Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
File:                     qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft (raw, json)
Hash identifier:          q/tKwJbkdOTBfyXjDkoI7nLWT+Xr0T0jhnjlN4kdBjs=
Subject key identifier:   B9:64:0F:D6:83:25:BA:8E:CB:C6:BC:5A:53:7B:08:DC:65:83:A8:89
Authority key identifier: A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D
Certificate issuer:       /CN=A9164164/serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
Manifest number:          0163
Signing time:             Wed 07 Oct 2026 05:27:29 +0000
Manifest this update:     Wed 07 Oct 2026 05:27:28 +0000
Manifest next update:     Wed 14 Oct 2026 05:27:28 +0000
Files and hashes:         1: qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl (hash: lPmDFZ9HEEXjVORKKZuXbisE3txLdvMwuG7VwCgQ5eg=)
                          2: F1487C2AA18211EFA2B7E923C4F9AE02.roa (hash: jxhoNvhc+MHJtTBpxrrKXdZBqlL2SJCnjwyJaGHJC6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164164, serialNumber=A8737201FA4C64FA00564022DB06F60E7EE2CD0D
        Validity
            Not Before: Oct  7 05:27:28 2026 GMT
            Not After : Oct 14 05:27:28 2026 GMT
        Subject: CN=6ac5d840-aef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:8d:44:1e:51:b1:2d:71:a8:13:88:04:a6:
                    72:c3:b5:56:30:49:41:2f:b1:05:d7:41:4d:bb:e9:
                    92:55:c7:0e:37:ca:c4:0d:a9:b7:05:25:57:b5:47:
                    a0:02:ae:fc:72:41:72:64:75:76:18:f5:84:bc:9c:
                    77:40:f7:5c:9b:ae:cd:a6:b9:9e:ee:2e:4d:d9:68:
                    0d:ff:5b:3e:6c:5b:6c:30:3a:76:94:a5:c8:38:4a:
                    be:cf:76:8c:76:42:84:aa:8c:be:8f:0a:10:d9:12:
                    4e:50:21:0d:e5:9d:da:0e:bf:c4:5e:7a:85:18:30:
                    8b:7a:03:eb:96:db:15:60:a9:18:7e:a8:7b:6f:56:
                    af:8c:eb:c8:6f:76:4a:20:64:ce:0b:0e:9e:40:33:
                    c2:6e:6f:07:d3:2b:c3:dc:32:dc:ad:66:4a:a8:b6:
                    fb:78:78:9f:7c:56:8c:3b:f3:cf:3e:ea:ec:b5:6e:
                    cf:b9:53:4a:38:22:a1:e8:a5:54:d7:21:74:51:6f:
                    d8:a3:c7:e1:cc:14:43:f9:4a:27:92:1d:12:04:3e:
                    01:06:56:9f:5a:18:6e:c0:1f:20:b0:aa:14:6f:09:
                    1c:0b:db:dc:ac:5e:9b:25:7f:8f:fb:c0:62:6a:b6:
                    87:6f:ff:6c:ee:de:d8:46:13:4d:0a:00:cc:4c:b3:
                    83:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:64:0F:D6:83:25:BA:8E:CB:C6:BC:5A:53:7B:08:DC:65:83:A8:89
            X509v3 Authority Key Identifier:
                keyid:A8:73:72:01:FA:4C:64:FA:00:56:40:22:DB:06:F6:0E:7E:E2:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164164/A68E264EA18211EF8F4E1623C4F9AE02/qHNyAfpMZPoAVkAi2wb2Dn7izQ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:b1:01:b4:b5:9e:e5:c4:fb:5f:34:2b:c8:4d:2f:e1:11:
         9c:45:b9:f7:01:d8:03:1d:6d:00:c9:aa:b2:58:b2:39:d4:0c:
         f9:9c:dc:f0:02:61:87:fa:76:13:14:7c:9c:ce:df:ee:7f:b9:
         86:38:6b:b3:72:c7:68:42:24:28:23:a7:05:2d:43:a2:ae:80:
         e3:dc:76:5d:ab:1b:ea:3e:e1:8d:fe:26:ce:40:81:59:b7:dd:
         35:eb:a2:f0:73:73:65:aa:db:29:48:5f:43:d9:9b:b0:4b:8f:
         a3:15:66:af:3d:52:1a:29:fc:65:c6:6e:3f:20:31:17:7e:fe:
         c8:c3:47:e6:89:f3:40:e3:84:53:06:4b:39:86:1d:a3:83:7b:
         f6:c3:b2:07:23:0a:8a:63:95:fa:4a:53:5c:50:70:cd:f9:ee:
         1a:48:89:72:ca:c7:d0:4e:55:fb:13:33:56:20:4f:d1:47:90:
         f6:84:9f:20:75:1d:56:d8:21:5a:d6:ab:90:43:e7:ec:f4:3d:
         92:a4:6d:e2:f9:49:9e:93:58:8a:aa:97:88:cf:6c:04:26:33:
         96:38:36:f7:72:4f:75:ba:8f:4c:43:28:81:a9:e9:27:ba:05:
         01:87:54:98:53:45:0a:07:86:9c:a0:e3:54:0b:a8:fc:0d:cf:
         7a:2f:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:54:50 2026 by rpki-client