Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
File:                     GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json)
Hash identifier:          mJW0i4k5fmy8oPFpHjDLKLgtna//YRM/r1ImHFg77Qo=
Subject key identifier:   45:F2:61:58:56:84:5B:BA:53:20:11:1F:6A:E0:73:71:E0:9B:43:B4
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Certificate issuer:       /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
Manifest number:          EE
Signing time:             Fri 09 Oct 2026 07:05:11 +0000
Manifest this update:     Fri 09 Oct 2026 07:05:11 +0000
Manifest next update:     Fri 16 Oct 2026 07:05:11 +0000
Files and hashes:         1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: SNrn60MQyKhHd92w2rGRHFp1VLr8Bfbk4wDbAKuca3A=)
                          2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: ObOITIzgGgqGBPGudigAZ1pn1ycFYqSZSvvOBF2J+iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
        Validity
            Not Before: Oct  9 07:05:11 2026 GMT
            Not After : Oct 16 07:05:11 2026 GMT
        Subject: CN=6ac89227-8443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:e0:a4:7d:9d:df:49:f2:bf:45:38:dd:5b:
                    b1:4d:95:39:1f:12:e1:c8:c6:d6:9d:25:80:9e:87:
                    74:9e:d3:f5:bf:53:40:f8:b2:d0:f3:61:1e:bc:83:
                    d8:73:7d:52:91:da:cc:4c:1a:44:1f:5a:8d:cb:5d:
                    70:7e:09:b4:89:98:2f:3d:d9:db:61:36:6b:4c:39:
                    69:0e:12:c4:c2:ac:9d:27:f5:9a:f2:6f:a7:ea:fb:
                    10:87:05:dc:cb:88:3e:19:dc:03:6d:4d:a1:8a:09:
                    a9:3a:19:69:7e:ff:ac:79:65:b4:af:e3:2e:bb:ee:
                    e8:f4:93:07:45:e4:e7:61:be:80:81:04:60:63:ec:
                    96:c2:9f:27:5b:5f:1e:dd:1a:89:d5:63:05:1c:a4:
                    32:04:81:e6:42:97:a0:07:5c:4e:09:77:98:1a:7e:
                    35:9d:25:30:81:c9:25:d9:8c:06:d6:32:59:9e:23:
                    14:19:bf:8d:39:9a:54:31:6e:ed:c0:ea:a8:04:00:
                    92:e9:2c:9e:b3:a4:ad:13:e2:44:3b:48:ad:3a:1d:
                    77:d5:66:e5:0f:a6:11:33:f3:7b:f0:48:23:ab:ef:
                    09:91:47:71:3b:8b:1b:22:ad:76:c6:5b:a7:ba:95:
                    52:01:43:ce:24:5d:89:0d:5a:dd:e0:62:93:71:ce:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F2:61:58:56:84:5B:BA:53:20:11:1F:6A:E0:73:71:E0:9B:43:B4
            X509v3 Authority Key Identifier:
                keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:6a:04:f6:35:e9:35:0e:61:4d:31:03:ca:44:ea:9b:2e:
         6b:b1:ee:f3:1c:44:da:77:cb:15:9e:c7:be:e4:a5:85:fe:c0:
         6e:7a:2a:5d:3a:fd:42:f9:bd:15:d4:fe:30:e2:0d:df:d7:8b:
         d6:ad:20:e1:03:74:6b:e5:6e:ef:8e:18:2a:a8:d0:9c:30:7b:
         d5:9c:ce:83:e1:87:fc:52:1b:9b:56:1b:ee:3b:50:86:bd:3f:
         43:ab:ad:c8:30:8d:a8:7a:4a:5d:ae:b5:e9:18:e1:0e:3b:db:
         44:fc:3c:6d:b6:7f:88:b6:9c:4e:d8:0b:de:36:1b:c7:c8:d8:
         83:86:91:ea:ef:15:3c:ba:5e:5d:d8:ba:72:3a:cc:54:98:ee:
         98:ac:70:69:d5:86:55:f8:8d:12:d4:3e:3a:c1:a7:7f:2f:3f:
         03:07:4f:97:41:65:aa:80:a9:f2:d3:40:b5:0a:23:7d:ed:d7:
         27:a2:4d:ae:c4:bc:60:3c:17:09:cb:e7:e2:9a:3d:f0:7b:d2:
         75:96:c1:b4:c6:98:e5:95:4b:54:46:f6:c2:e7:65:3c:c5:99:
         3a:5f:f4:a7:77:a0:37:a8:da:2f:5b:9e:a6:fa:af:08:cd:65:
         74:d4:ab:53:03:06:de:9e:5d:af:ed:61:c3:b3:df:88:92:12:
         e1:2b:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:35 2026 by rpki-client