Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
File:                     GO9DJ41GMx6arw_XcqcygNE6qlI.mft (raw, json)
Hash identifier:          vlybs/6JVrYpBs7YA+CpObELUWx8K5acN0xFER441dw=
Subject key identifier:   68:49:7F:69:3F:77:B6:24:0F:71:4D:26:BA:7B:78:75:9E:F0:FB:E1
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Certificate issuer:       /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial:       1245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
Manifest number:          11B4
Signing time:             Wed 28 Oct 2026 17:20:27 +0000
Manifest this update:     Wed 28 Oct 2026 17:20:26 +0000
Manifest next update:     Wed 04 Nov 2026 17:20:26 +0000
Files and hashes:         1: GO9DJ41GMx6arw_XcqcygNE6qlI.crl (hash: l0VyxVfztF0RsafkrmmG8Kv49nN7nWJfjby2qcPdT7M=)
                          2: 446826648F3511EE8864C25EC4F9AE02.roa (hash: xHbFfIw2iBviURYAQ1QcUCfOF3sCXw6iTvJ2lh2q0Gs=)
                          3: 6147778EB7FB11F18019D3C56F11F970.roa (hash: hOq6Wp4+KNeiMXxcZJOJaxOhaIhbh0HD1pioZKKfah4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
                          rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 17:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4677 (0x1245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
        Validity
            Not Before: Oct 28 17:20:26 2026 GMT
            Not After : Nov  4 17:20:26 2026 GMT
        Subject: CN=6ae22edb-08d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:a0:fe:0a:86:68:06:6d:6a:4c:93:e8:28:
                    42:ca:36:11:48:6f:76:51:cf:1c:08:93:e7:1a:73:
                    33:d1:ae:f0:43:9c:69:66:a3:fb:a7:90:bb:cb:25:
                    2d:1f:cb:a3:a9:88:38:eb:15:7f:3c:1a:f2:cc:56:
                    e1:c9:01:bc:4c:32:ba:90:73:5d:5f:95:db:13:02:
                    9a:c9:04:b8:3a:3d:db:86:48:f8:88:23:00:46:6a:
                    ad:4f:19:f0:4f:84:11:c9:b1:7b:76:4c:29:b7:2a:
                    a1:24:a5:96:e8:ce:2a:7f:e0:d4:c1:dc:cf:f4:01:
                    18:96:d7:64:e4:54:a8:aa:5d:ff:1f:ea:21:a0:be:
                    c4:76:24:dc:0b:31:b2:a6:55:5a:7c:db:65:7c:fa:
                    b1:cc:67:41:26:53:e0:40:48:fe:ad:35:43:1e:e7:
                    04:f3:10:ba:d4:77:46:20:f7:e4:e1:73:00:b0:05:
                    21:8e:b8:88:b8:1b:2f:ae:17:22:7b:80:d7:a0:a9:
                    2a:da:a6:b4:74:a1:71:2f:c7:da:8a:02:c7:31:6f:
                    55:f0:02:68:62:64:cb:1a:24:7d:62:93:cb:74:c5:
                    3f:de:cd:a1:df:be:74:61:b2:89:0f:ff:bd:bb:6e:
                    4c:40:39:45:1a:a3:92:2b:2c:4b:e4:77:2e:97:b0:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:49:7F:69:3F:77:B6:24:0F:71:4D:26:BA:7B:78:75:9E:F0:FB:E1
            X509v3 Authority Key Identifier:
                keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:7b:95:b8:42:4c:d2:d1:6b:28:8e:f2:73:94:b5:6f:65:
         7d:ce:24:64:b3:3c:74:ce:78:08:b1:32:60:9f:cc:a4:5c:7d:
         00:a6:08:66:04:d5:7a:4c:12:61:76:69:5e:e0:ac:69:72:de:
         8e:02:5c:93:40:3d:60:5a:13:21:34:65:63:2c:b1:dc:c2:d1:
         75:15:8e:02:b6:5b:67:db:58:dd:2e:03:5d:0b:1e:1c:7e:78:
         52:35:43:f4:13:a0:3c:36:78:fc:85:b2:e5:42:fd:85:16:0c:
         3e:12:8e:00:76:4c:b0:ac:8d:11:f4:b1:fe:27:c1:04:f4:c1:
         cc:c4:d4:c8:f2:14:24:68:f8:1a:7c:dc:6f:57:63:c7:97:95:
         e0:c6:9a:2e:53:ec:e5:bd:27:dc:a4:8f:3d:4c:8e:ad:b9:e0:
         f6:b0:d3:3a:7c:6e:8a:32:52:26:95:c3:b5:69:7a:72:64:30:
         39:90:88:06:4e:bc:e9:b8:4e:ee:fc:d2:bc:1a:29:66:25:8a:
         f3:c8:a0:d0:f6:7b:97:a7:bf:b5:82:6e:4b:46:4e:47:19:01:
         90:17:85:f6:66:f7:e4:a9:01:4b:6a:0e:42:38:1e:e5:23:e4:
         3d:5e:84:d1:f2:cf:38:fd:24:86:ca:10:f9:c7:a6:63:e4:c3:
         78:5a:98:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:52:02 2026 by rpki-client