Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
File:                     qI7iP_jXCCjO28cB54yAdH_8Eco.mft (raw, json)
Hash identifier:          56Qv8u/OyOe0CUxymtld5YMImYhaFtgUuPcEovNdSpg=
Subject key identifier:   B6:78:16:5E:65:BD:E6:7E:74:8D:3E:E4:F2:B6:90:3A:DC:9F:56:A4
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
Manifest number:          014F
Signing time:             Tue 27 Oct 2026 05:38:12 +0000
Manifest this update:     Tue 27 Oct 2026 05:38:11 +0000
Manifest next update:     Tue 03 Nov 2026 05:38:11 +0000
Files and hashes:         1: qI7iP_jXCCjO28cB54yAdH_8Eco.crl (hash: w9OOqySWurp3sUSR63Iiq1corQ/BMq1CzYgV4LWvvUA=)
                          2: 31F9C990668B11F0B10A9677C4F9AE02.roa (hash: 0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
                          rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
        Validity
            Not Before: Oct 27 05:38:11 2026 GMT
            Not After : Nov  3 05:38:11 2026 GMT
        Subject: CN=6ae038c4-1f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:4b:33:5d:09:a9:7d:35:f0:15:93:4e:d5:
                    c1:f6:89:4d:50:21:26:24:4b:f7:76:60:b4:c1:d2:
                    38:da:9a:93:f6:37:88:e0:1d:90:57:72:14:1b:66:
                    5f:b2:7b:bb:0a:e8:9d:69:dd:98:c9:4b:e2:37:69:
                    d9:ad:2a:25:ab:2e:53:78:81:2e:e2:f7:95:c8:65:
                    57:e8:a4:d2:a6:56:1a:cc:29:23:e0:f6:7d:77:fa:
                    12:b7:40:d8:93:6a:3e:5b:75:28:7c:b1:ce:7d:4c:
                    de:4a:b1:ba:a8:bd:00:89:d2:fe:73:01:60:fe:c1:
                    4c:c8:b8:0c:4e:64:d8:72:e0:23:ab:c9:c4:62:54:
                    9b:81:d3:cb:74:da:1f:46:bf:2c:01:bf:b6:41:87:
                    a5:f5:d5:b7:ae:0b:7a:3a:ed:8d:e7:d4:82:f0:c7:
                    2e:94:96:61:30:e9:0e:33:a5:00:b6:9a:9d:cc:ec:
                    12:b8:99:93:7e:23:f4:b9:39:4d:51:39:03:27:15:
                    ca:5a:63:e0:1b:aa:3c:f6:d3:92:c0:f9:db:be:07:
                    34:dc:01:5c:95:7e:1a:00:89:ff:6d:e2:74:6a:7c:
                    3a:01:70:80:34:c2:c9:26:fd:d1:0a:a5:2f:3b:ab:
                    e2:11:5c:a5:dc:b6:be:a7:c0:61:a3:ec:73:af:42:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:78:16:5E:65:BD:E6:7E:74:8D:3E:E4:F2:B6:90:3A:DC:9F:56:A4
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8b:64:6d:f0:6a:5f:98:fc:ab:ae:41:37:02:e2:37:3a:c8:
         e5:bd:a4:cc:37:02:bd:5c:c8:6c:33:7a:68:3f:08:88:56:91:
         ab:25:d9:f2:0f:33:10:48:0c:98:76:d0:b8:fd:a2:ce:b6:da:
         5f:e0:1c:85:a2:49:5c:9c:c3:b5:6c:e3:c3:e3:b0:8d:ad:e9:
         9f:4e:c4:d9:77:d6:6b:94:78:6f:a1:cd:a6:73:a7:7e:d2:aa:
         a2:ef:e0:2a:cf:24:65:5c:7d:95:39:4f:4a:b5:5e:de:ac:3f:
         3f:a1:c7:a5:94:82:d3:37:c9:62:92:39:22:90:6f:69:46:7b:
         4a:54:74:b6:3d:44:6d:b6:ac:78:85:96:93:08:2b:6e:90:5d:
         14:60:c0:73:9c:d4:25:06:77:04:85:17:ec:a6:6e:70:1c:13:
         2a:cc:a0:27:18:9a:10:c7:45:39:0d:87:45:b5:d0:83:50:d3:
         b3:55:91:12:3c:43:7c:1b:87:1b:7c:d4:41:f3:7b:bc:27:a4:
         37:6d:e7:95:37:b3:7b:f7:4e:9a:1b:a1:6d:c0:c7:7f:c9:01:
         71:3f:fb:8d:81:cf:15:7a:75:fd:ae:a0:fd:75:8c:72:2e:5b:
         6f:6a:8e:f6:af:05:c4:72:e5:23:91:d3:9b:8a:a6:46:2c:00:
         ac:88:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:29:24 2026 by rpki-client