Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
File:                     Qg2MLsPSR5xUI6v_dHgriopLfeo.mft (raw, json)
Hash identifier:          3Rlf2JEf/FJHXzr5SCVEsY0SwdGmid7XRKFpMr0U4KA=
Subject key identifier:   98:91:D1:04:55:3D:9F:FF:2F:72:91:CB:EC:C9:7C:2E:F2:EB:4F:0F
Authority key identifier: 42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA
Certificate issuer:       /CN=A9182F75/serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
Certificate serial:       1D0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
Manifest number:          1CE4
Signing time:             Sat 24 Oct 2026 16:08:42 +0000
Manifest this update:     Sat 24 Oct 2026 16:08:42 +0000
Manifest next update:     Sat 31 Oct 2026 16:08:42 +0000
Files and hashes:         1: Qg2MLsPSR5xUI6v_dHgriopLfeo.crl (hash: UkU3SSOsY87jZOyHP638M7h8jz43NFKZMRBv0zu2zj4=)
                          2: A770EFB01E5611EFAF3FCB38C4F9AE02.roa (hash: EvrlKUJ7eCvu6YP+MtDTuqMrMSZ2GeflApGRKT/txT4=)
                          3: DD55266E1E5611EFAFFD4839C4F9AE02.roa (hash: wBGm4fFHkS0MsUDVoFS2mN9ly3H+yMyEnIGfWIGaVpk=)
                          4: 6892F5F2663C11F08C247C68C4F9AE02.roa (hash: QLCbgoMVS3G9VHYM06+C4WObA6B/KseYMNiE38jKgGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl
                          rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7436 (0x1d0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182F75, serialNumber=420D8C2EC3D2479C5423ABFF74782B8A8A4B7DEA
        Validity
            Not Before: Oct 24 16:08:42 2026 GMT
            Not After : Oct 31 16:08:42 2026 GMT
        Subject: CN=6adcd80a-ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:db:8d:42:af:b2:b5:d5:ee:84:b1:2b:a7:
                    b4:e0:cd:4d:a8:4c:b6:9a:50:25:d2:01:79:a5:b6:
                    18:9c:3f:f3:a4:39:52:49:d6:db:87:c3:f5:8d:57:
                    2d:4d:75:46:75:94:7d:e7:7a:ff:fb:9b:9c:b0:b8:
                    66:71:91:81:38:7b:ad:e5:6a:1d:68:c2:0f:0c:e8:
                    f4:df:e6:f8:5a:0b:36:6b:bb:51:ef:28:88:40:1d:
                    34:f6:a6:d4:5a:b9:91:f5:f1:19:00:56:7f:ff:82:
                    6e:ff:8a:9a:b9:a8:26:d9:61:d2:b5:e7:98:75:7a:
                    80:04:88:fd:96:a2:72:24:76:cc:a7:77:10:6e:5b:
                    11:78:d6:28:49:39:8e:06:b8:41:c7:ea:d4:71:77:
                    6c:8e:70:ad:7d:a1:d5:2e:14:b3:61:50:fe:57:2b:
                    18:09:27:37:c3:db:4c:c2:00:c0:25:6e:ed:95:28:
                    4e:22:5d:a5:37:cf:9b:cd:b1:27:25:f7:be:13:29:
                    fb:33:4f:f2:cb:3f:2c:be:6a:af:90:be:c4:d8:68:
                    5c:92:cf:b8:30:ea:ac:33:1c:e3:55:2b:c1:27:72:
                    05:c8:0b:59:4b:0d:06:64:b7:1c:82:5a:61:26:64:
                    99:19:09:fc:7a:04:d4:87:b2:15:10:84:00:79:3c:
                    e4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:D1:04:55:3D:9F:FF:2F:72:91:CB:EC:C9:7C:2E:F2:EB:4F:0F
