Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
File:                     _QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft (raw, json)
Hash identifier:          ilU/zFnDfXx9fSgyKJDrrZ8Fpd7GJcTnrRZokFFZrG8=
Subject key identifier:   4A:F3:C5:DD:B6:FE:D4:37:4B:DF:CD:97:A9:C3:EE:04:34:AB:BD:06
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Certificate issuer:       /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial:       0E35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
Manifest number:          0DE7
Signing time:             Sun 04 Oct 2026 18:00:21 +0000
Manifest this update:     Sun 04 Oct 2026 18:00:20 +0000
Manifest next update:     Sun 11 Oct 2026 18:00:20 +0000
Files and hashes:         1: _QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl (hash: JgtrI+lvT1JqEB4lcnDqM9h1RiZRpQ0tNW8Wob3cBNc=)
                          2: C22B92AA081011EDBC3C4374C4F9AE02.roa (hash: WtRbho5g5BDH0VmjD381QM1AFpgUjX2PrH3Z2ld09Yw=)
                          3: BA4B6EF2FFC611EEBEC2A923C4F9AE02.roa (hash: rSNRm7Q4WMCIBH8hkTL3prpi5y8Vemq3QMOyN8boMh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
                          rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3637 (0xe35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
        Validity
            Not Before: Oct  4 18:00:20 2026 GMT
            Not After : Oct 11 18:00:20 2026 GMT
        Subject: CN=6ac29435-c6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:80:b5:58:c3:a6:4d:8f:70:76:40:54:21:
                    8a:9b:d8:92:b7:47:bb:19:a2:ed:72:0f:15:8b:ce:
                    22:db:b4:73:3d:47:bb:8e:54:1e:af:98:19:e3:7e:
                    ef:a7:31:0a:96:65:9f:36:89:d4:c8:ac:86:cd:2f:
                    2a:ae:3e:60:06:2f:cf:c5:66:7d:4c:0f:fc:29:f0:
                    39:ff:1d:aa:59:61:68:8c:c1:d9:85:f6:82:f5:58:
                    ce:45:ec:70:d2:15:aa:b6:20:0c:45:59:ad:8e:ef:
                    e7:61:32:80:a6:7e:cd:ec:36:dd:00:9e:33:4f:70:
                    0a:ed:04:e5:d0:28:0c:41:fa:e7:c2:0d:83:8e:79:
                    ba:fd:8b:5b:d5:5d:11:94:da:d0:bc:47:b3:a6:59:
                    07:a9:b1:75:79:70:29:c8:32:2c:86:2f:35:f0:fd:
                    4d:13:f2:94:ee:da:64:71:7d:a4:da:1d:f0:48:b0:
                    8b:dd:4e:16:52:37:59:2f:2d:d9:82:39:5b:1d:5c:
                    78:7b:3e:12:2c:8e:4a:f8:e8:7e:1b:04:2f:a3:e5:
                    41:7a:75:a1:c9:c5:4f:a0:02:f8:1e:e4:66:d0:d1:
                    49:c6:8f:44:29:32:13:0c:0f:e4:d2:f6:ed:78:e5:
                    f4:21:85:d6:5a:40:ca:d3:0b:01:ee:a0:8f:9e:8f:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F3:C5:DD:B6:FE:D4:37:4B:DF:CD:97:A9:C3:EE:04:34:AB:BD:06
            X509v3 Authority Key Identifier:
                keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:76:6b:6e:89:33:09:cd:fd:80:69:db:8f:b3:cf:6a:56:0e:
         56:28:4f:92:85:ec:96:b0:41:9d:c5:e7:a4:af:9b:a4:99:18:
         45:57:7f:5f:71:17:ed:20:60:e0:12:63:3a:1e:e9:6d:8b:56:
         69:af:e1:02:54:b5:51:5b:9e:5e:05:0f:f8:45:ac:3b:77:bd:
         cc:f5:36:69:2e:b4:5d:4b:8b:5b:99:2e:37:ff:30:21:0e:db:
         e5:7a:96:bb:b5:45:ad:0d:17:7b:fe:56:e1:2e:e0:9d:95:2e:
         5c:cf:f8:f7:c0:1b:4c:87:75:b7:2f:04:dc:94:5b:7c:6d:c3:
         32:b7:3a:71:6f:c3:6d:ea:69:a2:de:f4:7f:b6:8e:6c:ff:7e:
         65:32:8f:5b:16:0e:87:0b:36:50:60:28:69:e7:fe:15:6b:9e:
         65:0d:bc:6e:1e:31:3f:fa:df:65:39:d9:a8:02:62:29:cf:0f:
         42:b8:54:91:73:9e:01:db:61:35:19:2a:8f:64:e1:48:89:3b:
         69:8a:82:14:61:6f:86:09:bd:4d:97:93:61:a8:07:60:78:9c:
         0c:d9:d5:a5:95:4f:e0:97:94:f8:df:13:20:80:01:ff:88:db:
         86:38:27:56:fd:e0:39:9b:02:85:a8:32:94:07:6f:4e:20:75:
         95:fb:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 16:03:17 2026 by rpki-client