Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          riF8UyMoP830qjoJOQQN4qM1djAy6NktU3kon540qlo=
Subject key identifier:   2F:A2:51:CB:12:FF:77:71:B3:A7:24:A7:CD:28:38:80:A8:0A:46:B9
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       09EE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          09EE
Signing time:             Tue 20 Oct 2026 19:55:03 +0000
Manifest this update:     Tue 20 Oct 2026 19:55:02 +0000
Manifest next update:     Tue 27 Oct 2026 19:55:02 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: +tjhITR3BZrYj9GEFUR3j9gLSbvg4BEyIo5T1V3AOJc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 19:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2542 (0x9ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Oct 20 19:55:02 2026 GMT
            Not After : Oct 27 19:55:02 2026 GMT
        Subject: CN=6ad7c717-4f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:39:41:8e:21:30:85:4d:b7:5f:b2:2e:64:b1:
                    ce:19:8b:96:14:4f:f9:c4:26:37:25:70:83:f5:ee:
                    d7:d3:cd:e5:09:41:f6:54:20:a4:06:6a:0a:7a:96:
                    2f:d4:2e:6a:6c:ec:a4:9b:25:56:48:e5:cc:f4:64:
                    9b:e8:0f:61:37:3a:38:42:6b:99:37:c2:65:75:2c:
                    35:7f:c1:ee:aa:33:eb:4f:c6:a5:72:1d:1b:eb:83:
                    be:d2:e7:b0:f9:2f:98:b3:ab:3b:8f:70:b1:49:ef:
                    11:46:66:92:2f:68:1f:47:29:9a:cd:d0:45:7b:05:
                    23:95:33:03:0e:3b:67:2d:4f:21:0e:77:f7:69:f7:
                    e9:4e:d1:ac:7f:08:b9:b6:e9:8f:12:39:bf:92:fc:
                    3b:2e:40:11:06:1f:c2:5c:e2:c7:8a:51:6f:4d:3d:
                    47:4c:a1:c5:24:48:00:93:d8:bb:13:b5:01:76:9d:
                    27:79:20:60:2c:87:fb:fa:4e:0f:8b:91:10:fa:a2:
                    5c:61:1d:da:a0:a4:e0:8b:39:d1:56:a3:82:a5:95:
                    f5:e7:09:59:79:15:15:4c:38:1b:55:ea:1f:42:c2:
                    5e:48:8e:03:94:b4:34:ed:a3:18:d9:9c:ec:8e:25:
                    ae:73:16:c0:4d:96:5a:c8:ee:b3:b7:f9:b4:af:f0:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:51:CB:12:FF:77:71:B3:A7:24:A7:CD:28:38:80:A8:0A:46:B9
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:cf:5b:a0:63:9c:6f:3f:7d:f2:01:ba:97:b2:95:2a:aa:
         ee:7c:4e:b3:c4:96:10:ad:ed:f0:b5:48:eb:93:29:6e:e1:54:
         3f:5f:84:1f:3f:d6:49:15:c5:bd:f6:08:6d:03:b5:ff:d6:8c:
         1f:06:bc:b7:bd:9a:93:d3:6a:da:e9:a8:a2:3e:3c:2e:5c:6d:
         bb:0d:39:b4:0e:04:ca:7f:b1:5a:a1:7d:a0:08:ea:6c:a9:7c:
         3a:6b:89:5c:6f:b2:38:21:35:3b:05:a7:1b:93:2e:56:f1:9b:
         d5:73:2c:d0:00:a4:14:0d:c0:17:ab:36:43:76:69:6c:b8:2c:
         a5:28:e0:47:02:94:3e:93:c2:eb:70:69:5a:f7:e0:40:00:ca:
         17:8c:a0:d9:3c:97:a6:c1:2c:9f:f8:d8:67:0a:cf:c1:97:4e:
         dd:ef:c9:1e:f3:db:ed:6e:44:60:ba:96:c9:ea:86:e3:d7:2d:
         e6:ad:f5:d8:e0:27:ba:92:8f:a3:3f:d8:60:b2:e5:6c:81:01:
         90:d6:26:59:77:54:ed:01:93:41:46:53:bd:69:be:50:c1:7d:
         c2:69:91:ac:e8:76:69:3c:90:da:dd:31:e8:a8:4c:2c:b9:87:
         90:fc:0b:a3:0f:a5:82:04:73:ca:00:34:8f:a4:ad:dc:b2:19:
         ff:d7:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:57:34 2026 by rpki-client