Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
File:                     g9YM-N6oAia4ByS83mcD0Q1lf_4.mft (raw, json)
Hash identifier:          nOqxDGItO3DzH+JBDPw5XOouOVqsgLRw4ndKE99yPL4=
Subject key identifier:   41:9A:12:63:BD:C5:8F:B8:DD:E9:D4:FB:6B:8F:43:89:79:93:33:B9
Authority key identifier: 83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE
Certificate issuer:       /CN=A918F7A1/serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
Manifest number:          08F7
Signing time:             Tue 06 Oct 2026 22:48:51 +0000
Manifest this update:     Tue 06 Oct 2026 22:48:51 +0000
Manifest next update:     Tue 13 Oct 2026 22:48:51 +0000
Files and hashes:         1: g9YM-N6oAia4ByS83mcD0Q1lf_4.crl (hash: PZ1QzMOKIbUAYJWBfl0ZOomaZxc28UT/SZYhuU87dMk=)
                          2: FC1D8B7A9C7C11ED96690F39C4F9AE02.roa (hash: 1Serp1AISMAS8XExc/D22QzswGBamWnh8U3UjjtKM4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl
                          rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F7A1, serialNumber=83D60CF8DEA80226B80724BCDE6703D10D657FFE
        Validity
            Not Before: Oct  6 22:48:51 2026 GMT
            Not After : Oct 13 22:48:51 2026 GMT
        Subject: CN=6ac57ad3-6a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:bc:71:4c:2d:02:fd:63:e0:0b:b1:6b:78:
                    3b:c0:65:6d:43:b1:e3:c6:99:d0:14:30:c8:a6:a6:
                    fe:2d:66:60:d7:2b:33:31:ee:f3:01:65:36:80:77:
                    45:40:80:3e:c3:40:13:ca:77:05:8b:b6:27:2a:ae:
                    2a:d2:5c:2f:e6:f2:e7:fc:39:f8:de:f5:6b:fa:c5:
                    da:33:09:e5:75:2a:c9:11:48:96:a0:9b:1b:b8:bb:
                    de:64:d4:f1:84:d5:72:eb:b8:9d:07:39:48:33:9c:
                    37:04:b1:4b:96:ee:cd:be:a1:58:36:56:fe:4c:1e:
                    c6:4a:2b:f1:fc:3f:38:13:bd:70:aa:a5:a4:44:3d:
                    ef:1d:12:54:7b:ae:d6:70:45:65:4e:11:34:2b:6c:
                    47:8b:13:3d:96:d8:80:09:e5:ba:c7:ba:83:07:30:
                    b4:7f:cd:bc:e1:0d:a0:ea:87:90:ab:53:c7:34:da:
                    ba:e7:d7:e2:fa:9c:df:81:a4:27:fb:98:72:a4:c1:
                    bb:8d:41:cf:6d:dd:04:73:e4:e5:22:df:b5:75:15:
                    fb:e9:75:b3:6e:b9:f0:6a:3f:59:1e:5c:a0:00:28:
                    a4:0f:90:73:0f:30:a1:15:74:1d:7c:8b:7d:53:78:
                    0f:eb:5d:1f:5d:a4:c7:44:b6:3e:12:06:f3:c6:0c:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9A:12:63:BD:C5:8F:B8:DD:E9:D4:FB:6B:8F:43:89:79:93:33:B9
            X509v3 Authority Key Identifier:
                keyid:83:D6:0C:F8:DE:A8:02:26:B8:07:24:BC:DE:67:03:D1:0D:65:7F:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9YM-N6oAia4ByS83mcD0Q1lf_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F7A1/91E8E284F43711EBB5D5691CC4F9AE02/g9YM-N6oAia4ByS83mcD0Q1lf_4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:cf:f0:84:06:c6:0c:af:6e:92:7f:d6:29:e6:3e:76:ba:
         c1:ab:b2:d1:7d:dd:fd:ec:cd:1b:27:b9:33:05:c4:ea:35:d3:
         8d:3c:d1:75:8e:44:57:55:dd:4b:23:53:e3:92:80:51:43:a0:
         89:74:c8:94:15:8d:22:82:4c:98:83:98:a1:a8:0c:de:ee:23:
         b8:4c:2c:fa:34:75:99:80:a7:86:36:dc:8a:ff:5a:1d:ac:a9:
         b4:09:6b:b8:b6:db:b1:cc:a0:56:b3:76:bd:46:e3:2b:33:37:
         55:d3:26:62:0d:a1:1a:c5:6f:27:0a:a4:55:08:6f:ac:72:8d:
         3f:d5:ea:10:f6:42:ad:a2:d4:85:9c:e8:cb:7b:97:b1:e5:97:
         be:6f:d4:09:7d:81:2f:76:a0:0d:08:cf:bb:51:6b:a9:3c:0e:
         93:38:6e:98:ab:ef:7e:16:ca:85:6b:de:83:a2:d2:22:5b:c5:
         1f:64:6b:82:41:83:d8:f1:5a:e4:8d:b3:b4:6c:79:05:43:cd:
         25:a0:1c:a8:b1:63:51:df:ac:d5:cf:1d:6d:eb:81:3b:3a:14:
         4e:ec:2f:a5:94:a1:ad:c2:57:7e:93:34:91:9a:f5:0b:ca:4d:
         2d:7f:8f:cf:40:2f:5d:cc:ae:a6:48:52:ed:38:16:ac:7c:0e:
         de:e9:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:40:51 2026 by rpki-client