Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File:                     ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier:          0wMVBP4h1hyc6L8qIY4dWxNOnTRSPIufXM/ufvuTVWI=
Subject key identifier:   1C:75:98:5C:EC:5C:D0:E6:C6:A1:DD:D1:04:EC:D2:36:FB:13:FC:22
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       0712
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number:          070B
Signing time:             Sun 04 Oct 2026 22:10:34 +0000
Manifest this update:     Sun 04 Oct 2026 22:10:34 +0000
Manifest next update:     Sun 11 Oct 2026 22:10:34 +0000
Files and hashes:         1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: T+15dlLeOxKn4wH7YkTxSG6/gSMuXhn3mexAPJOzyYU=)
                          2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: OC1wYvk7HdnATgeP8AW3eH45pm98AkZGK4N7Ka/dybY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: Oct  4 22:10:34 2026 GMT
            Not After : Oct 11 22:10:34 2026 GMT
        Subject: CN=6ac2ceda-47ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:e2:f5:0a:cf:a1:eb:07:02:2a:fa:aa:47:
                    14:ce:29:37:00:bb:50:a0:ca:24:31:eb:df:2a:85:
                    47:95:61:d2:c1:e3:e8:c7:09:1b:a7:75:2c:21:b8:
                    f9:89:f9:3e:2c:fd:34:cf:dc:1e:1b:f7:89:31:82:
                    c9:dd:e4:dc:53:6c:4b:68:73:5a:41:ff:27:ed:d2:
                    19:d1:c9:cf:18:4f:83:99:67:8b:7d:55:4b:cc:98:
                    05:8b:ce:78:95:77:56:70:a9:3b:03:89:5f:60:d7:
                    45:f1:0a:36:1c:49:d4:ec:7a:14:65:45:78:d5:d1:
                    2b:22:b5:90:31:45:fe:65:21:34:50:7c:34:ed:61:
                    5e:b7:1e:50:2b:0f:81:fb:5a:4a:1e:cd:3c:e0:34:
                    bf:71:79:04:01:1e:41:88:d3:13:57:71:18:a8:07:
                    8d:a7:b4:ce:1a:a7:38:ce:8e:1b:d7:9d:b9:f7:cc:
                    31:b3:7b:b1:0e:e8:91:ea:32:43:70:70:e4:bb:fb:
                    32:7f:59:be:28:76:be:f2:65:71:d8:a6:9d:27:18:
                    0c:b5:93:32:5d:ed:c7:7a:16:04:c6:3f:92:6b:96:
                    66:69:bb:f9:d0:88:32:e7:73:4e:52:6e:3c:58:1e:
                    3a:3f:49:d6:c7:ef:93:79:7a:75:79:bc:ff:0b:f2:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:75:98:5C:EC:5C:D0:E6:C6:A1:DD:D1:04:EC:D2:36:FB:13:FC:22
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:12:5d:f3:b1:a9:7a:af:13:0c:d5:ef:e7:65:18:12:4d:84:
         ec:29:7f:c0:1d:1b:cd:04:40:25:9f:9c:b1:a4:d2:db:a9:a8:
         62:fc:40:c7:59:d4:e2:fe:be:ca:a6:15:9b:ac:72:13:14:e2:
         79:e9:d5:6e:b4:82:cb:ab:e0:d6:03:d7:74:fc:90:84:8c:dd:
         77:bb:64:22:6e:31:94:89:5e:61:67:e4:d5:d2:e7:5a:ff:52:
         f4:50:2a:8d:24:a9:61:8e:0a:f9:85:04:fe:a9:88:00:67:87:
         ae:f4:44:98:32:32:76:c7:69:29:45:4d:46:1a:29:95:23:9f:
         3e:f6:b8:ba:92:29:61:5c:ff:ca:8a:b4:6f:6e:63:56:bd:32:
         19:b8:c8:c5:80:2b:a3:70:a6:b8:3f:7c:4d:f3:03:07:f0:b6:
         49:32:1e:df:d5:83:8d:5e:67:ff:22:aa:1e:10:70:af:6d:3c:
         9c:56:9a:92:9d:a2:3b:3f:d8:31:c3:84:2a:d2:88:5a:5e:0f:
         1c:f1:e2:5f:2b:66:a3:68:9a:c7:86:15:04:14:1e:c7:18:0c:
         c9:88:72:59:86:7d:d4:33:eb:f1:f1:e7:24:cb:54:25:4f:34:
         57:fe:6b:3a:d7:96:03:c6:9c:81:66:21:0c:73:c7:c8:c1:50:
         1e:b6:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:34:53 2026 by rpki-client