Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File:                     gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier:          UU4V/z8j/Pxv8KqXPDTKQMS1DDiLvyPPhrVkz0LKt50=
Subject key identifier:   03:82:EE:02:9D:9F:D2:8F:A1:BC:84:EA:E1:3E:DF:1A:93:7C:22:3F
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       015C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number:          0157
Signing time:             Wed 09 Sep 2026 05:30:23 +0000
Manifest this update:     Wed 09 Sep 2026 05:30:22 +0000
Manifest next update:     Wed 16 Sep 2026 05:30:22 +0000
Files and hashes:         1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: jKqHeymyWGoLbZS3lOFz4BQ75qEyhEjk6YZl/AUswts=)
                          2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: faGM7P04DgY9+kePEKWNSWyG4kwQPN9Aqs15IpEWkN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 05:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Sep  9 05:30:22 2026 GMT
            Not After : Sep 16 05:30:22 2026 GMT
        Subject: CN=6aa0eeef-fd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:33:c1:cd:b8:fc:e8:44:0a:0f:64:55:f9:c0:
                    94:31:34:0a:ad:bf:3b:94:8a:02:bc:50:cc:58:69:
                    3a:e0:1c:9c:ac:05:34:f3:94:eb:33:f8:e1:d8:54:
                    55:de:a1:ae:a8:95:3a:64:81:24:ec:84:77:38:65:
                    c4:2a:38:f0:40:56:75:a7:17:6b:04:09:c7:70:87:
                    ef:71:6e:bd:ca:fc:42:77:38:15:82:3b:79:ef:b0:
                    57:06:7a:fe:17:4d:91:ff:f0:df:4a:73:40:72:64:
                    8f:d0:9e:4c:b0:15:ab:44:8a:d7:64:ba:ca:99:dc:
                    12:ec:55:7a:02:26:11:5e:de:ed:b9:8f:b7:b3:87:
                    11:49:6f:93:bf:0f:a8:34:e7:6d:c9:8d:52:e4:42:
                    02:fe:29:79:88:a8:5b:c2:6d:7a:27:6b:a5:ac:6b:
                    34:ac:52:14:f0:60:40:bb:5c:18:8f:94:ea:e6:b4:
                    6e:de:de:9a:e1:7b:e6:7b:5e:42:0a:3f:98:d2:46:
                    60:3b:27:2f:2e:fc:e8:bf:14:25:d1:e6:58:7c:94:
                    58:90:08:46:41:d4:97:69:50:ea:35:21:be:8e:45:
                    2b:72:cd:29:1c:17:28:0c:ea:a0:27:47:9f:0f:b7:
                    7e:b9:0e:54:09:e3:8b:b7:3e:66:00:b6:99:dc:a9:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:EE:02:9D:9F:D2:8F:A1:BC:84:EA:E1:3E:DF:1A:93:7C:22:3F
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:41:1b:6e:e9:8f:04:fe:ee:fe:4b:91:83:a3:27:39:96:f6:
         dd:05:16:d6:34:dc:4b:a3:b0:40:58:4f:90:75:5c:44:90:84:
         1a:42:27:04:09:4c:fb:53:35:9a:b1:63:10:ba:bd:44:5e:4c:
         c8:9f:a5:bf:46:1d:de:24:24:d9:4d:7a:5c:00:0e:e3:6d:a4:
         df:f1:b3:ff:ae:86:88:39:0b:39:86:f3:02:3a:76:75:25:20:
         5b:2d:bc:63:a4:c7:66:da:b0:1e:57:b6:f8:bf:13:4d:b3:36:
         ed:52:0e:5e:cc:8c:1a:c3:f8:e0:f4:61:71:db:45:dd:c3:81:
         e8:46:1b:a9:6b:90:60:c0:a5:80:53:7e:5a:5d:ee:c1:1f:6a:
         cd:99:2e:dd:9c:87:a4:54:d8:2b:4a:fe:3f:0c:5c:f7:4a:2d:
         5e:f2:52:0e:ef:a6:b8:4a:02:e6:99:04:38:75:c4:a1:51:69:
         2e:70:6b:65:77:2d:b2:64:49:0d:43:aa:6e:f2:70:2b:8c:45:
         87:6b:fb:27:0e:51:91:b2:c4:26:64:50:10:67:6a:bb:aa:71:
         72:bd:41:a8:54:44:2e:8d:60:27:ee:f9:14:00:05:a6:45:d4:
         19:bb:e5:52:17:cf:a8:96:90:82:c7:1a:73:17:ec:3c:6e:f3:
         85:94:7e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:10 2026 by rpki-client