Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
File:                     8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json)
Hash identifier:          kRJuf02V8OePcVf7Wfv8LJlhgyawIPWORrD5Tl3NSB4=
Subject key identifier:   15:82:E9:89:DF:6F:49:86:E8:FC:6D:32:7F:42:5B:72:F5:7D:75:F4
Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94
Certificate issuer:       /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
Manifest number:          01C7
Signing time:             Sun 11 Oct 2026 04:20:44 +0000
Manifest this update:     Sun 11 Oct 2026 04:20:43 +0000
Manifest next update:     Sun 18 Oct 2026 04:20:43 +0000
Files and hashes:         1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: AAcybng23+4TwDAw+OHEpumUZcaJvu2nnZf5tYi/TO0=)
                          2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: yTqlxqgIyDqwKJBCLVp74BlYncftum8I60uiHEX+uhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494
        Validity
            Not Before: Oct 11 04:20:43 2026 GMT
            Not After : Oct 18 04:20:43 2026 GMT
        Subject: CN=6acb0e9b-77e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:be:d5:86:24:85:25:37:38:ac:00:d7:5d:00:
                    4b:48:16:f9:a9:0b:2f:32:5a:76:2c:83:5a:bd:2d:
                    07:9e:59:ef:c6:d6:e8:48:85:d9:fa:64:57:a8:67:
                    cb:fe:d1:42:84:4d:70:18:8e:da:f1:8f:eb:b6:0e:
                    61:70:2b:f6:7f:02:b5:fb:9d:fc:b9:97:84:57:29:
                    97:be:91:85:11:7e:e8:53:5f:c4:dc:dd:07:08:66:
                    4f:34:36:56:7a:70:6a:0f:4b:a6:c4:2a:c0:39:93:
                    7a:12:10:46:e4:e0:16:b6:37:6b:48:19:18:ba:a7:
                    66:d3:54:51:f0:62:7f:74:08:8a:a4:f8:5c:d5:3b:
                    d9:47:97:ae:a7:51:33:86:62:cc:0c:a2:33:7b:7f:
                    8c:f7:db:19:12:02:be:ad:7f:dc:18:71:a9:1e:46:
                    2b:7a:44:e8:1f:37:c5:5d:08:d2:25:4f:39:b0:5c:
                    db:d7:cd:ec:bd:30:e1:cf:4b:f3:21:89:50:f8:d4:
                    ef:5e:c4:df:3b:64:0b:a9:fe:cb:61:84:37:8c:7c:
                    45:14:bb:ac:a4:94:41:e1:8f:5e:58:aa:40:7e:8b:
                    eb:dc:48:6e:27:05:15:e2:a2:57:1a:9a:86:87:c8:
                    0b:dd:89:a9:d8:7f:2e:78:50:bb:67:19:2e:0d:02:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:82:E9:89:DF:6F:49:86:E8:FC:6D:32:7F:42:5B:72:F5:7D:75:F4
            X509v3 Authority Key Identifier:
                keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:84:f6:0b:a0:8f:54:d6:ac:71:e8:64:c2:85:6c:74:e6:4d:
         fa:00:d1:e2:da:b7:9a:7c:38:ff:95:b3:b9:47:31:0b:41:a7:
         c8:4a:cf:2e:9a:6a:16:2a:2e:77:8d:44:14:d8:88:6b:1e:cc:
         83:1e:8a:bc:53:04:92:fb:ae:92:24:6d:ed:cb:2f:f7:2d:e2:
         1c:ac:6c:97:d4:17:cf:46:0a:17:44:72:2a:f3:6f:b6:d0:4c:
         42:31:eb:5f:b7:fa:30:82:e9:76:c0:89:4b:5a:14:2a:c0:45:
         73:b4:81:05:a9:d8:19:83:bd:48:59:42:bb:ec:a3:7a:97:d6:
         9c:d4:7f:88:47:20:51:e2:0e:2e:ac:2d:9f:69:03:f5:e5:0d:
         d3:d0:60:d9:48:81:78:0a:36:e9:00:ac:ed:9d:7d:22:17:e3:
         d6:91:bb:bd:ad:a5:43:a5:d0:b8:fa:68:b5:ba:7f:7e:f7:53:
         85:5b:72:17:a7:45:0a:b0:2b:6c:c2:49:6f:66:59:02:7e:dd:
         23:92:33:69:6b:c2:52:b9:53:7a:08:f9:eb:12:9f:db:45:68:
         f0:ee:28:48:f5:e0:18:f4:72:1c:01:bf:60:be:7f:cf:e8:74:
         44:3c:05:5c:98:bb:c0:1e:4f:5f:26:f6:1f:f8:ba:71:53:95:
         c7:98:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:49:40 2026 by rpki-client