Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File:                     G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier:          RGDrsOYeepZkRVfvHfxH4l7m7H2OovzmtDOwzQ3qCLs=
Subject key identifier:   BE:31:20:CE:45:FC:75:2D:2D:B6:D5:8C:4E:89:5B:9D:35:0B:75:A5
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer:       /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number:          06CE
Signing time:             Tue 06 Oct 2026 22:28:09 +0000
Manifest this update:     Tue 06 Oct 2026 22:28:09 +0000
Manifest next update:     Tue 13 Oct 2026 22:28:09 +0000
Files and hashes:         1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: 4jIgQtIre+ZGt7N532SLpzLC66ImaJadaPn2fhUj35I=)
                          2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: GQk6miILq5E3O9W9Bxofq4noO8p/JMAUItCq3P5QEIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
                          rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
        Validity
            Not Before: Oct  6 22:28:09 2026 GMT
            Not After : Oct 13 22:28:09 2026 GMT
        Subject: CN=6ac575f9-345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:45:07:86:d4:e9:63:e3:e0:ea:5b:4f:5c:
                    27:37:90:36:91:19:eb:7a:9a:01:cc:6e:59:a4:a8:
                    36:13:6d:f6:39:e9:48:3a:7b:38:9e:12:0e:bc:ec:
                    e7:3b:35:e1:e3:0e:68:a4:88:21:70:5c:d7:e6:7e:
                    be:96:b3:e9:28:26:e1:75:0f:31:b0:c6:ef:5f:be:
                    48:04:41:9e:be:87:c7:32:ae:62:5a:eb:5b:46:a1:
                    6e:ef:af:87:3f:bc:87:ac:5b:ae:12:3a:62:50:c0:
                    d0:7e:c3:b4:be:24:f5:42:70:eb:1c:46:ce:56:c9:
                    5e:83:d6:1c:86:f0:ab:ea:7b:e7:16:64:cd:ec:8f:
                    84:c3:8d:97:29:73:71:6b:cb:de:72:61:92:ef:63:
                    1d:08:bb:ae:c8:27:3e:88:0b:c6:ac:24:5b:6e:fc:
                    ac:42:bb:d2:3d:b7:e2:51:ef:08:f9:8a:c0:38:ad:
                    58:99:17:31:73:68:c1:24:fc:3c:8e:76:8f:e2:56:
                    89:19:b0:37:d7:d6:61:14:9c:19:ac:9a:61:5f:ad:
                    e7:72:1a:9c:c8:71:71:b8:22:9d:f5:a8:d4:d7:ed:
                    cc:7f:99:13:1e:fe:96:8c:bd:aa:57:b3:f5:f0:2a:
                    ac:f1:fe:80:f2:4e:55:9f:83:dc:8d:5f:5b:01:13:
                    e5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:20:CE:45:FC:75:2D:2D:B6:D5:8C:4E:89:5B:9D:35:0B:75:A5
            X509v3 Authority Key Identifier:
                keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f4:74:4a:f4:f2:28:17:25:b7:fe:bd:ae:83:e9:84:71:89:
         37:0c:c3:23:58:eb:af:fb:ec:ae:2c:7a:82:7f:7c:72:d5:b7:
         bf:c7:42:16:36:1b:b5:29:d9:c2:fd:bc:24:77:25:4f:b8:12:
         8b:9f:29:4b:30:63:05:60:ee:aa:8c:ee:f6:9f:d4:7b:d4:e1:
         7d:32:35:6f:2c:a6:81:6d:4e:93:84:17:71:10:d7:4d:00:fe:
         54:78:3a:a3:75:0b:5c:fc:38:64:4d:f2:ac:b7:9f:51:fa:be:
         ed:77:d5:13:22:ec:48:68:fd:fd:4f:4b:75:e7:b2:15:73:72:
         8c:0c:1f:9d:6e:29:dd:1d:d2:68:e7:14:ac:9b:37:d1:41:c4:
         29:ce:de:ed:c7:0e:fd:13:81:c2:30:49:85:97:f7:aa:55:7b:
         13:2b:d5:84:e8:db:83:a1:41:64:c4:b8:6c:ad:ef:b7:8e:86:
         9f:c4:c3:80:29:37:28:1f:d1:c7:02:43:88:8a:66:ef:cc:11:
         da:07:1c:57:83:8b:49:d9:4e:c0:95:93:c9:89:b6:9e:77:a8:
         69:39:0c:b3:d7:bf:6c:90:72:55:71:a9:11:be:83:d7:bb:bd:
         f8:30:20:5e:c0:f9:2d:8c:21:6b:7d:59:23:ca:6b:48:90:97:
         ba:b9:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:52:07 2026 by rpki-client