Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          /S1yRVLyLllgd7IRfGgX52uo0WcH6A7W8+lK6wiMnLA=
Subject key identifier:   1F:61:87:B3:07:C7:6A:A7:73:23:6F:09:AB:BF:DC:BE:34:31:78:BB
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          0713
Signing time:             Mon 26 Oct 2026 22:04:01 +0000
Manifest this update:     Mon 26 Oct 2026 22:04:01 +0000
Manifest next update:     Mon 02 Nov 2026 22:04:01 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: AUXCTiwty7boqWXqEDl7GtbPkfJoS8PRh2Q4ac74cEY=)
                          2: 899A5138691611EFBED13942C4F9AE02.roa (hash: M2rKB/SETm64+KuJixRJ1nMhhLrqEJUPbxUEZ6z7VDs=)
                          3: A6C94076624711EC9B815772C4F9AE02.roa (hash: dju0CNTYXThmKrA0e4pebqeIBKSRlwEicu9HpaViXJE=)
                          4: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: fMMz+0pPzt4f7JJCwdRoZPgQjZkf7Cl5Iy84Bz8x9r4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 22:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Oct 26 22:04:01 2026 GMT
            Not After : Nov  2 22:04:01 2026 GMT
        Subject: CN=6adfce51-fa98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:36:c7:ca:25:59:a7:10:82:da:af:05:c0:
                    13:70:d2:ff:ef:28:88:1c:66:4d:b5:96:bf:ec:91:
                    ab:0f:a3:60:8b:70:4d:87:bd:96:a6:32:e3:55:bc:
                    f9:ee:3d:17:d4:e7:fe:18:00:5f:db:27:cc:47:7d:
                    90:9c:f8:48:70:77:19:bf:d0:b3:15:f3:3b:03:e9:
                    56:38:14:d3:e7:2b:8a:61:e8:7d:05:db:5a:b4:8b:
                    45:97:80:99:0a:8f:1d:b9:d1:55:ab:aa:d3:b6:52:
                    a1:c9:c2:9c:71:0b:cc:0c:90:20:c8:1b:de:12:31:
                    83:fe:df:a4:19:7c:5c:5d:b3:2d:14:0f:a9:80:c6:
                    03:83:f4:cc:ee:96:0e:db:61:8f:87:7a:e4:ce:19:
                    af:5f:2a:7a:e0:f1:5c:fd:a7:24:11:a2:75:a8:71:
                    b7:02:1a:69:5d:60:bd:60:b2:72:4b:96:32:06:93:
                    51:77:45:51:98:84:94:27:fd:fa:ac:aa:49:59:37:
                    53:d8:66:fc:c3:f3:d5:c5:38:64:4c:ca:f2:89:75:
                    ef:5e:4b:eb:36:42:d8:ba:8a:cc:8c:18:91:dd:19:
                    82:2d:c8:c9:07:da:6c:c9:4f:0e:b7:3a:2a:33:37:
                    97:53:c5:03:21:dd:37:b3:93:af:50:e0:be:5e:d9:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:61:87:B3:07:C7:6A:A7:73:23:6F:09:AB:BF:DC:BE:34:31:78:BB
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:6f:9a:29:0e:2c:c6:9f:1f:f0:99:25:ac:6d:61:09:d2:
         9f:02:f7:60:13:25:e7:87:2a:3d:e1:cf:df:25:03:2f:04:43:
         96:a4:e6:82:19:a2:22:d6:d2:4d:5c:a7:b3:d9:cb:c8:b5:1c:
         af:5d:ee:3d:8c:a4:a7:3a:30:50:87:9a:c2:e0:96:82:de:0d:
         3e:01:0d:0b:73:cd:e0:8d:36:2c:49:5c:b9:b6:73:47:a2:aa:
         91:59:23:cb:bb:0e:c2:0f:50:64:3e:06:76:9e:86:13:b6:b2:
         7d:59:94:a9:49:5e:9b:d9:2b:01:eb:df:c1:b4:87:cf:9d:98:
         05:42:73:76:af:63:aa:5d:84:1e:d4:4d:07:f0:f3:a9:4a:6d:
         e5:a0:21:d5:21:1d:a6:eb:b6:d7:14:1b:20:36:7c:9f:16:6a:
         45:95:dd:34:e8:49:36:53:5a:fd:b2:84:c4:f3:5f:dc:ce:90:
         22:c7:9d:cf:c7:d1:ae:eb:01:2f:a7:5b:cb:0f:b0:56:ad:b1:
         6e:c2:2a:46:e8:79:44:d7:ad:cc:9c:17:3c:a7:31:70:25:80:
         01:0b:85:e6:8a:72:f5:2a:2b:05:6f:4f:cf:07:39:15:13:29:
         74:85:92:b1:a5:a3:bd:55:99:10:c5:46:e2:44:bb:39:f0:df:
         5a:76:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:01:44 2026 by rpki-client