Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
File:                     _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json)
Hash identifier:          4PSFBjN7BeZu+bixenKc6sN7ObnbuKZvhj8rJrZGQo4=
Subject key identifier:   C3:FB:1D:9E:02:97:C0:AE:20:AB:3F:9B:10:91:35:2D:B4:69:09:0E
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       1976
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
Manifest number:          194F
Signing time:             Fri 16 Oct 2026 16:29:14 +0000
Manifest this update:     Fri 16 Oct 2026 16:29:13 +0000
Manifest next update:     Fri 23 Oct 2026 16:29:13 +0000
Files and hashes:         1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: odnymg7DkMep70ShspRemn8K6agNYNQH/zLy9+tHwOM=)
                          2: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: UaUfBSgIdj9KKGl52SHu3L34u8bPrTfYu+3DtVvRz+c=)
                          3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: Vi/z+ybxC9owzZhA5rem9ojMHdxbp7LyWOc9Ai5M6UA=)
                          4: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: ugAdyITyl3jjkM5TSX/sl89uA0LzGbZjsV8crXd5c5E=)
                          5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: yfibStgl4mXerGufqCVOrviIGUB8px5dSSyzGRYwGIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 16:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6518 (0x1976)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Oct 16 16:29:13 2026 GMT
            Not After : Oct 23 16:29:13 2026 GMT
        Subject: CN=6ad250da-bc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:b2:ce:a1:ca:d7:16:e2:98:ff:a7:4d:54:
                    f4:ab:4c:77:4d:f0:fa:f7:21:31:64:96:0f:63:56:
                    05:cb:6d:f8:56:1e:aa:1b:6f:3c:be:90:57:ea:43:
                    e3:26:7d:23:ae:94:22:1c:8a:73:be:62:f8:04:34:
                    aa:1b:e6:a9:64:0c:cd:23:1a:0b:36:81:e2:e0:b9:
                    67:0f:17:2a:a2:5a:46:b9:f1:5d:03:58:3b:73:a3:
                    37:cb:7b:1d:6c:51:ca:e1:10:0f:ae:93:14:fb:ec:
                    d2:f3:ce:ba:88:bc:bd:f4:73:01:ce:d4:8d:6f:da:
                    9d:f8:9a:e0:e0:f1:6f:43:a7:ae:26:ac:79:64:22:
                    73:0c:71:11:51:aa:48:e0:33:62:64:8c:b7:96:cb:
                    a8:cc:3c:e5:83:67:e1:a8:64:ce:5b:f8:2f:3c:0b:
                    ce:29:74:1c:03:49:29:c0:c0:a9:52:01:24:c9:17:
                    c6:bd:bc:e8:6d:42:c9:41:6d:46:38:70:ee:d4:f6:
                    ce:d2:b3:cd:ed:51:e2:32:28:6d:77:64:1f:2c:8e:
                    33:80:40:7b:d3:7d:bc:40:4c:63:02:c9:50:9d:ff:
                    fc:c1:a1:16:3d:24:92:fb:51:e9:da:22:7c:36:cb:
                    89:ee:94:91:44:00:fb:6c:a4:1c:ad:47:f3:69:6d:
                    2e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:FB:1D:9E:02:97:C0:AE:20:AB:3F:9B:10:91:35:2D:B4:69:09:0E
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:e9:22:38:59:78:63:fd:ed:66:f7:16:54:99:10:bf:0a:
         d5:c6:1d:03:a5:3c:06:58:68:f8:32:15:8f:cd:7c:62:b5:02:
         41:aa:f5:55:a9:72:81:6f:97:1e:d5:76:b1:26:a6:8e:e7:dc:
         3a:15:f2:8b:34:7c:fe:df:d6:cc:11:a6:69:53:7a:7a:62:b8:
         dd:39:67:d2:96:73:63:97:e4:cd:45:33:21:b7:43:fc:42:d0:
         72:f3:43:5d:1b:50:87:9b:f0:9c:b8:fa:74:2e:35:43:e8:1b:
         38:3c:6a:5e:01:a8:69:cd:c5:45:fc:48:3d:a5:a1:0d:66:f1:
         10:fe:4a:eb:90:18:03:ca:f4:e6:49:ba:5f:a2:4c:8f:f3:85:
         cf:2e:6f:8a:d7:96:33:85:db:10:17:8f:40:56:34:50:52:cf:
         f0:35:d7:fe:0c:5b:b1:ce:6d:c2:ed:01:98:47:73:16:a9:f8:
         fa:7d:bd:d7:f2:b0:c4:dd:92:b1:ed:1a:0f:70:e9:79:59:3c:
         e7:9a:e7:7e:c7:94:85:c5:a9:9d:a5:c4:b5:7f:1e:4b:9f:6d:
         11:5a:57:d6:9e:31:1e:26:2e:74:10:87:eb:f6:99:f4:a3:e6:
         03:d4:5e:2a:2e:1d:60:84:67:59:51:66:4d:e9:db:ab:74:0f:
         94:47:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:17:13 2026 by rpki-client