Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
File:                     gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json)
Hash identifier:          v9o4++g4Gs4FhcKsIJNdCae8OG73oHJJL/lLGvbHY5E=
Subject key identifier:   54:96:7D:1D:9F:F9:A5:2A:EC:78:40:A2:CE:14:2A:7A:CB:37:7A:51
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Certificate issuer:       /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
Manifest number:          A5
Signing time:             Tue 27 Oct 2026 07:35:11 +0000
Manifest this update:     Tue 27 Oct 2026 07:35:11 +0000
Manifest next update:     Tue 03 Nov 2026 07:35:11 +0000
Files and hashes:         1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: sm1+JK4HR+cAFVrVqwhn28j9sFxlu9A644GXIRMBlG0=)
                          2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
        Validity
            Not Before: Oct 27 07:35:11 2026 GMT
            Not After : Nov  3 07:35:11 2026 GMT
        Subject: CN=6ae0542f-2cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:d9:8a:b8:4a:47:d9:52:98:07:af:8c:88:
                    e4:03:e1:df:ad:6e:b3:e4:5e:53:6f:9f:68:13:a5:
                    cf:01:f8:be:ec:09:b8:5d:cb:e1:6c:91:62:5b:f6:
                    b2:e8:92:eb:3d:6b:ae:8a:12:b8:d9:ce:6d:4e:66:
                    03:ac:7d:ae:c4:03:2e:84:f6:8d:a4:6b:52:44:a2:
                    41:1b:f7:cc:f6:c3:95:60:9b:91:9c:b7:0b:fc:2a:
                    7a:00:ac:cd:30:65:e0:6f:13:65:fb:9a:b4:a3:6b:
                    57:0f:38:26:fd:ad:eb:c3:0c:1f:6a:eb:16:a5:6f:
                    a3:0b:1a:4c:64:15:f7:fb:54:11:3a:8c:c8:4f:f0:
                    19:11:c4:36:d5:64:ba:cf:82:4e:db:6f:a2:1d:61:
                    bb:94:8c:4d:8a:12:c4:8c:32:07:cf:4a:3f:8c:bc:
                    3c:47:12:45:3e:ad:29:be:02:5f:03:1f:a4:ee:e0:
                    50:15:93:e2:1c:b3:f0:f4:3d:63:af:38:74:6f:3d:
                    c0:0e:2c:cf:1f:0b:de:f2:34:67:80:36:9d:6e:f6:
                    3e:53:97:44:5b:20:1f:f0:75:5d:dc:0c:94:e5:30:
                    f3:3a:f0:18:bb:a7:ac:f5:55:f8:77:7a:e4:af:9a:
                    b8:f5:c4:c8:0d:0e:f7:fa:16:af:c6:48:64:fa:99:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:96:7D:1D:9F:F9:A5:2A:EC:78:40:A2:CE:14:2A:7A:CB:37:7A:51
            X509v3 Authority Key Identifier:
                keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:39:d6:d3:d1:20:07:8a:24:38:db:86:05:90:68:87:23:
         54:0c:d8:40:c5:56:e5:4f:01:30:62:b2:bd:a2:d7:db:ae:3c:
         fc:7f:83:b6:b0:d2:f2:5a:a2:1b:0f:29:27:89:bd:b4:d9:17:
         88:21:89:9c:23:d9:45:2e:32:9c:e0:07:11:b2:c9:69:91:22:
         bc:b6:45:39:66:99:70:8d:d7:73:6e:bd:0d:12:5c:db:2a:60:
         da:76:4a:83:97:75:d8:ba:52:25:2e:37:e8:d6:a4:ca:ad:19:
         8a:73:45:cf:46:88:82:a7:77:f3:bb:c9:a4:0d:ca:4e:f0:cf:
         eb:6f:3d:4a:76:2f:38:8d:9b:6d:e9:41:6c:44:36:ab:da:09:
         e1:c6:00:78:36:d7:e6:38:cf:09:94:5b:0f:f2:90:a8:4b:73:
         cb:16:61:8d:7e:e3:10:75:d0:50:0c:f9:4e:0a:f6:aa:d1:5e:
         cf:b0:11:f1:84:61:ee:80:da:bc:6a:2e:11:9b:9d:4f:24:ad:
         cf:9d:2f:f8:4c:24:94:df:92:01:7a:3f:bb:61:84:2e:03:94:
         a8:73:39:b0:b3:60:38:34:77:74:7e:c7:a0:81:9a:50:83:dc:
         42:46:28:71:85:4b:6a:c3:65:19:04:02:9f:45:68:75:95:41:
         fd:ef:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:17:32 2026 by rpki-client