            X509v3 Authority Key Identifier:
                keyid:42:0D:8C:2E:C3:D2:47:9C:54:23:AB:FF:74:78:2B:8A:8A:4B:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qg2MLsPSR5xUI6v_dHgriopLfeo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182F75/3C8CF63EFCBD11E688D3125EC4F9AE02/Qg2MLsPSR5xUI6v_dHgriopLfeo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:62:a6:a1:d6:26:0f:1f:45:c2:0b:4a:25:3e:d5:0e:1b:4b:
         b2:89:31:d6:ed:49:28:9d:14:05:f7:f4:89:01:f5:96:ba:73:
         49:f0:8e:5d:f6:13:f7:b4:08:95:61:bc:8f:c9:27:ac:55:d6:
         6e:e6:d3:95:d9:ef:f5:f1:cd:57:3f:b6:4b:fb:a9:98:f1:d7:
         e9:4d:0b:5c:bf:10:78:92:3a:a2:07:69:59:c7:c0:5e:45:4b:
         e8:58:b1:76:80:13:b5:e7:a9:00:dc:3b:25:77:8d:e5:f9:e9:
         c2:72:96:6e:bc:f6:d3:88:63:ce:f3:d8:0d:29:64:68:55:81:
         2a:a3:f0:18:1b:17:cf:05:4f:61:1a:d9:3d:79:de:6a:91:ad:
         f2:40:fc:b6:a8:22:8f:d4:8b:dc:d9:19:00:e0:95:0a:8a:36:
         9d:42:7a:f7:c1:6b:1c:b2:79:0e:8a:6f:67:0a:c8:e9:06:67:
         45:25:62:ec:79:d9:01:1a:23:58:52:22:8a:c4:8a:e7:c6:fe:
         30:d9:3a:e8:74:d1:14:b6:fe:ff:b4:ea:a4:83:e7:f6:08:e1:
         d0:47:ef:3e:55:d6:cb:03:d5:92:f0:01:77:d4:b2:d2:42:4f:
         7d:c2:35:fd:55:4b:9a:4c:3a:96:46:f0:02:d7:6f:47:31:c9:
         9f:d6:df:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGNzUxMTAvBgNVBAUTKDQyMEQ4QzJFQzNEMjQ3OUM1NDIzQUJGRjc0NzgyQjhB
OEE0QjdERUEwHhcNMjYxMDI0MTYwODQyWhcNMjYxMDMxMTYwODQyWjAYMRYwFAYD
VQQDEw02YWRjZDgwYS1lYTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqb7bjUKvsrXV7oSxK6e04M1NqEy2mlAl0gF5pbYYnD/zpDlSSdbbh8P1jVct
TXVGdZR953r/+5ucsLhmcZGBOHut5WodaMIPDOj03+b4Wgs2a7tR7yiIQB009qbU
WrmR9fEZAFZ//4Ju/4qauagm2WHSteeYdXqABIj9lqJyJHbMp3cQblsReNYoSTmO
BrhBx+rUcXdsjnCtfaHVLhSzYVD+VysYCSc3w9tMwgDAJW7tlShOIl2lN8+bzbEn
Jfe+Eyn7M0/yyz8svmqvkL7E2Ghcks+4MOqsMxzjVSvBJ3IFyAtZSw0GZLccglph
JmSZGQn8egTUh7IVEIQAeTzkzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiR0QRV
PZ//L3KRy+zJfC7y608PMB8GA1UdIwQYMBaAFEINjC7D0kecVCOr/3R4K4qKS33q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkY3NS8zQzhDRjYzRUZD
QkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1eFVJNnZfZEhncmlvcExm
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FnMk1Mc1BTUjV4VUk2dl9kSGdyaW9wTGZlby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkY3NS8zQzhDRjYzRUZDQkQxMUU2ODhEMzEyNUVDNEY5QUUwMi9RZzJNTHNQU1I1
eFVJNnZfZEhncmlvcExmZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKWKmodYmDx9FwgtKJT7VDhtLsokx1u1JKJ0UBff0iQH1lrpzSfCOXfYT97QI
lWG8j8knrFXWbubTldnv9fHNVz+2S/upmPHX6U0LXL8QeJI6ogdpWcfAXkVL6Fix
doATteepANw7JXeN5fnpwnKWbrz204hjzvPYDSlkaFWBKqPwGBsXzwVPYRrZPXne
apGt8kD8tqgij9SL3NkZAOCVCoo2nUJ698FrHLJ5DopvZwrI6QZnRSVi7HnZARoj
WFIiisSK58b+MNk66HTRFLb+/7TqpIPn9gjh0EfvPlXWywPVkvABd9Sy0kJPfcI1
/VVLmkw6lkbwAtdvRzHJn9bfwg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:35:05 2026 by rpki-client