Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
File:                     g4L2GIxKbdZpVNVxij2cz5uL-JU.mft (raw, json)
Hash identifier:          TxoemxuXzCduUMtawo0ljPR5pccmPOjsjOn9Brex86U=
Subject key identifier:   71:2B:B0:A0:C0:AE:17:6F:9F:EF:E6:2A:D1:BD:96:65:2B:20:FE:44
Authority key identifier: 83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95
Certificate issuer:       /CN=A91CB8BA/serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
Certificate serial:       08DC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
Manifest number:          08CF
Signing time:             Fri 04 Sep 2026 19:53:01 +0000
Manifest this update:     Fri 04 Sep 2026 19:53:00 +0000
Manifest next update:     Fri 11 Sep 2026 19:53:00 +0000
Files and hashes:         1: g4L2GIxKbdZpVNVxij2cz5uL-JU.crl (hash: fihYMj65c2hNUW8Ux6lH2t8olAl8+mBCtUNYhVGJsyw=)
                          2: 21B96F2E7BC911EBABCF472DC4F9AE02.roa (hash: i37T+miB19JllsQUkIFRFN9qItWKSwoaTSynWV3QKsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl
                          rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB8BA, serialNumber=8382F6188C4A6DD66954D5718A3D9CCF9B8BF895
        Validity
            Not Before: Sep  4 19:53:00 2026 GMT
            Not After : Sep 11 19:53:00 2026 GMT
        Subject: CN=6a9b219c-74a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:d7:55:40:97:86:30:48:16:ef:bd:5a:31:
                    81:69:6e:89:5f:96:a8:70:d6:33:a9:83:c1:8c:ab:
                    44:68:31:19:50:6e:0f:1e:0c:f9:28:7d:f1:8e:a7:
                    8d:cc:bf:8b:6f:a4:d1:b0:70:8e:3a:90:6d:3a:6b:
                    6c:14:ec:f6:f2:14:ec:04:50:59:96:20:54:4b:6f:
                    e6:78:98:ca:51:2d:0d:27:7e:e2:3f:8a:4e:bd:61:
                    dc:b4:60:42:73:af:5b:12:e9:06:27:27:cc:60:01:
                    60:ba:a0:4e:b5:db:75:ed:1a:a7:ee:e1:e9:a1:53:
                    24:e4:83:db:17:31:66:f6:d2:e4:34:9c:43:25:d5:
                    26:61:a0:f9:19:75:23:23:97:d5:38:a8:5f:e2:74:
                    1d:ae:5e:85:80:d7:ae:1a:c1:f7:e2:4f:51:95:d9:
                    88:98:d3:79:18:94:bf:40:35:7f:ac:6e:63:2d:ce:
                    a2:d6:23:f9:08:d0:e0:da:03:82:8b:3f:35:b2:d1:
                    66:8f:3a:4e:1b:71:e0:df:47:5e:41:fa:d4:8f:c4:
                    ed:40:fd:21:75:39:3b:11:19:89:62:64:b4:35:9a:
                    d5:b1:0e:be:a8:1b:da:16:a9:88:99:51:41:a6:61:
                    a1:a7:79:4c:3d:78:a6:72:66:c5:cb:0f:7f:94:0d:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2B:B0:A0:C0:AE:17:6F:9F:EF:E6:2A:D1:BD:96:65:2B:20:FE:44
            X509v3 Authority Key Identifier:
                keyid:83:82:F6:18:8C:4A:6D:D6:69:54:D5:71:8A:3D:9C:CF:9B:8B:F8:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/g4L2GIxKbdZpVNVxij2cz5uL-JU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2510B4E6F0FC11EAB985FA5FC4F9AE02/g4L2GIxKbdZpVNVxij2cz5uL-JU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:bb:6d:bd:0b:66:6b:de:0f:1e:c1:4a:7b:18:aa:5d:4d:89:
         75:c5:62:68:aa:3b:51:82:9c:1c:2d:b4:09:71:9f:58:35:d8:
         4d:e9:f7:a7:d3:ef:6f:e2:4a:5d:4f:12:36:2c:0c:2c:06:cb:
         c9:7c:97:ea:ea:fb:2c:43:ab:65:82:d7:36:d4:3d:85:11:ae:
         13:95:d5:96:d0:8b:70:bd:1d:fd:ba:5f:56:34:11:e2:36:11:
         bb:95:c5:88:5c:41:e8:0a:e0:80:bf:73:8a:16:4f:70:1d:b7:
         7b:4a:13:c1:bc:48:f5:a3:ad:f6:d4:a3:4e:3f:2c:5c:8c:cf:
         cc:66:b0:1f:3d:48:28:85:b2:a9:d8:91:89:1e:5b:53:ff:61:
         bc:6b:08:55:ab:ef:e1:6c:7b:5b:4c:57:1e:37:b0:36:0e:e7:
         7a:21:c3:92:dc:46:b2:87:9a:3e:bb:41:77:db:9c:ed:90:da:
         64:12:bf:b8:ba:a4:4f:3f:28:cb:99:9d:bb:42:b4:ae:d4:7a:
         d6:8a:f8:e3:24:d6:54:bd:76:a1:fd:f0:fe:37:7b:91:08:95:
         db:c7:49:13:38:73:ec:6c:ed:bd:a3:67:75:53:4e:31:4e:3e:
         a7:5d:65:af:aa:d6:e3:ac:51:68:e1:00:ab:20:82:76:ea:7a:
         17:59:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:10:10 2026 by rpki-client