Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
File:                     sQnalQV25mJneVo066kbw3qZI7Q.mft (raw, json)
Hash identifier:          5TZu9JStlbbpKFA3sCLABErAvnkXpoc2KeMFr8oSqfc=
Subject key identifier:   04:27:DC:6D:18:83:DB:55:DB:12:A3:3B:8B:CC:D8:A7:E4:C5:78:05
Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Certificate issuer:       /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
Manifest number:          C8
Signing time:             Fri 09 Oct 2026 07:38:46 +0000
Manifest this update:     Fri 09 Oct 2026 07:38:45 +0000
Manifest next update:     Fri 16 Oct 2026 07:38:45 +0000
Files and hashes:         1: sQnalQV25mJneVo066kbw3qZI7Q.crl (hash: hR3FuL2ar2UhlN9gKZfCAEqHeNNq+rWqUNpf3MEvdOE=)
                          2: A7C3D2B2316811F19417970E9A833773.roa (hash: tapVWMYlaRVDB9x1KJh3fh4Ygoi4OLRA4yRspnT+Bxw=)
                          3: C75F23C4319A11F1AC7C94E0AD833773.roa (hash: txPlNLEpFFcPD4p25mC0Viif58QbH/wxeKRKT0TeH0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
        Validity
            Not Before: Oct  9 07:38:45 2026 GMT
            Not After : Oct 16 07:38:45 2026 GMT
        Subject: CN=6ac89a06-f2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:a0:ce:81:2b:dc:32:58:19:51:33:07:5d:
                    7e:f1:2a:4e:24:79:29:61:e7:8b:ca:93:a9:59:b0:
                    62:d5:c8:7f:6a:52:68:e6:9b:a8:f0:80:1e:18:68:
                    e1:5e:c9:a8:ca:d4:8d:a8:5f:03:f2:61:92:f0:de:
                    e6:6f:20:d3:ee:9b:bb:41:b0:50:2f:dd:c9:b7:42:
                    b7:29:ed:80:fa:6d:bc:47:71:46:01:47:29:43:0a:
                    d8:b6:11:6e:d7:c4:b1:98:a3:8f:76:8c:5e:e3:94:
                    22:cb:97:fd:0e:1a:a3:28:3a:86:42:16:45:b3:18:
                    b7:95:17:2d:6c:29:01:76:5e:a9:40:ea:72:b9:b0:
                    f8:c0:7f:46:4a:fe:2c:74:83:29:0f:09:ea:be:8b:
                    27:d3:51:e3:73:eb:24:7f:26:0b:df:09:4c:da:c4:
                    3f:c5:41:e8:d4:f1:12:81:cc:2a:28:a6:18:2e:19:
                    9f:cb:cb:6a:00:80:be:27:d1:6f:bd:8e:77:91:16:
                    6c:1b:a8:64:55:90:f3:a1:0f:a9:a2:17:8a:be:cc:
                    64:22:d6:35:4e:99:bf:a1:9f:ef:03:69:5f:67:8d:
                    7d:cf:ef:e6:c9:d9:89:99:bc:02:b9:e7:d2:70:4c:
                    bb:13:3f:14:19:80:ca:0d:85:96:02:bb:2f:a2:b9:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:27:DC:6D:18:83:DB:55:DB:12:A3:3B:8B:CC:D8:A7:E4:C5:78:05
            X509v3 Authority Key Identifier:
                keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:13:b1:bb:a8:1e:16:98:c0:b5:d6:ae:ce:23:71:d6:36:7e:
         3c:8d:af:c4:26:05:3d:d7:c9:ce:c7:14:a4:bb:84:53:54:d0:
         61:22:a1:45:ae:0f:c3:c9:b6:61:eb:ab:db:f1:48:5d:19:e7:
         b9:98:4d:88:31:5a:23:8d:7d:41:0d:9d:f0:49:99:b9:0b:e9:
         d5:7c:12:06:6e:76:ea:d0:79:b6:69:39:c7:51:82:a8:da:5c:
         a0:83:ff:1d:1c:ef:8b:b0:5b:dc:c0:d7:ed:25:8e:f0:42:a4:
         69:fc:12:4a:1b:0f:78:b1:93:1c:f4:ad:b7:bc:46:bf:cf:c2:
         ad:4f:67:9e:40:2c:c6:64:9c:ed:b0:cb:86:3f:65:8c:84:50:
         16:80:9a:ca:3d:f9:5a:6c:c2:08:51:4d:b5:97:5f:cd:07:14:
         b1:58:25:33:ed:d6:60:d2:97:eb:12:00:f9:4a:94:a3:17:f9:
         25:33:a7:52:38:22:9c:c2:c0:c4:b2:f3:f1:c7:d3:24:71:f5:
         70:dc:05:05:94:ab:89:31:6d:dd:dc:b3:09:d7:7c:1a:51:01:
         d7:b2:d7:44:5d:d7:c8:17:60:62:d4:1c:f9:e3:0d:31:2b:d0:
         94:a9:39:5c:71:59:63:e3:cf:7c:cf:b8:d2:42:d9:5c:cd:7a:
         86:b1:1a:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZEQzkxMTAvBgNVBAUTKEIxMDlEQTk1MDU3NkU2NjI2Nzc5NUEzNEVCQTkxQkMz
N0E5OTIzQjQwHhcNMjYxMDA5MDczODQ1WhcNMjYxMDE2MDczODQ1WjAYMRYwFAYD
VQQDEw02YWM4OWEwNi1mMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzXugzoEr3DJYGVEzB11+8SpOJHkpYeeLypOpWbBi1ch/alJo5puo8IAeGGjh
XsmoytSNqF8D8mGS8N7mbyDT7pu7QbBQL93Jt0K3Ke2A+m28R3FGAUcpQwrYthFu
18SxmKOPdoxe45Qiy5f9DhqjKDqGQhZFsxi3lRctbCkBdl6pQOpyubD4wH9GSv4s
dIMpDwnqvosn01Hjc+skfyYL3wlM2sQ/xUHo1PESgcwqKKYYLhmfy8tqAIC+J9Fv
vY53kRZsG6hkVZDzoQ+poheKvsxkItY1Tpm/oZ/vA2lfZ419z+/mydmJmbwCuefS
cEy7Ez8UGYDKDYWWArsvornLvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQn3G0Y
g9tV2xKjO4vM2KfkxXgFMB8GA1UdIwQYMBaAFLEJ2pUFduZiZ3laNOupG8N6mSO0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDOS8wRTZGRjU0QUFF
NUIxMUYwOEM3Q0FDNTNDNEY5QUUwMi9zUW5hbFFWMjVtSm5lVm8wNjZrYnczcVpJ
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3NRbmFsUVYyNW1KbmVWbzA2NmtidzNxWkk3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NkRDOS8wRTZGRjU0QUFFNUIxMUYwOEM3Q0FDNTNDNEY5QUUwMi9zUW5hbFFWMjVt
Sm5lVm8wNjZrYnczcVpJN1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAexOxu6geFpjAtdauziNx1jZ+PI2vxCYFPdfJzscUpLuEU1TQYSKhRa4Pw8m2
Yeur2/FIXRnnuZhNiDFaI419QQ2d8EmZuQvp1XwSBm526tB5tmk5x1GCqNpcoIP/
HRzvi7Bb3MDX7SWO8EKkafwSShsPeLGTHPStt7xGv8/CrU9nnkAsxmSc7bDLhj9l
jIRQFoCayj35WmzCCFFNtZdfzQcUsVglM+3WYNKX6xIA+UqUoxf5JTOnUjginMLA
xLLz8cfTJHH1cNwFBZSriTFt3dyzCdd8GlEB17LXRF3XyBdgYtQc+eMNMSvQlKk5
XHFZY+PPfM+40kLZXM16hrEanQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:54:31 2026 by rpki-client