Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File:                     gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier:          UX/qkDdjX7c5kv9k0Xn5/5kk6v9n6d00VEQcKP/6utc=
Subject key identifier:   CC:5A:57:D9:87:F4:73:48:6F:16:0E:CC:2A:D8:EE:F9:BF:B6:07:4C
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       0177
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number:          0171
Signing time:             Tue 27 Oct 2026 05:07:38 +0000
Manifest this update:     Tue 27 Oct 2026 05:07:38 +0000
Manifest next update:     Tue 03 Nov 2026 05:07:38 +0000
Files and hashes:         1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: pcpIM8FwdcyJS7ltGVQM00Ite7e5i2liwys2UqH9uZ4=)
                          2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: JYTDrBO//S+15sV1Zo2GY8n9tQ9jUUQcP8fYX07TRi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Oct 27 05:07:38 2026 GMT
            Not After : Nov  3 05:07:38 2026 GMT
        Subject: CN=6ae0319a-0c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:3b:6f:3c:25:97:3e:7e:7c:85:06:9d:1a:
                    c8:86:c0:e1:86:ba:20:e7:73:0a:1e:eb:a6:fa:a8:
                    30:bf:c4:fd:17:75:e6:20:21:aa:f6:35:01:45:56:
                    13:4d:dc:af:56:4c:c3:90:43:4d:c6:e5:45:4b:35:
                    3b:8b:82:0f:25:54:2e:ce:a6:0b:05:23:3a:a2:5c:
                    7d:13:5c:97:33:a6:8e:b6:e7:86:8a:a6:5c:76:af:
                    76:b3:1b:b5:59:35:ae:ee:ee:3f:10:d6:4d:01:cb:
                    60:4b:46:32:23:32:d1:00:7a:c0:09:90:8c:51:76:
                    5f:94:f1:8a:76:60:72:3d:d8:d9:01:72:59:1c:00:
                    30:98:db:ba:e3:ea:58:81:aa:13:fb:7c:d2:90:a5:
                    86:fb:6d:09:74:ce:cb:a8:7b:91:3b:51:14:ec:5e:
                    1e:12:07:3f:96:d1:d0:32:cd:39:22:5e:3a:5e:2a:
                    20:ee:19:77:b0:ff:90:df:a7:09:bf:36:9c:99:d8:
                    86:52:a7:22:26:e0:36:b7:1e:9f:fb:64:3c:2f:47:
                    e5:0a:55:ae:f8:1c:8c:c4:a8:ac:79:b4:c1:1b:87:
                    c3:96:76:17:8f:27:2d:18:d7:97:aa:36:ef:89:73:
                    cf:f4:f4:5c:6f:18:ac:43:83:2e:76:bf:90:48:97:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5A:57:D9:87:F4:73:48:6F:16:0E:CC:2A:D8:EE:F9:BF:B6:07:4C
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:63:e2:32:e2:20:6c:dd:39:ce:2b:1e:ad:62:b8:1c:78:
         a4:57:7d:d3:ce:e6:c3:05:22:85:1a:9c:71:2c:50:4f:ea:6c:
         e2:fc:01:9d:66:70:5b:5d:0a:e5:da:31:41:6d:92:d5:0c:49:
         69:02:c2:a9:3d:bc:73:46:01:b1:5e:44:1e:49:c3:87:6d:e5:
         5a:d8:08:a8:34:9c:6c:60:03:be:1f:5d:a5:63:22:c4:e3:d6:
         a0:23:da:9f:3e:1a:ec:26:a9:1b:fd:f2:9c:12:a6:20:7a:7b:
         a2:d8:54:93:58:5f:8d:8c:54:c1:ba:a8:72:09:20:9d:b2:29:
         87:5f:e5:24:f6:7b:3b:f8:6f:63:94:7d:3b:96:92:f0:74:06:
         a1:65:9f:fb:39:b7:39:2a:35:45:cc:28:30:40:18:37:16:7d:
         64:f2:18:a7:e0:3b:f4:77:c6:74:36:d9:7e:e5:a0:47:89:27:
         5f:26:24:b3:31:51:dc:f7:48:b0:0a:5f:50:01:13:e3:7d:e2:
         26:5a:1d:07:cd:04:b9:6d:0a:29:d2:e5:91:c9:6c:71:eb:3f:
         15:87:9d:fc:14:bb:4b:29:61:3d:8f:e6:31:f3:fd:d8:c6:f2:
         e2:3f:83:aa:39:e3:8f:e6:78:cf:0b:b9:cb:e0:6f:ba:c3:94:
         50:45:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:22 2026 by rpki-client