Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File:                     scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier:          qSjTN2/keK6JL9KQ0ePwynj0RgazzGvQD3GBQZXvF+c=
Subject key identifier:   D0:1E:4A:F3:20:F8:B4:B6:3A:6B:05:7D:95:91:B5:A2:99:17:11:0D
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number:          07CD
Signing time:             Thu 22 Oct 2026 21:30:29 +0000
Manifest this update:     Thu 22 Oct 2026 21:30:28 +0000
Manifest next update:     Thu 29 Oct 2026 21:30:28 +0000
Files and hashes:         1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: B0uPiMypmFsaZAryQ56fGmwvs0dFQx90c5Jp+Y9VM7I=)
                          2: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: QtOxsjWDqgNGgCTcsMTzCCptaAMNkGCIlXxZlBPaZcU=)
                          3: 2mAvWNmJ-wT9J8VEJAZoZpykpf8.asa (hash: ZJ5wRyiN9xTWxZ56f7HInHFmchNgRi4/XyNoHCmCObQ=)
                          4: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: WVvSpMhKFxSN9i8JnDOZYNXQPB/pQobS+FdjnkNHrVI=)
                          5: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: OuyC5TmVNJMLDabcwM8A0FwhQBrfR/VlGDzUJTCn8/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 21:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Oct 22 21:30:28 2026 GMT
            Not After : Oct 29 21:30:28 2026 GMT
        Subject: CN=6ada8075-da69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:70:1c:da:59:4e:99:11:9f:94:81:05:e3:3f:
                    46:73:06:54:94:f0:fe:fa:20:8f:35:87:55:01:0c:
                    34:3e:38:83:ce:53:f2:07:1a:29:06:f5:0a:f7:c6:
                    ed:9b:a2:53:6d:7a:99:80:66:21:38:4d:bc:ae:61:
                    91:e2:c9:42:43:52:a1:04:12:be:42:06:b2:d2:18:
                    0f:3b:e6:cf:1a:00:b2:95:cf:a7:ad:ca:41:92:3d:
                    82:34:92:2a:b6:02:bd:da:e3:ef:2d:b8:64:d7:c4:
                    38:96:a5:7b:2f:5a:59:6f:9d:d2:59:75:f5:37:d0:
                    f7:41:18:a1:33:e5:6e:6d:20:c4:bb:1e:3d:da:65:
                    be:a5:97:ad:b3:ee:df:5c:bd:ed:ab:50:3c:b2:23:
                    8f:8c:c7:eb:9b:a0:29:11:b0:ac:e7:f7:c9:77:e4:
                    d7:65:fc:c4:4a:33:01:4d:d8:bb:e4:35:64:85:18:
                    5a:4c:53:cc:81:8a:26:77:11:e4:9a:fa:f4:19:ba:
                    52:2f:62:78:6d:41:c3:2e:cc:cc:09:51:2f:35:ce:
                    b6:3f:f8:d3:8f:78:9c:d0:02:f3:4e:a5:67:fa:99:
                    49:6a:b8:33:37:11:a9:7a:54:71:1e:3a:c6:9c:91:
                    1b:f9:3e:2d:9f:01:25:85:3c:12:ef:5b:15:3f:d3:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1E:4A:F3:20:F8:B4:B6:3A:6B:05:7D:95:91:B5:A2:99:17:11:0D
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:44:b4:02:37:e4:cd:3b:53:20:af:be:fa:4e:fd:c1:d2:be:
         65:19:ba:03:21:67:ff:1c:50:11:8b:27:16:2f:0f:04:2a:87:
         f4:41:fc:4b:95:ae:8e:2d:4e:04:f6:d6:a6:96:0b:b8:d9:92:
         64:96:ec:ab:2f:71:99:ca:78:9d:9b:6b:4f:0c:54:d5:38:44:
         71:7e:ae:6c:b4:00:a2:9e:c1:da:e0:48:b4:12:2d:a2:a0:51:
         7f:95:0c:7c:5e:9c:79:84:66:f9:6f:f5:22:12:9a:13:39:15:
         ea:74:9f:2c:52:3f:d0:b6:3a:33:5d:1a:f1:52:81:31:44:27:
         3d:d5:02:3a:3b:06:05:bd:09:fc:61:27:71:e0:1d:d0:2c:3d:
         cf:da:b8:50:2c:d9:d0:67:2a:0d:4f:10:31:f3:4d:6c:e9:e4:
         0e:22:cb:29:ad:5f:19:e6:65:0d:c3:44:5b:09:73:7f:c6:7d:
         73:47:33:4a:ad:d4:e6:b7:fb:64:f9:a3:bc:ae:48:de:2a:0e:
         39:db:cc:98:e6:95:cb:86:49:17:ee:cb:60:a7:fe:eb:d3:42:
         fe:9a:b8:da:12:66:fe:33:62:8a:57:62:07:48:e1:2e:ce:14:
         76:86:9f:e7:46:a9:93:df:d9:e5:3f:85:76:60:77:97:52:aa:
         fd:a8:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:17:45 2026 by rpki-client