Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
File:                     QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json)
Hash identifier:          HLjTv05YBWWloDDoVPcN2WBsn5Z+GQmlQ46AHhqG+90=
Subject key identifier:   FD:62:58:C7:66:86:E3:66:11:23:92:AB:59:7E:1C:19:9A:A5:1E:F5
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Certificate issuer:       /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial:       0D79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
Manifest number:          0D4C
Signing time:             Sun 04 Oct 2026 18:23:00 +0000
Manifest this update:     Sun 04 Oct 2026 18:22:59 +0000
Manifest next update:     Sun 11 Oct 2026 18:22:59 +0000
Files and hashes:         1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: 9FCeVPef+EB5mrplO2HCHC7H3LFlaxsOoyF+lAMZIwU=)
                          2: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (hash: S4RngeSsrDWRVEdowSh+mWQ91kYaeScRFv54RIFCUlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
                          rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3449 (0xd79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
        Validity
            Not Before: Oct  4 18:22:59 2026 GMT
            Not After : Oct 11 18:22:59 2026 GMT
        Subject: CN=6ac29984-400f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:55:62:6c:80:a6:5a:cd:e1:5d:e1:79:49:45:
                    5d:0a:91:cb:48:84:21:e6:b2:60:c1:73:01:4b:ea:
                    b2:c3:01:58:54:a4:52:75:c0:c2:ec:4f:ae:42:70:
                    84:d2:c5:44:96:93:1c:23:d3:a6:36:66:cd:ab:0f:
                    2b:60:c9:0b:00:3b:8d:8e:f7:8c:ec:0f:6f:4a:5e:
                    83:bf:7d:af:13:db:aa:94:03:cb:cc:44:0a:ee:c0:
                    7e:c4:d6:ea:93:05:73:e1:7f:ba:83:1c:b7:e8:a0:
                    ad:b9:64:a5:a0:c6:ec:a6:a6:f6:23:5e:a9:fb:7f:
                    cc:8c:48:e6:7b:4a:56:19:68:d0:36:57:44:ce:79:
                    08:85:47:19:59:28:43:ea:8a:17:a1:43:d3:cb:45:
                    46:2e:49:13:a4:a2:5b:81:15:08:53:24:d0:b4:ae:
                    4e:82:6e:ab:b7:a9:0f:13:4a:22:fe:59:5a:11:b7:
                    07:00:ab:d3:39:7d:3c:97:2f:1d:67:a4:cd:f6:0f:
                    93:48:c7:51:9e:6c:53:02:c3:77:2e:4f:67:b4:cd:
                    01:ac:50:b9:d6:e5:c5:5d:a4:27:6b:6c:f0:d3:72:
                    9f:1e:c9:18:4b:29:03:7a:52:88:0a:bb:97:9a:1f:
                    e5:b2:f2:a3:3f:1a:6f:69:29:bb:8f:c4:08:f0:0f:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:62:58:C7:66:86:E3:66:11:23:92:AB:59:7E:1C:19:9A:A5:1E:F5
            X509v3 Authority Key Identifier:
                keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6f:6b:38:c9:08:c4:44:7d:d0:c0:22:63:17:02:61:b2:42:
         24:22:35:1f:9e:3e:f7:de:bc:4c:69:98:c5:f0:68:93:80:17:
         17:ca:ae:3e:ef:8a:15:15:a2:aa:e0:da:b7:db:4b:cc:6c:65:
         a8:47:dd:9d:57:e5:70:9f:f8:84:e4:da:3b:8b:58:a3:9f:55:
         bb:44:8e:7a:89:8b:a0:26:91:96:be:db:ae:0e:c9:b2:d6:f5:
         e9:0b:e7:e7:72:d9:04:57:18:a6:bc:2a:2b:69:14:ae:f5:a8:
         27:5c:66:65:1b:9e:73:73:d4:c8:00:ea:2a:24:b7:47:12:fd:
         ed:e1:59:94:f5:98:5e:60:cc:90:c0:64:09:4e:38:53:69:9d:
         93:4d:2b:9b:1b:cb:cb:d6:98:01:66:61:3b:84:40:f3:3b:9b:
         54:21:2a:1e:1c:c5:da:45:dc:9f:c7:d6:3e:93:bf:64:de:bf:
         49:8b:b2:43:bf:4e:56:57:e4:b0:f2:42:d4:6b:b3:5b:4b:4e:
         61:fa:26:17:74:3e:22:0f:3f:5c:e5:53:f3:78:4a:8c:52:1e:
         d5:64:2e:1b:68:c7:df:97:76:c0:f4:c6:8c:3f:84:98:d7:03:
         c9:39:53:27:28:53:e6:9b:ac:e9:a3:af:a6:aa:cc:e9:b1:28:
         3b:be:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:25:19 2026 by rpki-client