Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
File:                     gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json)
Hash identifier:          9pqIxIE+yXuQONBnhlaY9SnM5ukvnN0Cq8g6tXA7Ovc=
Subject key identifier:   E5:27:80:2D:09:62:54:1E:9B:2B:06:76:71:9A:50:E5:01:65:B0:F3
Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
Certificate issuer:       /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Certificate serial:       35E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
Manifest number:          35CD
Signing time:             Tue 20 Oct 2026 14:27:41 +0000
Manifest this update:     Tue 20 Oct 2026 14:27:40 +0000
Manifest next update:     Tue 27 Oct 2026 14:27:40 +0000
Files and hashes:         1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: /GhR5YLcwQPFBuYHBW87FcfRyqA9WM5ZZr5RpiwSKW8=)
                          2: 566D47A6914211F1B8AFAA236311F970.roa (hash: M8w4C6kxFAX4a/1mupbFMnzHAisy+JyhxEEHGHUAERg=)
                          3: B305D4F4D4D911F0990CAE1CC4F9AE02.roa (hash: WxWTWJ/XU+5a7F5CKHub9rL/f65J4kMT+zVAopSr/ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
                          rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 14:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13792 (0x35e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
        Validity
            Not Before: Oct 20 14:27:40 2026 GMT
            Not After : Oct 27 14:27:40 2026 GMT
        Subject: CN=6ad77a5d-3de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:06:01:2b:c3:75:25:d1:7f:cc:16:cb:2b:
                    9d:8f:9b:8e:ac:f3:98:ef:ce:78:71:df:9b:5c:65:
                    29:02:cf:80:9d:4a:3b:c6:45:03:66:7b:b8:d6:8b:
                    af:24:4c:f1:d8:e0:51:52:98:c2:50:49:57:5f:2d:
                    ed:0c:f1:3e:a5:79:d2:8c:c4:4e:fd:a6:1d:84:80:
                    92:47:06:50:5c:f3:57:c9:d4:0c:9d:8c:fe:00:6b:
                    20:32:0a:5f:f5:b7:e4:99:74:5b:29:f2:e0:27:18:
                    48:52:94:8a:a1:72:65:9c:74:eb:c9:03:13:55:b8:
                    de:8c:e4:83:76:94:1e:db:f2:80:88:7a:6a:e4:a5:
                    37:26:47:06:50:8c:a2:a9:82:ec:4e:74:92:33:97:
                    8c:5f:76:85:72:67:fd:ae:54:6c:42:94:62:3d:51:
                    2e:11:61:9d:62:45:1e:62:a9:5a:fc:08:94:e8:68:
                    a2:64:53:39:ad:e2:f6:37:51:c8:46:4e:09:38:0d:
                    99:8c:41:02:a2:ae:e4:6a:d9:cc:f5:11:d4:f9:ce:
                    cd:9f:38:bd:97:01:e9:74:26:e5:d7:74:73:83:8d:
                    a8:01:c5:f1:2c:89:4b:81:12:b9:f2:7c:99:d4:6a:
                    b6:8d:60:56:76:ce:02:c4:5e:54:94:b4:f9:1d:a2:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:80:2D:09:62:54:1E:9B:2B:06:76:71:9A:50:E5:01:65:B0:F3
            X509v3 Authority Key Identifier:
                keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a2:f1:c5:42:34:47:c1:42:76:a9:8e:26:97:18:84:5b:09:
         d5:5b:78:cc:29:10:79:08:4c:e9:5d:b2:9f:f1:b2:b4:07:3d:
         f0:b3:d1:47:18:c9:f6:e1:26:c8:ab:80:41:36:a9:10:18:6a:
         4f:88:4f:c0:18:0c:cc:99:f2:24:7b:f1:7c:c5:60:5f:ba:6c:
         5c:e6:c4:50:24:51:61:4f:91:dc:d4:f7:1a:13:f4:6c:2b:08:
         a0:60:d6:48:65:03:c5:71:72:e6:57:c8:85:76:3b:f7:35:ff:
         78:fd:1b:c4:b1:2b:e0:55:b8:06:81:3f:ef:76:12:d1:f6:0f:
         d3:66:d3:95:7e:08:90:ba:ce:7b:ee:98:08:03:da:aa:91:61:
         f0:64:2b:c0:fb:c6:5e:63:6a:ad:1f:6a:6a:a9:d6:82:c5:b6:
         98:ae:64:37:35:6b:50:0e:e8:42:5c:56:14:87:d0:67:7d:be:
         2c:ec:b0:b2:f2:45:e5:f0:e8:6c:28:1f:43:32:a3:76:ec:f2:
         66:53:2a:16:2e:0b:85:cb:b5:3a:ff:03:29:39:9b:08:19:d8:
         ec:72:fa:ea:51:64:c2:2a:52:54:66:c5:e1:c8:52:92:d0:06:
         99:52:08:4a:58:5a:e6:20:e4:ad:ce:9e:d6:dd:64:70:ec:a8:
         34:50:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:22:43 2026 by rpki-client