Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
File:                     gqha_fMpJW9H4LcAstFHVqEEwRI.mft (raw, json)
Hash identifier:          aPEBuRcBvStaakUy+8G/pbh36B+pEQdj7SxEibm9zU8=
Subject key identifier:   61:E8:23:AD:97:93:5A:A4:33:DD:AC:2E:39:9B:D1:78:5D:37:49:3A
Authority key identifier: 82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12
Certificate issuer:       /CN=A9171C23/serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
Manifest number:          0680
Signing time:             Thu 08 Oct 2026 22:43:18 +0000
Manifest this update:     Thu 08 Oct 2026 22:43:18 +0000
Manifest next update:     Thu 15 Oct 2026 22:43:18 +0000
Files and hashes:         1: gqha_fMpJW9H4LcAstFHVqEEwRI.crl (hash: +Vs1WZCJNfy8AqMmDbxRL2qJ2OZRm/9mhnE+mNTrc7Y=)
                          2: 7CC19FBCDCAA11EBB87DAD44C4F9AE02.roa (hash: dwOLIo85i88QUri8z75BNhlFRQpVGfhtzz7VRCqd+oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl
                          rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 22:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171C23, serialNumber=82A85AFDF329256F47E0B700B2D14756A104C112
        Validity
            Not Before: Oct  8 22:43:18 2026 GMT
            Not After : Oct 15 22:43:18 2026 GMT
        Subject: CN=6ac81c86-0a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:ce:4b:13:1c:e7:6f:50:b0:98:c3:2a:ee:
                    40:69:ac:a5:e1:bc:4e:8d:ce:44:b6:9d:37:a3:d4:
                    5b:f5:90:71:ed:79:9f:6f:3d:93:45:c8:57:22:4c:
                    da:43:01:ba:8d:db:de:5d:03:9f:a1:89:10:2f:83:
                    40:30:29:51:e4:c5:0c:ef:a8:26:53:d3:7a:f9:a9:
                    a2:f2:8d:ef:a0:c5:68:0d:6a:32:f6:08:9f:08:36:
                    77:b9:8e:ac:69:3e:30:06:ee:6b:f4:dc:75:2a:58:
                    a4:74:c2:39:00:85:9c:15:30:cb:87:24:8f:75:d5:
                    b6:4d:ff:b0:4d:3d:31:fd:eb:29:c6:5d:ff:6b:1a:
                    35:cd:72:aa:c6:0e:ff:3a:22:f9:5b:49:49:64:f6:
                    c8:71:40:75:c7:8c:7f:01:82:d2:4a:0d:95:49:3c:
                    ae:7e:98:82:b5:a3:7f:9e:2e:f0:a4:f3:72:e6:ed:
                    64:36:17:a1:e3:65:b6:fb:d6:ee:bd:65:5d:9d:64:
                    d2:99:d3:60:25:58:93:5c:af:69:54:37:a2:3e:30:
                    de:c5:4b:25:5e:2e:da:fc:63:70:02:bf:05:b0:d9:
                    df:90:b3:2a:c1:52:33:6f:c8:8a:a8:37:f5:6e:c8:
                    74:c1:ab:4a:01:84:b0:2f:85:c3:ff:df:93:80:d4:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E8:23:AD:97:93:5A:A4:33:DD:AC:2E:39:9B:D1:78:5D:37:49:3A
            X509v3 Authority Key Identifier:
                keyid:82:A8:5A:FD:F3:29:25:6F:47:E0:B7:00:B2:D1:47:56:A1:04:C1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqha_fMpJW9H4LcAstFHVqEEwRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171C23/C6BD1E2CDC1211EB8C1DA64AC4F9AE02/gqha_fMpJW9H4LcAstFHVqEEwRI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:6e:a1:91:87:0d:e3:bd:1b:0c:98:4b:76:6e:09:d7:e5:
         f9:d0:66:fa:50:2d:45:88:8b:32:f1:12:0d:3a:44:f4:32:83:
         8d:fa:7b:5c:61:1e:d1:e3:14:d8:99:40:a0:32:1f:58:af:dd:
         ed:c6:1a:0c:da:fd:54:b9:24:8a:a4:57:8f:02:cf:d4:08:0b:
         9e:8c:83:3f:c7:06:d4:b6:22:9d:78:3b:10:98:ab:e7:7c:21:
         3b:fd:23:58:0e:3a:ed:64:69:64:17:95:89:8c:2b:22:9a:e9:
         6a:80:81:92:31:4a:8d:50:7f:2f:5b:03:be:33:35:ba:86:bf:
         30:05:5f:e2:5e:14:7d:cd:66:f0:a1:67:93:70:61:9c:c2:29:
         5a:16:10:44:d5:b6:9a:71:e8:6b:19:47:bc:36:65:2d:be:42:
         28:3c:a5:74:e6:85:f1:ef:ef:65:a6:9f:e8:42:a0:19:49:1f:
         97:41:1f:50:ba:ec:c8:43:e2:26:79:5d:3c:b0:89:d0:42:b7:
         4a:c9:07:0d:39:8c:a4:60:01:95:14:89:4b:68:56:3c:1e:20:
         49:25:4f:37:a2:d2:c2:17:9e:d6:f7:bf:88:ed:b7:f3:a1:79:
         d0:b6:bb:64:ad:3f:c7:e3:f6:e2:eb:20:bb:01:a2:06:ed:a3:
         12:f7:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:38:21 2026 by rpki-client