Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
File:                     Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft (raw, json)
Hash identifier:          eAGVAl57c645IpBgQqJBLP7S/hTBqEhZekRog6WXaCo=
Subject key identifier:   FA:C3:D1:9D:D9:05:4B:6F:E8:88:B0:24:8B:C8:C2:C7:EC:73:6B:E3
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       01B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
Manifest number:          01A6
Signing time:             Fri 11 Sep 2026 04:12:27 +0000
Manifest this update:     Fri 11 Sep 2026 04:12:26 +0000
Manifest next update:     Fri 18 Sep 2026 04:12:26 +0000
Files and hashes:         1: Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl (hash: 5KkUKxqTbOI9N+TQyONhbwf9Q1dp5vXBCYdlt0EAwZ4=)
                          2: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (hash: vL9CnB4VhNfvCGfjKTpVpyZ3hX+MBOGWCdcUnoltMFE=)
                          3: 17EA0C7A38DF11EF8EEDB25EC4F9AE02.roa (hash: /XTyxqSYUJyaevZitv5Zo/nsUreDwOBj39YjFuaF4Dg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 04:12:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: Sep 11 04:12:26 2026 GMT
            Not After : Sep 18 04:12:26 2026 GMT
        Subject: CN=6aa37fab-5b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:06:dc:ad:e0:1e:6b:5e:07:c6:3f:d9:5d:
                    a1:18:69:6e:96:b4:78:0e:25:69:0d:1d:84:77:9a:
                    31:be:ec:5c:b0:c8:3a:cb:72:79:30:a5:e3:bf:ef:
                    b8:8f:fd:db:2e:95:9a:36:a6:d0:f8:db:99:ee:31:
                    50:94:69:42:54:55:c5:1c:3f:01:e6:12:55:7c:e7:
                    5f:07:09:45:56:a8:e0:5c:59:94:15:a0:cd:a3:78:
                    b4:09:80:34:1f:d3:7d:1e:3b:f4:ff:0d:78:f1:40:
                    40:88:dd:e4:91:96:e1:1a:e9:0d:1d:e8:13:5c:f2:
                    fe:48:f4:3e:19:d8:42:44:76:f4:d3:b4:2d:a9:40:
                    52:9f:32:ea:c8:e2:83:96:33:c3:0d:73:f1:2a:bb:
                    d9:e4:0d:16:d8:a4:0b:ba:4b:bb:4b:d8:65:c1:a2:
                    c5:6c:54:db:50:92:cf:6f:d5:d4:ac:0b:67:0e:64:
                    61:e3:1b:4b:b2:5b:43:8e:93:e7:4c:37:d4:14:25:
                    dd:68:aa:6d:3b:5e:c5:a2:33:59:48:c8:fb:ec:f8:
                    2a:85:0e:77:bb:39:5d:8b:2c:e5:77:56:e4:0c:99:
                    55:16:00:9c:93:98:48:0e:dc:6e:d9:38:7d:42:4e:
                    aa:54:75:73:cb:ca:c0:67:d6:e9:7a:2f:fa:ab:8e:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:D1:9D:D9:05:4B:6F:E8:88:B0:24:8B:C8:C2:C7:EC:73:6B:E3
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:cf:35:c2:40:c9:eb:50:42:69:7e:bc:30:6a:20:46:44:66:
         e9:1f:90:d6:04:73:fa:a9:31:3e:13:24:fb:9b:a7:5a:e8:c9:
         57:86:8b:a8:51:47:e6:d2:2f:39:fa:03:e4:3f:ca:f9:a7:24:
         ce:cc:c3:02:ad:2c:4f:2c:d2:ad:93:45:81:bf:00:83:e3:50:
         37:c5:48:81:56:20:a8:6c:39:7e:b7:5d:fc:26:d3:69:2d:e0:
         94:04:a0:14:f6:98:3b:81:3a:97:d1:34:23:cc:89:5f:66:2e:
         09:6b:df:ad:3a:d2:8a:be:71:7e:ef:6c:d9:1a:1f:d6:e9:97:
         6b:7a:74:2c:a2:f4:aa:ef:7a:3a:33:65:73:8e:46:a8:99:66:
         47:a9:50:41:91:91:26:56:74:b5:f3:03:d4:ba:f8:1a:1a:91:
         30:de:8b:92:fc:72:ba:e2:99:79:7c:fd:db:d2:94:2d:c5:42:
         bc:84:97:8e:1c:3f:98:12:3a:68:40:5a:e3:b4:a5:79:94:f1:
         95:95:a4:e8:bc:b4:3b:ef:f4:9e:39:30:6c:a1:14:c2:2a:31:
         88:24:8d:77:50:bd:a5:1d:41:27:9a:82:17:5b:82:e6:b7:76:
         96:c2:ff:91:10:8f:10:e0:9b:92:18:18:e8:ed:1c:60:bd:72:
         fe:ba:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 00:59:25 2026 by rpki-client