Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File:                     GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier:          TmhnkkdQoW2VbraJ6aVVHWhHBod0ap7NoZVVrBW88h4=
Subject key identifier:   10:00:96:00:57:DA:26:60:8E:AA:D8:73:51:16:CB:9B:61:DF:94:FA
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer:       /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number:          92
Signing time:             Fri 09 Oct 2026 08:13:19 +0000
Manifest this update:     Fri 09 Oct 2026 08:13:18 +0000
Manifest next update:     Fri 16 Oct 2026 08:13:18 +0000
Files and hashes:         1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: s5g2sW/BaM74mjUczALlVM/hUT/5miD/KJp69vLSqHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
                          rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
        Validity
            Not Before: Oct  9 08:13:18 2026 GMT
            Not After : Oct 16 08:13:18 2026 GMT
        Subject: CN=6ac8a21f-5515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5a:2a:d1:3c:9c:e6:f2:fe:05:db:4c:5c:be:
                    b8:f7:07:1d:06:00:2c:9e:96:1f:bb:60:1d:66:0a:
                    97:af:04:1c:c6:5e:1f:e0:6d:40:71:92:b7:45:30:
                    2a:b4:b5:6c:78:47:5f:e0:61:4a:35:5a:32:8d:fa:
                    99:19:bf:96:4e:24:5b:7e:cf:26:e5:dc:07:4f:a9:
                    86:de:33:35:68:9c:f8:87:1a:66:e5:ea:b4:1d:3f:
                    b9:fc:3d:02:42:4b:cf:76:fa:a8:af:49:7e:83:58:
                    60:59:a1:11:47:39:bf:11:6e:67:a5:8e:14:4c:3e:
                    e4:4a:a4:ba:d7:9d:27:a4:09:83:67:30:19:c6:ed:
                    32:74:58:48:0c:e8:01:d9:d0:d0:85:dc:e1:85:73:
                    89:ec:17:74:f9:d6:d2:6c:e6:5a:85:d3:bd:29:29:
                    1e:93:28:2e:a0:21:46:d7:b7:b6:af:7a:26:e8:b1:
                    db:38:c7:06:d4:ce:06:41:43:05:d1:0b:46:c1:f2:
                    66:08:b3:9e:d9:05:64:f8:94:6c:7e:6e:ea:c9:28:
                    f6:ee:23:bc:88:89:9f:e8:8a:ef:f7:c9:75:ed:c7:
                    8b:f7:4b:e3:b8:25:a4:32:e8:e5:7d:63:15:66:dd:
                    34:e4:d3:3a:2b:58:b4:b5:aa:8f:b1:5d:87:13:85:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:96:00:57:DA:26:60:8E:AA:D8:73:51:16:CB:9B:61:DF:94:FA
            X509v3 Authority Key Identifier:
                keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8b:13:fb:d7:86:3e:25:1e:1a:cc:f4:86:a5:57:29:41:fd:
         63:ab:54:91:18:b1:2c:d7:23:d5:52:fc:0e:ed:56:71:e9:67:
         ca:7a:08:e4:82:0a:f0:a8:5b:50:8b:48:f4:dd:d5:f7:55:8e:
         e0:4c:1d:f5:c2:9b:f0:2c:e5:74:bd:7e:7a:9f:05:39:80:da:
         ce:a2:ac:c5:03:9a:cc:2f:6b:ba:b3:99:b8:04:6e:55:2c:42:
         56:b2:2f:73:6b:a4:88:74:67:01:10:86:a7:c6:e5:a6:14:b8:
         18:f5:65:65:13:88:1f:f3:bf:31:ed:bb:d7:43:7d:08:75:06:
         ad:2b:68:5b:af:82:b0:4a:c8:81:0b:9c:1d:23:ea:bc:32:8e:
         e0:40:3a:00:a3:e5:f5:ca:95:ab:63:35:3c:95:ef:1e:fa:08:
         b4:e0:6f:09:c0:61:38:83:ed:f2:cf:81:4c:83:2b:de:d4:c8:
         44:c5:80:33:23:2d:0b:96:8f:79:7e:14:6e:5f:90:9f:4f:f2:
         a4:6d:cb:9c:c6:65:c2:d9:24:7e:03:15:b3:1f:43:f5:a8:ca:
         11:0a:b2:79:fb:ba:11:86:85:46:5e:d7:df:7d:8b:dc:f6:24:
         e6:79:0f:d0:18:cd:b9:c4:3a:1c:8e:ad:43:a3:24:7f:6e:98:
         7e:ab:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:17:50 2026 by rpki-client