Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
File:                     QP0nMwGov44nCXYsZPSuom0q4LQ.mft (raw, json)
Hash identifier:          Wf0P6SXjkzeaBj1JMUzgSADmGx2X9ofc+9wggcoA41E=
Subject key identifier:   FD:ED:A2:9D:BC:31:DB:D4:EA:F1:79:07:CD:D9:D0:A8:A7:36:52:42
Authority key identifier: 40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4
Certificate issuer:       /CN=A9164860/serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
Certificate serial:       023E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
Manifest number:          0237
Signing time:             Fri 16 Oct 2026 17:06:54 +0000
Manifest this update:     Fri 16 Oct 2026 17:06:53 +0000
Manifest next update:     Fri 23 Oct 2026 17:06:53 +0000
Files and hashes:         1: QP0nMwGov44nCXYsZPSuom0q4LQ.crl (hash: vyGQioXxGyVBbxMT88VEB7SgJ/W7eKf/23Wgqt2vZOI=)
                          2: 26BFE5FE841611EEB980955AC4F9AE02.roa (hash: XSrmRnZlMx5Z3Gsv5j+R2nebqshQgxS35JJmLLu9/UA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl
                          rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 17:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164860, serialNumber=40FD273301A8BF8E2709762C64F4AEA26D2AE0B4
        Validity
            Not Before: Oct 16 17:06:53 2026 GMT
            Not After : Oct 23 17:06:53 2026 GMT
        Subject: CN=6ad259ae-a240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:be:58:b0:0a:9d:bc:97:56:54:f7:53:cb:
                    27:ad:b4:a0:f3:94:49:d8:ea:40:13:ff:2f:39:6a:
                    c5:77:5e:1b:7e:e2:99:3c:8c:c4:aa:53:9c:0d:92:
                    12:e9:a9:e8:8d:0e:9f:d5:d9:64:f2:a6:d0:dd:2e:
                    df:1f:d7:fa:f1:8e:2f:3a:3b:26:3a:86:ff:cd:8c:
                    8a:30:c4:b6:f5:03:74:04:94:15:b5:43:55:50:ed:
                    b0:17:31:21:34:23:64:e4:37:8b:a2:ce:80:e3:cb:
                    a5:60:bb:cd:25:f7:c6:b1:88:02:cb:16:10:f3:46:
                    e2:fa:13:77:89:cd:fa:4b:84:fc:6c:cb:61:ff:b1:
                    8e:f3:e3:00:71:19:af:28:e5:92:60:33:9c:2f:01:
                    30:f0:ec:d6:fc:b1:c0:59:6c:38:2b:ad:5b:3b:a5:
                    dd:eb:a4:62:dd:1d:34:f1:db:16:80:87:d7:84:7f:
                    5e:0b:65:6e:48:5e:62:17:b8:3a:35:2b:5f:a4:46:
                    d4:9f:cf:31:6f:3b:df:59:2f:ea:2b:8e:8d:15:8b:
                    14:05:91:e0:fc:fd:43:58:67:f3:9e:5b:88:10:a1:
                    79:4d:e5:68:57:e5:86:35:77:f4:f4:b7:64:5d:44:
                    0f:b7:00:98:e8:b6:d2:aa:e5:8d:63:36:b8:dc:db:
                    e9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:ED:A2:9D:BC:31:DB:D4:EA:F1:79:07:CD:D9:D0:A8:A7:36:52:42
            X509v3 Authority Key Identifier:
                keyid:40:FD:27:33:01:A8:BF:8E:27:09:76:2C:64:F4:AE:A2:6D:2A:E0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QP0nMwGov44nCXYsZPSuom0q4LQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/6BEAE0887B3911EE9E91845FC4F9AE02/QP0nMwGov44nCXYsZPSuom0q4LQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:f3:c4:c6:2b:8c:c6:fd:57:c6:2c:1c:3b:15:c8:89:cd:
         09:e5:57:9e:41:f9:87:73:a5:5d:61:11:5c:29:37:d9:1c:51:
         3e:03:85:45:60:80:41:7d:cb:e7:8d:7d:67:e1:66:2e:be:ae:
         f4:9c:67:4a:1a:53:24:20:bf:79:d6:d5:31:e3:b8:76:28:f1:
         5d:d6:f0:75:cd:ef:6d:0a:55:a2:91:10:8b:47:37:64:fb:ae:
         a9:7b:4d:b7:69:77:1e:94:e8:f7:c5:d2:f0:30:a4:14:2c:78:
         85:4e:d3:ce:70:cf:77:43:3c:75:b5:59:49:32:42:0a:97:6a:
         35:85:2d:bf:99:b4:11:96:65:0a:2d:1b:e1:e7:ae:06:30:91:
         b1:3c:f2:cc:82:52:55:b7:c8:f2:c9:d8:c2:40:c9:18:50:2e:
         19:6b:70:17:dd:e3:5c:2c:5f:e0:59:0f:dd:dd:76:d0:c4:f0:
         93:5c:1a:26:dc:66:f6:2c:0c:dd:ca:aa:02:68:32:f5:c7:ba:
         9e:7f:da:c6:fa:ac:ac:cf:32:56:49:91:d4:b7:43:6b:4f:73:
         a0:74:46:2c:56:dd:6f:d6:b0:f9:24:98:54:7f:4d:2e:50:4c:
         35:e1:d8:e0:cc:dc:47:1a:e8:b4:34:d5:53:9a:c9:f5:8d:09:
         43:0c:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:52:21 2026 by rpki-client