Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
File:                     45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json)
Hash identifier:          j+ytz9AxRDZzjcUHTR2w28BaffghndRW/xeNz9G1ozk=
Subject key identifier:   9C:2C:99:85:FF:91:0A:48:F6:C6:4B:A3:9B:AF:26:DC:27:C7:A0:89
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Certificate issuer:       /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial:       3601
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
Manifest number:          35AE
Signing time:             Thu 08 Oct 2026 15:11:22 +0000
Manifest this update:     Thu 08 Oct 2026 15:11:22 +0000
Manifest next update:     Thu 15 Oct 2026 15:11:22 +0000
Files and hashes:         1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: d7tGkDubJSDYU8/Le2vndrQZZBKhgmdv5oXHKks9mJw=)
                          2: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: t2gAVW67A8FPQSw43kqZ8vJl5Z2f7QWlR2JHEjIknys=)
                          3: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: PQ4w7noPPd89kB2ZqP2GFIaidvBQ5795NUCgBNRfmkU=)
                          4: E243CD9C227811F1B65A16B9A4833773.roa (hash: yUigKe1dmxmlY5PK8ANeaQZIVKCiPZVhXoUmPCQH+IA=)
                          5: 861025FE5FE811F1B01C65CA7947A888.roa (hash: LHiDdvarbkdpEuPe2M9rxWr2BXS9n0jE/IDZDbqEKUU=)
                          6: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: /ntl2F/1LsBUf6mHzNKm8AWIZa2QHwO1EhVJc7GNAWY=)
                          7: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: WwnnEfKvQW8AHFCsNUFqMuebGESi69lq9dTap91nOMg=)
                          8: 9B26CED6A5CD11F19849D7873311F970.roa (hash: 1s9JWmvLoOT3oTZ5WTALsLP5ZSFYgG75xPCol597wac=)
                          9: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: F6yN5hb+szomI3vf40niMr65NLLfxzSYiGO/WL4S7C0=)
                          10: 4CF39D56A79511F185FBCE2B4711F970.roa (hash: SMW4S5FYxczF25s5zzpkvjJXs6KT4YiUOpb73XRxxU4=)
                          11: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: RB+erqG+XmR03HPaW893e5ncuWrZ91RUCBgWmmNGCLs=)
                          12: 98AF39F22E4211F1901494E893833773.roa (hash: P8wptNIupCQw4+edhARjRq5yF0V3iibh8gRUxBJqX1U=)
                          13: DF361B00A5CC11F1A22117043311F970.roa (hash: Pob24smwgTjPWg3/zZl4f+wy5+QycWgluq4+t3FuClk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13825 (0x3601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
        Validity
            Not Before: Oct  8 15:11:22 2026 GMT
            Not After : Oct 15 15:11:22 2026 GMT
        Subject: CN=6ac7b29a-a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:df:40:c4:fe:f4:de:0c:3b:c3:95:af:30:
                    81:1e:fa:08:aa:27:1e:9b:e0:1b:62:3b:c2:65:db:
                    1e:dd:14:72:f0:55:5b:0d:f2:71:62:94:a5:b0:70:
                    c0:76:d1:90:c1:c6:d4:e9:17:e0:8b:97:fb:62:b7:
                    c2:e2:15:c3:66:b3:ac:aa:50:dd:ec:a2:b5:6a:c5:
                    06:06:fd:04:a8:04:9c:54:27:fb:cd:6c:50:50:f0:
                    8c:60:f5:38:ef:57:06:72:66:54:a6:9d:24:12:fc:
                    cd:69:90:0a:5e:40:8e:84:99:61:1b:c1:8c:a6:3a:
                    54:e9:09:64:e6:0a:3e:1c:6b:2a:47:40:12:2b:95:
                    28:2f:f6:9c:f1:5c:18:ea:b5:66:0d:20:97:93:4d:
                    9b:26:05:24:83:06:de:6f:52:7f:88:60:8c:52:58:
                    7c:21:0a:27:59:37:40:89:22:b0:16:82:b3:50:01:
                    58:4d:c3:c5:9e:30:75:14:92:a3:ba:5c:bd:94:2a:
                    1e:cb:4d:06:95:7b:9e:86:c9:a6:15:ad:a2:07:66:
                    6d:27:0e:32:dc:7a:9a:60:e2:6c:19:86:39:5f:00:
                    3d:c9:86:64:c3:97:eb:79:bf:3a:d0:84:21:5f:59:
                    01:73:93:77:a9:25:66:86:94:5a:1d:08:92:25:ce:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2C:99:85:FF:91:0A:48:F6:C6:4B:A3:9B:AF:26:DC:27:C7:A0:89
            X509v3 Authority Key Identifier:
                keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:49:f4:6a:1c:64:f4:75:4a:ca:13:5a:43:3a:b2:cd:b8:61:
         3e:d2:da:1b:14:6e:b5:46:bd:71:67:69:a8:60:1d:4d:11:59:
         f6:8d:b1:90:b4:b5:71:4f:9c:04:f7:fc:c4:32:28:2e:ab:52:
         d9:94:5e:b6:96:5b:60:30:f4:03:cc:cb:84:1a:0c:97:22:09:
         50:92:cd:ee:1b:f1:2b:f2:e1:27:d1:02:04:1d:17:fe:e9:2e:
         b8:a4:42:73:2e:99:26:84:a9:4b:92:40:b0:d9:e2:79:28:f4:
         45:ae:44:fa:ff:0f:22:a2:33:e6:27:6f:93:bc:81:24:de:6b:
         d8:9f:b7:a8:75:bd:a0:83:7c:79:f3:f3:30:10:ad:fb:31:3c:
         66:ec:e1:6c:ee:15:0c:62:81:29:eb:ba:df:33:97:d0:e6:ef:
         7b:39:7c:e3:09:9d:f8:ef:4b:5a:3b:eb:d9:74:b0:73:5c:0a:
         89:96:c2:f1:e0:e2:48:80:91:97:99:8b:6c:e3:02:83:f3:62:
         59:64:c3:44:77:8d:d1:06:f7:23:c9:bb:b7:80:1e:3d:90:a5:
         48:e6:99:38:70:cd:52:1f:e4:50:e8:29:27:56:d9:29:35:7c:
         99:b6:97:c1:a0:f2:e1:47:77:2c:45:b8:e4:3e:7f:2b:3c:ab:
         de:89:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:44:20 2026 by rpki-client