:dd:6b:c6:65:01:5d:91:50:a5:c4:59:
         51:3a:4d:29:fa:ba:02:a6:13:98:72:4c:f0:d3:80:00:39:1f:
         68:fc:1d:cb:4d:cd:76:83:63:b2:d1:77:49:68:ff:2c:51:a9:
         a3:1b:05:0d:52:e7:9b:0c:9f:e3:ed:ac:a3:68:2b:36:7d:af:
         a9:07:d5:3a:bf:bd:36:87:8f:3a:8b:b0:06:69:9b:18:92:9f:
         6a:87:ee:4b:0b:89:6f:0f:0d:3b:3c:01:9f:ed:fb:c9:fb:b9:
         e5:3a:87:41:44:61:f3:1a:f0:39:79:a5:42:93:94:50:fe:e7:
         d3:7e:4e:3b:b2:94:86:c0:58:06:8b:c8:c0:7a:b8:e9:6a:ce:
         da:47:8f:56:25:9b:ad:e8:3f:bb:77:5d:3f:a4:2e:48:c7:6d:
         b5:60:d5:07:bc:0f:29:7f:c0:aa:20:79:4f:e2:13:f2:0f:b6:
         d5:bc:9c:2c:da:b0:9f:69:11:fa:6a:ba:f9:39:ff:7d:5a:1e:
         86:6a:d3:33:ef:9b:0a:e1:aa:69:a0:b1:60:bd:75:5b:52:4b:
         d2:40:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:39:48 2026 by rpki-client