Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
File:                     Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft (raw, json)
Hash identifier:          cP8M9shbkAiYgQteAmg9yJBo0RgD9xiGlXyD1xYWVrA=
Subject key identifier:   F5:5D:02:F8:C4:AC:53:9F:FA:71:E2:78:8C:AF:B9:24:2A:7B:1E:17
Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18
Certificate issuer:       /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
Certificate serial:       1C1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
Manifest number:          1C15
Signing time:             Fri 16 Oct 2026 16:17:33 +0000
Manifest this update:     Fri 16 Oct 2026 16:17:32 +0000
Manifest next update:     Fri 23 Oct 2026 16:17:32 +0000
Files and hashes:         1: Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl (hash: HUV4fFvXksJMb2s5YmeyI3AvYv5S3AbJONyMdNYxhoI=)
                          2: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (hash: lPJ1PIwSbw8szbqccQN/40DLLd93TEsX7jabcLT0LYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 16:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7197 (0x1c1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018
        Validity
            Not Before: Oct 16 16:17:32 2026 GMT
            Not After : Oct 23 16:17:32 2026 GMT
        Subject: CN=6ad24e1c-dfc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:f1:c7:47:21:57:ce:f7:cd:73:51:d5:d6:
                    bf:30:3c:d2:02:36:8d:5b:93:89:4b:e5:eb:02:ac:
                    d4:c3:3c:c1:9a:16:ce:14:91:49:a8:c7:2c:62:b7:
                    36:fb:cc:3f:64:29:93:51:a2:eb:82:bf:2e:6a:34:
                    cf:c1:19:77:5e:9d:13:74:88:fe:36:2a:f0:30:4e:
                    77:da:c0:25:c5:12:23:fb:ca:4b:50:bb:b9:bd:8a:
                    70:a4:56:2d:61:45:83:ce:15:fb:5a:78:1a:65:67:
                    3c:07:0c:9f:e2:08:a0:58:1b:12:ca:11:e4:55:84:
                    a9:c7:69:c7:85:e2:be:0c:84:0a:08:5e:1f:8c:58:
                    85:f3:c7:a7:cc:98:a3:11:3b:50:fe:bd:00:dc:18:
                    f8:f5:8d:a0:3b:3d:97:9e:5d:5c:e2:1f:00:6d:4f:
                    32:f0:b1:71:ad:de:3b:08:57:17:61:d4:a4:bf:2c:
                    b7:4c:48:e8:f7:97:f4:3b:7b:e4:a9:32:ec:42:d3:
                    ed:e0:c0:7a:89:49:d2:b6:de:49:8b:7e:b6:ee:6e:
                    c7:7e:0c:e9:83:c8:8b:3f:c1:9d:58:bf:bb:99:02:
                    24:23:d4:e7:49:74:12:ae:d8:a3:04:1d:7a:e1:9e:
                    3d:a9:9a:b7:db:8a:9c:63:c5:41:94:86:be:de:b7:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:02:F8:C4:AC:53:9F:FA:71:E2:78:8C:AF:B9:24:2A:7B:1E:17
            X509v3 Authority Key Identifier:
                keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:92:74:52:8c:fb:06:1d:de:69:a1:9b:69:1e:5e:6b:db:b3:
         bd:9c:22:8a:1b:d8:39:9c:aa:c4:5d:4e:1c:7f:1a:8f:e2:d6:
         85:63:1b:04:78:1d:b1:73:9e:10:c8:3f:f7:7b:b7:ac:50:86:
         a2:57:0a:39:bb:6c:d1:09:90:ed:5a:a7:a4:84:95:ad:dc:6f:
         59:43:c3:49:7a:4f:79:94:81:37:17:10:c7:a1:38:72:90:c8:
         be:95:f6:69:18:b5:e2:b7:9d:d9:65:04:46:55:45:fb:33:05:
         4a:9f:5c:36:e3:33:61:6f:c9:de:f8:d4:e1:45:2d:a0:d4:63:
         14:b6:c0:f2:3a:4a:50:52:a1:b4:38:37:20:32:c1:1f:a7:df:
         f7:61:9e:4f:38:7d:d8:d6:f4:0f:b8:ad:82:65:76:b6:36:fe:
         a5:f0:23:32:7a:61:33:6b:ee:c1:63:38:49:71:fd:d7:74:90:
         72:04:e8:6e:ec:6a:dc:9f:5c:53:c3:0f:5f:aa:be:7f:a9:c1:
         30:69:86:66:e8:07:2c:70:e9:f1:86:ad:66:aa:c1:2c:9a:2e:
         3d:2d:a4:74:d6:07:71:b3:c0:63:ec:f2:5c:6d:8f:04:2e:14:
         b6:2d:58:30:cf:8a:10:ff:f4:14:59:68:dc:5a:57:81:13:58:
         25:50:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 18:49:54 2026 by rpki-client