Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File:                     gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier:          Nc3sdR+UbDs24y+a7YwXARV2pZxsd92r2siaSJDI2EY=
Subject key identifier:   52:CC:39:13:28:48:13:5D:80:4D:50:C3:32:6C:69:DB:F8:48:4E:A7
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer:       /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial:       092B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number:          091E
Signing time:             Fri 04 Sep 2026 20:07:05 +0000
Manifest this update:     Fri 04 Sep 2026 20:07:05 +0000
Manifest next update:     Fri 11 Sep 2026 20:07:05 +0000
Files and hashes:         1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: zatOI+GGZ1BFDtZAhZzx1037Qwpes68STmrQIkHIQM4=)
                          2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=)
                          3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347 (0x92b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
        Validity
            Not Before: Sep  4 20:07:05 2026 GMT
            Not After : Sep 11 20:07:05 2026 GMT
        Subject: CN=6a9b24e9-8f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:8e:da:fe:b0:98:aa:a2:72:65:ff:b7:c8:
                    34:55:cc:cb:21:6a:e6:8d:96:bb:45:16:29:39:dc:
                    f6:d2:2d:b1:f2:57:29:b5:23:ff:ef:7c:1e:ea:25:
                    e3:04:55:36:3e:9b:10:7d:4a:c6:ca:1b:7b:4a:80:
                    40:ff:26:dd:86:d4:a1:5b:ca:f1:20:95:c4:50:e1:
                    3f:29:09:a6:25:33:2a:e3:25:ac:85:f8:da:1f:55:
                    22:88:7d:ac:37:32:8d:89:94:e6:24:18:3d:17:d6:
                    88:7b:37:9d:06:32:34:11:84:e2:7a:b9:2c:4c:be:
                    a3:cc:76:17:e4:bd:43:3d:5e:5f:4b:47:cc:95:4b:
                    63:87:b9:ab:79:f2:11:7c:79:d9:2a:49:ec:ec:a0:
                    ee:1b:0d:b3:71:93:53:aa:9a:8d:97:1e:c9:2d:9b:
                    4e:28:4b:63:ae:ec:4d:64:47:e0:c6:dd:75:e7:eb:
                    3c:7b:a1:38:ee:52:77:d1:8b:09:15:60:98:d0:6b:
                    16:42:88:62:f5:ac:e9:00:46:42:53:dc:43:51:0a:
                    23:8f:8a:f6:e6:86:44:ed:82:ab:58:a0:05:4a:b0:
                    cd:ef:02:6b:99:62:29:16:69:af:51:15:20:69:88:
                    d4:de:55:61:de:64:93:ca:6d:09:2f:37:e8:59:98:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:39:13:28:48:13:5D:80:4D:50:C3:32:6C:69:DB:F8:48:4E:A7
            X509v3 Authority Key Identifier:
                keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ab:a7:aa:46:4c:04:e2:1c:ca:c8:78:6b:74:18:b2:dc:a8:
         44:fe:34:2a:a1:f0:c9:07:86:3f:20:59:97:ab:0f:47:99:81:
         40:52:2c:7d:0d:40:90:64:83:33:3a:a0:19:9c:64:b9:73:28:
         df:d2:5a:e1:2f:18:31:73:49:f8:03:f7:67:b7:c7:eb:2b:71:
         3c:cb:80:8b:db:1c:fb:0f:1d:70:26:31:06:80:ec:c6:d7:89:
         ef:e0:ed:57:70:d8:8b:b5:08:99:c4:64:1c:61:05:3f:75:f3:
         27:13:8c:39:25:0b:78:8a:16:0e:dc:35:6b:0c:f1:d8:7f:f9:
         93:73:a4:a9:8d:6c:3a:18:a7:3b:d6:7e:d6:ef:16:22:b0:56:
         16:4e:ca:fe:be:3c:cf:56:f3:0a:d7:bc:51:e0:e3:13:52:23:
         00:53:eb:77:5c:03:dc:74:df:af:06:8a:52:4d:41:cb:f3:06:
         d8:51:36:31:31:e5:88:98:3a:6c:91:0a:af:93:c0:f9:3d:ff:
         e4:60:0d:68:ec:d5:25:b8:ec:c6:7f:6f:cc:07:42:37:ce:09:
         b5:71:11:94:2d:f4:69:82:97:48:ac:df:81:cf:eb:2a:ac:80:
         cb:6b:16:85:87:08:bd:97:23:57:90:a9:cd:ac:b6:79:05:53:
         e4:7e:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:51:09 2026 by rpki-client