Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
File:                     sDQcND_hUl92ySmWEMoOeOk-h8M.mft (raw, json)
Hash identifier:          gprlDdpbcT/v4xppma20H4JdthWynJO18ghJgSE1hDY=
Subject key identifier:   EB:3C:7E:DD:CA:EF:ED:A2:FB:41:AA:69:92:73:54:6A:22:DB:05:AE
Authority key identifier: B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3
Certificate issuer:       /CN=A9167FBA/serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
Manifest number:          0129
Signing time:             Thu 15 Oct 2026 06:43:54 +0000
Manifest this update:     Thu 15 Oct 2026 06:43:54 +0000
Manifest next update:     Thu 22 Oct 2026 06:43:54 +0000
Files and hashes:         1: sDQcND_hUl92ySmWEMoOeOk-h8M.crl (hash: 0AaAKGEFWM62OxFq3SsbFxHJH64ayy20qTsp28lybfw=)
                          2: F4B92E1C05A111F082D17325C4F9AE02.roa (hash: 6P2hBxUHzqjP2+oG6i740uJYxBeonxP8fzF0Md+3yP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl
                          rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 06:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167FBA, serialNumber=B0341C343FE1525F76C9299610CA0E78E93E87C3
        Validity
            Not Before: Oct 15 06:43:54 2026 GMT
            Not After : Oct 22 06:43:54 2026 GMT
        Subject: CN=6ad0762a-bcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:7f:82:28:5c:99:ac:09:df:f6:d5:9f:96:
                    8e:71:28:c2:03:e7:81:92:d3:0c:9d:12:ea:df:11:
                    a9:58:ae:08:86:47:c2:37:cd:99:55:4f:a4:9b:d6:
                    94:93:6e:57:9f:86:10:57:78:7c:32:92:3f:54:d7:
                    e1:89:b0:93:bc:a1:bd:5c:b8:ef:3b:f5:7b:26:21:
                    42:f5:f8:cb:77:22:23:46:89:aa:c2:5d:c0:60:bc:
                    e9:ef:06:d3:7e:cc:a0:1d:04:7b:dd:37:ee:32:8e:
                    e4:ac:86:1a:1c:5b:85:09:c8:6e:07:4a:ef:64:9c:
                    fb:11:5e:a7:96:14:24:8d:c1:38:31:22:7a:3c:48:
                    2d:1c:14:81:08:89:92:39:a2:42:6b:42:d2:f4:a7:
                    f0:67:03:21:59:dd:2b:ad:6d:cc:db:f4:e2:93:21:
                    f5:3a:b9:cd:df:41:fe:4d:88:93:6a:57:dd:86:45:
                    29:f4:f8:d3:de:cd:82:cf:fe:4e:6d:cf:f4:a4:72:
                    c1:5c:5b:da:8b:fa:83:e4:22:dc:e7:79:ea:cd:c6:
                    ba:4a:b0:3e:09:a8:a4:e8:af:64:c8:4a:04:09:86:
                    61:73:96:76:d7:b8:9e:98:35:a2:f3:3a:40:c8:98:
                    85:ec:e1:53:70:35:29:22:97:5c:f6:c9:f2:b7:32:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:7E:DD:CA:EF:ED:A2:FB:41:AA:69:92:73:54:6A:22:DB:05:AE
            X509v3 Authority Key Identifier:
                keyid:B0:34:1C:34:3F:E1:52:5F:76:C9:29:96:10:CA:0E:78:E9:3E:87:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sDQcND_hUl92ySmWEMoOeOk-h8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FBA/42FC3D8A048F11F0872E8547C4F9AE02/sDQcND_hUl92ySmWEMoOeOk-h8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:41:ad:7f:1f:f3:30:f5:c4:f1:08:df:f8:e7:d9:74:08:
         56:18:4b:d4:12:7f:37:65:a6:d4:c4:05:28:68:19:e2:87:a9:
         ce:a4:a9:25:ca:37:3b:4c:d7:00:18:22:95:bc:92:a9:08:0c:
         cf:e1:10:0c:e3:ac:3c:c8:02:af:ef:7d:9d:26:5c:00:44:ea:
         60:4c:c3:69:47:21:fd:0e:fb:db:94:9f:3c:4b:53:9b:02:5c:
         03:d4:8c:44:ca:3b:85:b9:f5:57:0d:80:0e:e2:7f:46:bd:84:
         7a:52:89:a4:f4:c5:8e:4f:a0:34:9b:4a:e5:33:7c:aa:0c:52:
         5a:73:a3:ce:bb:a2:e1:6a:67:53:71:98:f4:48:eb:03:f4:99:
         98:0e:96:66:73:68:45:2c:9a:9d:7c:51:15:98:65:e3:81:31:
         79:af:54:ba:b1:16:a7:db:9e:21:89:18:7a:59:40:e2:81:db:
         bd:2c:75:96:0e:45:e2:01:2d:af:ae:28:ce:71:88:c3:a0:f3:
         85:9d:08:c9:91:12:b7:cf:57:77:af:36:50:d3:6c:75:3b:a1:
         76:01:4e:70:99:34:3e:5d:98:0c:03:e6:a2:6b:40:d0:cf:af:
         d7:31:d7:ee:82:3d:7e:a3:12:93:0b:b5:95:5c:32:b4:d2:07:
         18:ea:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:52:38 2026 by rpki-client