Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File:                     dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier:          uAvNrDxUSGlvWprCURX+yNMeEgp3f8xgRaO8d4h2kEs=
Subject key identifier:   7E:ED:89:3E:89:0D:6C:F3:8B:23:87:D4:5E:63:EE:1D:CA:06:54:69
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer:       /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial:       03DA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number:          03B4
Signing time:             Wed 21 Oct 2026 00:51:30 +0000
Manifest this update:     Wed 21 Oct 2026 00:51:29 +0000
Manifest next update:     Wed 28 Oct 2026 00:51:29 +0000
Files and hashes:         1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: sCQWarUQm2puVKS+5ysI8pPlr2OjSUPxBD1/qweQQ5Q=)
                          2: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=)
                          3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=)
                          4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 00:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 986 (0x3da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
        Validity
            Not Before: Oct 21 00:51:29 2026 GMT
            Not After : Oct 28 00:51:29 2026 GMT
        Subject: CN=6ad80c91-efba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:bb:2e:e4:33:da:b7:28:ae:99:9e:89:76:
                    72:96:47:53:13:4f:0c:e5:d5:8e:5e:d5:06:dd:6c:
                    02:71:c3:59:1e:d9:a7:51:95:d6:6c:76:94:1d:e0:
                    ae:e1:04:be:c4:06:11:80:ac:3e:c8:4b:78:ab:50:
                    7a:6d:3a:21:be:e4:b4:e9:3d:6d:1a:0f:9f:b7:3d:
                    6b:de:53:69:ae:eb:99:2d:99:37:0c:d6:26:7e:43:
                    7a:dc:5d:d3:92:4c:45:30:7b:b0:99:49:b4:47:69:
                    a6:b8:0c:c1:33:fe:21:18:80:83:29:42:f3:dd:e3:
                    32:e1:7a:50:72:da:ad:a2:89:44:0b:a7:1d:fa:24:
                    b0:35:97:8c:33:94:33:d0:67:47:30:72:d5:a4:da:
                    d2:93:b1:9d:23:7c:97:d0:47:ab:9b:10:8a:23:a0:
                    bd:c1:20:2f:3e:e3:4f:77:f8:df:67:0d:c7:ae:09:
                    53:9b:e3:aa:e0:27:ab:5a:1b:3a:52:66:97:40:6e:
                    42:a2:77:bd:ee:d5:5b:91:a9:36:f0:d0:19:60:41:
                    ac:4b:ad:7a:7b:6b:d4:6d:2a:df:06:9b:be:61:a7:
                    e4:4a:db:28:20:c4:94:d7:5d:27:54:50:98:6c:f3:
                    9b:3e:74:c7:6b:64:d2:ca:19:8e:71:cf:e3:b2:6b:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:ED:89:3E:89:0D:6C:F3:8B:23:87:D4:5E:63:EE:1D:CA:06:54:69
            X509v3 Authority Key Identifier:
                keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:b2:8a:de:d6:af:bb:34:f2:9b:12:74:23:e0:e1:13:b8:
         a7:29:20:54:c0:55:ac:a8:79:b3:be:f8:62:ac:a1:69:c7:53:
         de:7e:dc:a6:6a:9a:89:c9:21:27:6d:98:a6:d7:b9:f8:70:ac:
         ec:cc:3f:2a:34:a0:48:21:f4:bf:ac:0e:65:fe:8b:55:b3:4c:
         b1:dc:20:9d:d1:7b:a6:9e:9d:6d:3e:ca:62:84:4d:db:2f:9d:
         02:e2:62:f3:25:25:e0:4a:36:99:4c:8a:99:92:27:34:04:4d:
         19:89:08:37:74:e9:3b:3c:a8:13:e6:b5:57:6f:9e:b1:96:1d:
         96:3c:a0:68:50:83:4c:6d:ba:91:1c:46:6b:7c:36:b3:88:4c:
         3f:8d:24:18:e5:7e:4d:ff:c1:2a:24:4d:d7:c3:be:ec:e7:60:
         a9:f2:ab:ad:d9:a4:01:06:a5:b2:73:b9:c9:ea:e9:f7:18:d4:
         84:0a:a7:f0:0c:91:e4:12:27:55:af:a8:66:0c:d4:21:ac:74:
         f1:1c:46:f9:40:47:a1:9a:af:98:61:83:46:80:ba:14:d6:d4:
         d3:61:d9:44:6b:2e:fd:2b:ce:93:63:08:a2:25:4d:8d:e5:3d:
         18:28:26:fc:48:3a:21:84:0d:67:5d:71:8b:87:f0:51:d1:1c:
         62:19:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:35 2026 by rpki-client