Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File:                     f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier:          9gw1h2CO9PAEYjg/5sJG1MbbB5Bob+VdmsF+ti+U3xg=
Subject key identifier:   4F:7B:36:66:F7:D3:6B:34:E1:EA:E5:E5:D9:CC:70:CA:77:4B:B9:EC
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       06F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number:          06E2
Signing time:             Wed 16 Sep 2026 22:15:42 +0000
Manifest this update:     Wed 16 Sep 2026 22:15:41 +0000
Manifest next update:     Wed 23 Sep 2026 22:15:41 +0000
Files and hashes:         1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: fnZOp7lnwvZcqGBciPMnnOQ5579BNGN70Sp++vaAiVA=)
                          2: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: y+lFHngfQnlFkbwbfAnNnYvQWplxE2BUU73qj0ZDaUw=)
                          3: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: nKGpkEspHYoLDWlKrq+T1eLZcO38KBQKAU4XkN0Vf1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 22:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1780 (0x6f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Sep 16 22:15:41 2026 GMT
            Not After : Sep 23 22:15:41 2026 GMT
        Subject: CN=6aab150e-4dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:9a:5b:48:37:9a:44:68:3e:0a:af:3b:7b:
                    9e:9f:df:df:ac:d3:fa:3f:88:2f:6e:f8:ef:c2:46:
                    30:fd:1b:b0:c6:46:00:c6:0d:c8:bd:d6:66:dc:b7:
                    56:a5:c9:a4:86:b1:23:85:30:6b:d9:f8:8c:aa:5d:
                    76:fe:0b:a1:2e:ef:b2:69:01:a9:08:f0:3c:8f:a0:
                    d3:b0:c5:89:ad:d4:be:08:8d:60:65:95:3c:b6:a2:
                    ad:b2:52:f6:4c:73:30:c6:b2:c8:a8:27:90:50:89:
                    f3:46:7d:85:bf:56:18:c0:20:21:73:42:c6:4b:b7:
                    59:68:a8:c2:8a:83:1f:d7:20:c6:68:9c:6f:12:3a:
                    9d:b0:47:46:0a:36:9e:4b:82:f8:f5:a3:78:a4:ed:
                    7b:83:fd:68:f4:e8:9b:af:ab:4b:a5:ca:cd:9b:fe:
                    94:31:7c:cb:b6:05:7b:60:14:4a:ad:67:0f:39:c1:
                    ff:51:70:94:ab:a5:8a:25:ca:5f:c4:e5:35:c6:8d:
                    38:02:14:14:93:a6:2a:64:b3:5f:72:9b:51:47:20:
                    7e:89:69:11:25:95:84:f0:ed:56:e7:97:3a:ae:19:
                    07:28:1b:7e:9d:42:e2:38:81:05:18:bf:65:36:a8:
                    bd:ba:4c:cf:f4:6f:f8:44:e0:cc:0a:53:b2:92:dc:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:36:66:F7:D3:6B:34:E1:EA:E5:E5:D9:CC:70:CA:77:4B:B9:EC
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:69:a9:7c:95:32:fa:f2:58:bd:56:96:25:f9:c0:6f:93:
         02:93:5d:56:dc:b4:06:84:c9:82:4a:b2:46:24:51:6d:7b:6d:
         83:cf:bf:58:84:89:66:28:8e:b9:00:52:94:87:2e:ea:af:6c:
         73:ef:ff:5c:9a:2e:95:89:f1:79:26:be:93:0e:e3:80:9f:b9:
         e0:cd:17:65:a7:15:b8:5d:43:ca:f2:aa:c1:48:a4:4e:0b:f3:
         2c:d4:94:5a:89:a8:b5:24:b5:c1:03:23:be:1d:d5:8c:62:aa:
         e1:82:90:2c:a3:75:e7:7a:cb:f1:1c:b3:0b:8e:94:4d:19:0e:
         62:46:ed:8b:b3:94:cc:35:79:54:2c:36:00:6c:5b:4c:c5:d4:
         50:d4:24:ab:71:4f:65:eb:26:dc:a4:db:14:26:03:93:fd:c1:
         9f:44:83:a3:92:a5:8e:50:9c:10:6d:b7:2c:9d:ac:73:c7:42:
         b8:ee:c9:18:6f:45:03:ae:4f:74:23:6e:83:2e:d5:eb:f9:ff:
         1a:2b:be:6c:76:e0:ac:f4:a5:82:2d:05:ef:5e:9a:b1:bc:40:
         52:93:19:b7:b1:25:57:22:be:65:44:05:3f:57:18:c0:b1:d7:
         d2:7a:2f:b5:10:07:48:33:e6:a3:da:e1:81:4e:19:b8:92:fc:
         ab:d3:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:01:36 2026 by rpki-client