Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File:                     gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier:          0psgq534ozMyxrT3pXJBzTTBHVhR8eCdt1NMQbPoNGw=
Subject key identifier:   A6:35:45:E7:63:0A:4B:71:84:F4:2F:5A:F5:C9:D2:1B:FF:71:9F:AE
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer:       /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number:          0100
Signing time:             Sun 01 Nov 2026 04:54:28 +0000
Manifest this update:     Sun 01 Nov 2026 04:54:27 +0000
Manifest next update:     Sun 08 Nov 2026 04:54:27 +0000
Files and hashes:         1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: +v6Ts/PlWFUgvifuZ2ng+BMqWzU8HfIN4ZPedbPxzng=)
                          2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Nov 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
        Validity
            Not Before: Nov  1 04:54:27 2026 GMT
            Not After : Nov  8 04:54:27 2026 GMT
        Subject: CN=6ae6c604-4e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:1a:18:4d:be:41:62:58:f4:f4:69:4f:8c:
                    8a:3b:92:fe:72:27:6d:f2:74:73:0c:e5:12:56:d8:
                    b3:3b:98:58:d5:4e:54:11:9a:98:ff:ac:34:14:a7:
                    b6:41:23:3f:d4:b9:32:a9:b2:2d:b4:12:96:af:50:
                    51:8c:fa:68:1d:73:54:1a:8c:2e:7a:40:dc:1e:06:
                    2f:4d:3a:d9:8d:03:0f:b4:7e:76:32:3b:bb:0c:a6:
                    ec:4b:34:5e:13:e0:37:88:d4:2b:81:dd:98:d3:0d:
                    ca:9f:26:fa:6a:63:c5:97:69:d3:c5:15:e8:ae:62:
                    53:85:6e:55:35:58:36:2a:fc:bc:41:34:d8:07:18:
                    dc:0b:72:29:ba:31:5d:37:d8:78:89:ba:3f:76:97:
                    a9:20:f5:fa:5a:4b:35:0d:2a:24:6e:bb:d5:fb:38:
                    cf:04:3b:3e:0b:3d:22:12:02:9c:26:db:aa:96:d4:
                    ea:25:08:66:e7:9e:ca:0a:f4:86:f9:87:ba:80:0c:
                    0d:70:44:82:8a:d3:e0:15:bb:42:c8:93:31:ff:62:
                    90:b4:83:5a:dd:01:23:f0:72:0b:e1:21:50:e1:18:
                    1f:56:53:6c:cc:d0:9c:8e:12:5b:09:fa:b6:31:6e:
                    c1:ed:bf:ef:e1:58:10:50:df:de:c3:7b:c0:22:31:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:35:45:E7:63:0A:4B:71:84:F4:2F:5A:F5:C9:D2:1B:FF:71:9F:AE
            X509v3 Authority Key Identifier:
                keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:dd:2d:f7:fe:a5:96:10:23:c3:20:20:7a:1a:22:74:16:16:
         e8:21:a4:ac:ac:79:61:3f:a3:2b:d7:b5:4a:ec:cb:c0:80:28:
         af:cc:7a:44:be:9f:02:5e:65:7b:5c:ba:4a:7b:eb:7c:45:c2:
         70:6a:c9:ba:93:e2:0b:83:a3:87:a0:67:da:ee:6d:db:fb:70:
         ad:0e:31:19:f6:32:7e:3e:55:7c:ee:fd:74:86:f1:98:f6:2b:
         b3:a1:95:16:b5:14:3b:f9:97:f1:05:d0:b9:6d:03:4d:65:38:
         6c:a3:98:0b:01:d6:5f:73:ee:ac:2e:c2:b0:58:29:ff:f2:af:
         32:1b:75:fe:94:32:1a:e9:c8:90:4c:82:e2:90:35:29:93:6f:
         44:a9:fd:f2:d2:b2:1c:84:88:7c:96:49:9c:04:d9:e8:93:8e:
         42:14:86:d6:4a:34:10:57:a8:c6:84:44:b6:ab:db:11:4a:b9:
         14:eb:34:33:2e:ee:1e:8f:82:81:4e:d8:14:d0:7e:24:a6:90:
         0f:86:aa:b2:60:82:08:74:26:b0:78:23:42:cc:ef:d9:ad:80:
         cd:09:5f:be:56:a7:03:60:60:77:04:2b:11:95:08:cd:15:b2:
         6c:5b:db:41:70:67:b0:89:a8:d4:43:90:37:b5:29:67:88:2b:
         2d:f6:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:07 2026 by rpki-client