Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
File:                     gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json)
Hash identifier:          mgpXriAJBxwr22uYa5SZU2qzHBiJlQ748RR2Hzfh810=
Subject key identifier:   5B:A5:19:F1:7B:5A:3B:7D:B7:99:F2:4F:62:12:05:43:42:19:36:EA
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Certificate issuer:       /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial:       0946
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
Manifest number:          0939
Signing time:             Mon 26 Oct 2026 20:10:56 +0000
Manifest this update:     Mon 26 Oct 2026 20:10:55 +0000
Manifest next update:     Mon 02 Nov 2026 20:10:55 +0000
Files and hashes:         1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: 17Xlkd64ETZTVGA36bkQnHYc6QsSM8pSIAAA4RZVHXc=)
                          2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: pYGKIqod1ITslZbHR5crvWsrKnNCLAjIRuDb4Q/IMAk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
                          rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
        Validity
            Not Before: Oct 26 20:10:55 2026 GMT
            Not After : Nov  2 20:10:55 2026 GMT
        Subject: CN=6adfb3d0-0f4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:59:ed:28:ff:59:80:e5:f0:05:96:c4:7b:
                    42:99:4b:85:9f:c8:83:a4:1d:e6:48:45:34:75:b4:
                    ca:1f:d3:a6:0b:9e:b8:22:0a:ba:eb:d9:99:2c:54:
                    de:14:f9:50:b5:31:d2:9e:77:c7:96:20:45:21:f8:
                    20:cf:af:c5:2e:eb:b4:3d:65:0f:a3:37:1f:42:89:
                    3f:51:8e:c6:78:4d:ab:78:2e:7b:19:fe:89:61:80:
                    f4:3c:56:15:28:11:78:32:9a:7e:f0:03:82:92:4f:
                    7a:74:85:f2:86:c9:c9:ed:13:d6:1f:fd:ed:02:5a:
                    ba:32:4f:55:27:11:35:8d:b8:82:0d:d8:b1:2c:f2:
                    6a:80:e3:f9:fd:5a:10:9f:54:26:fe:f0:6d:0d:51:
                    2d:62:bc:56:e7:c4:aa:ae:45:1e:08:77:b3:37:47:
                    6f:99:bd:2e:e5:fd:76:0f:79:cc:c7:3a:26:21:78:
                    00:55:ce:57:89:c6:a9:a9:78:19:64:d9:43:47:de:
                    02:a7:0a:69:a0:3e:c7:4d:2d:df:76:f9:d3:b2:9d:
                    a1:97:ac:67:5b:40:68:dd:90:e2:1b:30:10:d7:f0:
                    c6:4d:55:a9:ec:07:ef:4e:8c:70:bb:af:6a:7d:7b:
                    1e:b9:c9:dd:c1:97:ba:86:88:d2:d1:09:31:02:57:
                    0f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A5:19:F1:7B:5A:3B:7D:B7:99:F2:4F:62:12:05:43:42:19:36:EA
            X509v3 Authority Key Identifier:
                keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:0b:f1:c8:00:db:75:30:51:e4:13:f4:44:79:2e:77:16:
         b7:b4:c6:32:f9:01:92:92:1f:2d:22:aa:4d:4c:7d:91:8b:8e:
         10:01:f0:36:63:07:72:c4:bb:ad:ba:80:8d:6d:a2:9e:23:ad:
         bf:b1:7a:9c:db:8a:68:66:0b:71:45:fe:a1:3a:e7:df:b2:6b:
         a6:6a:06:9f:8b:86:e7:39:bd:b1:7d:b5:71:77:d7:17:fa:3f:
         10:d9:ce:c6:e5:eb:90:f3:6a:e1:eb:5c:aa:63:29:ac:76:24:
         c8:91:3d:aa:c3:f2:ed:97:2e:b1:f3:e5:cc:5d:26:03:71:4a:
         f7:f3:55:d7:08:12:fe:d2:a2:74:b7:1d:49:df:29:e2:ff:66:
         d7:24:e9:d9:2d:dd:8a:a9:f9:23:f5:36:dd:7b:68:e7:57:14:
         78:a9:07:fe:58:12:6b:28:1b:a5:c1:20:20:f7:31:b3:b1:4d:
         9e:37:9c:10:01:dc:c5:e4:ae:62:0c:46:ee:9b:b5:24:c1:a8:
         98:55:ce:8b:2a:fc:18:68:1e:0e:06:5a:17:4f:e9:29:7b:1f:
         63:15:e3:db:00:50:a7:5c:06:d0:43:d3:ef:51:0c:c9:64:bd:
         9d:8e:25:c1:66:8c:56:ea:95:4e:29:02:a6:03:3a:20:d1:57:
         71:c7:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:00 2026 by rpki-client