Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
File:                     Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft (raw, json)
Hash identifier:          gRI62D0afYkX7Nq9HigAs+20i0E6KDs/W6qhzBcefNE=
Subject key identifier:   3C:5E:54:D8:B0:D3:A9:83:1D:12:BB:3E:F3:5B:35:C4:BC:A6:6D:D3
Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E
Certificate issuer:       /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
Certificate serial:       21BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
Manifest number:          572A
Signing time:             Sun 04 Oct 2026 14:53:20 +0000
Manifest this update:     Sun 04 Oct 2026 14:53:19 +0000
Manifest next update:     Sun 11 Oct 2026 14:53:19 +0000
Files and hashes:         1: Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl (hash: lWx9kaSVos4X2fwEfOYkIj1kJW4zvlKoVZTsSLVvwoI=)
                          2: 0211478AB48E11EF81F55F3CC4F9AE02.roa (hash: eXbj2/2PGJubPsuJy/6g3AgLU0HNFQl847an+DeMHhU=)
                          3: 01804686B48E11EF81F55F3CC4F9AE02.roa (hash: N4+8fycTDr0KyyL1T8BnM1QnlOy4E1P+9kvY0kSTWus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8638 (0x21be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E
        Validity
            Not Before: Oct  4 14:53:19 2026 GMT
            Not After : Oct 11 14:53:19 2026 GMT
        Subject: CN=6ac26860-5792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:aa:b6:c1:d1:c9:43:ea:c7:a3:da:97:08:
                    36:68:71:43:5f:d8:18:89:34:04:37:5a:89:1d:fc:
                    85:18:c8:18:e8:ed:d3:05:b5:d7:6d:13:62:29:fa:
                    ce:35:24:8d:97:4f:8b:07:ce:8d:87:e7:d3:10:14:
                    f7:0e:79:83:be:40:f1:ed:00:77:61:28:a0:31:c3:
                    a7:de:05:b9:fe:4a:8a:34:00:c1:9f:ea:90:0c:26:
                    63:b7:2b:9e:33:39:11:19:15:fa:51:08:38:55:1d:
                    46:50:5f:89:7c:22:27:a8:84:69:d0:e3:52:e3:40:
                    d1:95:00:c6:5d:80:26:03:77:be:8a:32:3d:ce:6e:
                    b0:7d:72:e3:ad:f6:ce:2b:32:8f:97:83:da:92:55:
                    ae:ca:8b:61:24:28:b1:6a:1a:80:9d:fe:21:df:f3:
                    45:fb:c2:d0:b7:1d:c8:00:94:00:d3:a1:ba:ed:79:
                    20:ed:59:c7:74:f7:9a:69:46:9e:c4:35:fb:e0:65:
                    3d:83:66:4d:33:77:b9:61:8d:ab:7f:f8:ea:1d:bb:
                    e2:38:a1:e2:05:05:52:d9:63:1b:48:d6:1e:18:35:
                    76:75:f7:5c:b8:b4:f0:46:04:14:29:b6:15:65:2b:
                    6e:55:4f:80:52:84:70:c5:a8:f0:99:7d:84:c0:42:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:54:D8:B0:D3:A9:83:1D:12:BB:3E:F3:5B:35:C4:BC:A6:6D:D3
            X509v3 Authority Key Identifier:
                keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:26:a0:2a:12:11:7a:0e:97:94:02:20:52:40:4d:ba:07:14:
         9c:24:44:9a:f8:a0:46:8e:5c:54:e3:fb:1f:43:5e:96:63:e1:
         c6:6f:c8:a4:7e:e1:e6:b4:92:36:a8:2e:ab:a7:ae:f2:65:c3:
         d8:63:9a:c6:ee:5b:8b:ae:95:9b:eb:fc:89:e4:a6:5f:fe:dc:
         34:f6:a8:97:9a:a1:ca:45:79:02:e1:4e:56:3d:85:7d:df:48:
         83:22:16:c9:f7:d6:a2:20:f4:c8:79:60:ad:9e:70:5f:0a:45:
         09:df:97:d9:de:b9:6f:a1:8f:53:53:6e:dc:6d:55:85:52:c5:
         b6:db:3d:1a:ea:a7:d5:1b:52:03:07:ee:27:80:12:d1:4b:7a:
         13:49:4f:e2:f4:f1:38:a2:6c:c2:d7:12:0e:6d:bd:08:72:1b:
         17:dd:3c:0f:6b:29:09:56:87:90:df:ad:93:2e:a8:e5:3a:ce:
         f5:82:d9:07:6c:d9:11:83:74:74:7f:1d:28:3d:d3:68:6c:fa:
         d0:1c:61:5f:e7:21:a0:37:7e:bb:58:a5:6a:b8:cd:f8:fe:78:
         da:1f:5a:c8:32:aa:bd:63:bb:31:a5:1d:bb:77:dc:21:e8:17:
         62:b5:63:af:d7:91:1e:0a:5d:49:49:94:af:92:be:8b:99:39:
         e9:bc:73:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:37:33 2026 by rpki-client