Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
File:                     rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json)
Hash identifier:          kzQM3Kw3J+bw2HGv2Sm4oNMVUJgO7Ohrg74e8XW9uGk=
Subject key identifier:   E6:A7:E6:14:6E:BC:FB:D0:59:A9:02:1D:26:95:DA:87:AB:1E:9F:F7
Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A
Certificate issuer:       /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
Manifest number:          0153
Signing time:             Mon 19 Oct 2026 05:52:20 +0000
Manifest this update:     Mon 19 Oct 2026 05:52:20 +0000
Manifest next update:     Mon 26 Oct 2026 05:52:20 +0000
Files and hashes:         1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: FXDCd3/RIEBdaVFMLVJfNuBRqG9HzCQiVnKcNXgMyww=)
                          2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl
                          rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:11:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A
        Validity
            Not Before: Oct 19 05:52:20 2026 GMT
            Not After : Oct 26 05:52:20 2026 GMT
        Subject: CN=6ad5b014-719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:e5:34:0d:39:a4:65:bf:01:34:a6:77:2f:
                    be:f4:01:7c:5e:ed:a9:67:fd:ad:ac:e5:56:60:ca:
                    96:72:40:0e:00:83:07:96:1a:bd:a3:df:54:0b:63:
                    c8:4c:a5:d9:20:fc:bb:e2:44:b4:a9:bf:e8:7c:39:
                    a4:e7:74:b8:c9:99:70:bb:22:c6:fa:fb:96:e2:6a:
                    28:22:77:c5:48:06:78:96:53:de:5f:26:02:98:0f:
                    da:06:87:55:a6:b1:e0:f6:3e:db:ea:5c:7f:fd:2d:
                    b2:27:05:1f:e8:a1:ed:6d:61:95:0c:ff:aa:56:ff:
                    2a:f6:21:2e:f8:49:a5:aa:13:d5:a6:07:37:57:d3:
                    49:9d:42:fa:e5:3d:87:4e:75:dc:15:0f:19:c9:d3:
                    46:2a:11:39:6b:90:46:92:83:1c:23:94:06:1d:ae:
                    67:61:b1:df:52:ab:d9:f7:3b:b7:b0:19:04:72:44:
                    c7:8c:9a:81:47:1b:6f:4e:09:7a:10:2f:4d:8b:54:
                    7a:87:28:a4:0d:b7:b3:98:12:1b:7d:1e:65:e5:e7:
                    7b:c3:18:37:6e:7e:87:95:3e:bc:30:7e:da:b7:7b:
                    05:ea:e8:20:b3:be:b4:f1:39:43:83:dd:41:d2:5c:
                    83:20:a9:52:b6:72:e0:c8:17:06:2a:cb:71:1f:2b:
                    47:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:E6:14:6E:BC:FB:D0:59:A9:02:1D:26:95:DA:87:AB:1E:9F:F7
            X509v3 Authority Key Identifier:
                keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:56:e9:54:57:e9:bc:20:0d:5f:5f:af:9a:17:be:5e:b5:67:
         df:38:1e:3e:1b:3d:8e:29:9f:57:58:90:21:20:86:08:ae:bb:
         1f:16:16:c6:46:ed:c4:b8:95:84:d7:8b:62:0f:7a:3e:66:0f:
         e6:d2:38:07:3b:8b:32:65:d9:3c:9b:00:95:07:84:96:12:de:
         8e:aa:df:1a:66:a6:09:b3:86:98:d8:09:aa:f6:a8:30:8d:d2:
         b0:9d:d4:f1:b2:f2:d3:83:7e:9a:1c:12:e9:5a:2c:0c:18:a1:
         2e:bc:23:a5:1c:de:49:94:5f:5a:4d:ab:74:3c:b0:82:1b:27:
         f6:5e:1e:f3:a8:73:01:d6:7f:a8:78:3e:af:d1:5d:8e:02:70:
         39:5c:a3:8f:ec:6c:0e:e1:6b:d7:d8:4f:8f:16:ca:e0:ee:46:
         6b:b7:6e:2a:f5:f1:7d:ab:94:27:44:ce:a5:89:0e:85:18:62:
         44:b5:ea:7d:15:68:4f:74:76:94:5f:6e:62:82:aa:16:dd:68:
         67:9d:a8:02:cb:a7:d4:29:64:66:24:6d:14:98:ce:99:84:96:
         c7:e3:f8:93:a2:30:92:c1:54:89:f0:54:36:18:40:3e:ef:84:
         88:01:65:a2:20:73:11:91:49:ea:01:df:8f:0f:80:8d:35:2c:
         b9:37:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:52:02 2026 by rpki-client