Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
File:                     gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json)
Hash identifier:          mxh5GjDdw97VWDu/18nwdCFW/IfkW6R/5v/Yw2vBTYE=
Subject key identifier:   8A:F8:77:DD:83:AF:8F:D3:6D:EB:D6:D2:E0:18:BF:8C:64:EA:99:BA
Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
Certificate issuer:       /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Certificate serial:       3589
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
Manifest number:          4298
Signing time:             Sun 04 Oct 2026 15:02:02 +0000
Manifest this update:     Sun 04 Oct 2026 15:02:02 +0000
Manifest next update:     Sun 11 Oct 2026 15:02:02 +0000
Files and hashes:         1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: 2sbto3jbMOOZDBt6yhb5rrVKs6hhYlWJcqVxTOLm6oY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13705 (0x3589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
        Validity
            Not Before: Oct  4 15:02:02 2026 GMT
            Not After : Oct 11 15:02:02 2026 GMT
        Subject: CN=6ac26a6a-89b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:04:12:9a:9e:57:e0:25:f4:59:0b:b8:16:
                    66:e3:e4:19:13:37:13:0c:91:1b:69:a2:a4:8e:f3:
                    fa:31:8a:d5:75:bd:07:8c:1f:cb:c9:a6:9b:f8:a1:
                    64:84:88:c0:c8:98:98:df:2f:56:eb:b2:ab:3e:d0:
                    4a:40:f6:d2:97:8f:7a:dd:9c:57:4f:37:0d:20:09:
                    27:38:00:97:51:4a:c8:2e:b3:f8:bb:06:81:67:23:
                    e4:72:a2:98:fc:48:4b:b2:5d:50:40:e3:e7:91:80:
                    23:84:de:03:a3:63:a5:e2:05:78:ff:e7:78:21:52:
                    c6:dd:b5:c1:86:b2:f5:85:88:de:84:b2:92:a5:db:
                    a2:6d:de:97:17:e6:d2:70:d8:08:16:24:f1:61:14:
                    0b:35:ab:db:90:0d:88:78:04:cf:a5:12:cc:0a:d7:
                    28:b5:66:30:f9:45:3a:9c:89:3c:4f:b0:5e:b7:5b:
                    76:60:2a:18:b8:51:0b:f4:e2:72:30:61:cb:7d:70:
                    73:87:b9:4b:a4:0a:4b:c1:a8:d2:48:39:3a:57:86:
                    d1:e2:e9:3a:8d:c2:6c:59:45:99:41:e9:b9:d7:fc:
                    f3:e2:f6:90:c7:04:7b:98:61:10:af:88:55:91:20:
                    2c:b6:3d:de:d4:e3:fc:8e:14:50:de:b0:03:0e:ee:
                    62:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F8:77:DD:83:AF:8F:D3:6D:EB:D6:D2:E0:18:BF:8C:64:EA:99:BA
            X509v3 Authority Key Identifier:
                keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:86:5b:2a:cd:e7:34:1f:46:1f:77:9e:17:f8:b9:d2:66:
         04:9b:eb:06:f1:7e:6d:1c:4d:cc:19:3d:93:76:f4:c7:07:2f:
         b1:0c:aa:ce:e9:71:ce:bb:64:ce:61:13:83:09:42:43:f5:44:
         5e:be:e8:06:9c:cd:0e:17:a5:d5:ad:ff:b0:4b:73:f7:97:3a:
         dc:9d:b7:6a:23:0f:10:8a:59:f0:72:14:28:f1:f4:ce:aa:05:
         d0:70:d2:8c:3e:31:20:fb:0a:5a:29:bc:04:f9:22:fe:ee:55:
         55:32:76:05:dc:f8:43:32:fd:ff:25:00:83:68:6b:8a:db:7a:
         84:a7:17:f0:9c:e0:c0:b5:06:fc:dd:c5:e6:d7:d4:05:3b:48:
         04:a6:b2:3c:3d:c9:51:17:02:84:cf:53:cc:f7:84:5c:c2:7b:
         0f:9e:b0:ba:a6:51:cc:71:cd:78:47:3d:eb:6a:30:46:e8:41:
         6d:13:bd:0c:80:8e:a7:ca:50:b6:1c:64:bb:fe:f6:95:77:c5:
         43:3d:00:7b:62:23:36:f6:2c:29:ee:d4:1e:da:a6:96:6c:d3:
         9a:9e:cf:11:4b:62:b4:81:df:34:85:7c:3a:bb:54:2f:48:14:
         7f:b1:6a:2f:92:52:ae:35:50:7b:20:a9:03:d2:58:aa:4b:2e:
         47:29:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:16:31 2026 by rpki-client