Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File:                     _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier:          DeYiYZCk7mE34CpKUspLG5jeqgww7GQSUlzJpuwWhaI=
Subject key identifier:   2E:05:8A:DD:02:A5:5F:6C:E3:79:D7:E0:5C:AC:93:AD:68:89:15:63
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer:       /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial:       03FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number:          03F6
Signing time:             Mon 05 Oct 2026 00:27:37 +0000
Manifest this update:     Mon 05 Oct 2026 00:27:37 +0000
Manifest next update:     Mon 12 Oct 2026 00:27:37 +0000
Files and hashes:         1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: bWT/owowSd29lLBNNrKQdr/bsmLkHZ1z/yjFxvTmluU=)
                          2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: r5gelgjZp5B3j7+l6m368Vdh062KkVezcOMS+HcP7j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:27:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
        Validity
            Not Before: Oct  5 00:27:37 2026 GMT
            Not After : Oct 12 00:27:37 2026 GMT
        Subject: CN=6ac2eef9-1b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b8:c0:c8:bb:f1:27:22:c9:88:00:2c:5a:ee:
                    fb:a1:9b:2c:5a:92:a4:95:81:11:ce:85:4d:02:7f:
                    79:5e:79:72:85:e0:0b:87:cd:a7:91:c6:47:e7:c2:
                    4e:2a:0c:b9:74:f1:50:c8:b0:3b:0f:f5:14:39:2e:
                    b5:ab:a8:0a:ce:f3:43:e4:8b:f5:71:17:02:f8:7b:
                    03:86:82:38:28:26:d5:3b:ba:bc:df:5e:19:3d:4d:
                    1a:ba:b6:f0:3a:8d:8f:78:a6:88:58:e9:c1:f5:55:
                    2e:53:0d:df:33:c8:fb:7f:69:7f:94:d5:46:d6:11:
                    04:36:c6:e7:66:8e:95:45:bd:48:8b:58:2d:61:52:
                    aa:03:cb:00:20:41:d4:4b:bd:fb:12:e9:f0:ff:4a:
                    dc:9a:3b:dd:39:35:52:aa:02:40:51:06:52:71:9f:
                    16:d6:96:d5:55:4c:c6:fd:1f:b3:d5:73:d3:12:8e:
                    e8:36:c8:ee:60:56:95:d4:f0:db:95:f4:0a:bb:ae:
                    b7:d9:8e:cd:4e:a0:95:f0:79:4a:9f:0b:e0:3c:59:
                    4a:6c:28:82:ff:01:07:6b:2c:f1:80:00:de:93:8c:
                    76:36:51:90:9c:ca:cd:bd:cb:b0:b4:88:87:73:aa:
                    10:bd:2e:fe:e0:b0:da:3e:f3:bc:e3:e1:cb:6a:06:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:05:8A:DD:02:A5:5F:6C:E3:79:D7:E0:5C:AC:93:AD:68:89:15:63
            X509v3 Authority Key Identifier:
                keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:50:18:d1:1a:ac:4c:75:a4:00:1b:4e:46:21:17:7a:44:5e:
         ab:21:99:c4:1a:52:f7:df:84:e1:06:b1:c4:86:9e:5e:4f:e5:
         69:ba:41:25:e1:19:56:ae:a0:86:68:94:3d:66:13:e8:8a:47:
         ef:83:e9:a2:9c:37:ea:95:d5:29:78:b4:9b:f3:94:15:83:b1:
         6d:ca:33:14:b3:80:f4:9b:29:62:5b:34:5b:86:89:d1:bf:8b:
         4e:4b:a8:8d:bf:15:e6:bc:a0:40:bc:87:03:62:ee:00:b2:03:
         2b:63:90:81:93:fc:60:08:08:f6:a5:b5:c0:57:b9:a8:d2:5a:
         19:ab:ab:8e:88:c9:3c:d3:54:40:dc:c9:53:49:c8:bf:97:14:
         99:bf:64:b9:47:62:45:a1:0e:cd:b2:a2:77:12:57:0c:f8:72:
         4e:d7:67:86:e4:5e:c6:bf:46:b0:29:1f:cf:e7:a5:ca:04:96:
         41:85:31:db:31:d9:88:9d:89:67:e7:b5:d0:29:f1:99:87:fa:
         c9:07:1f:36:69:df:24:76:0a:15:49:38:15:cc:a7:20:9f:93:
         4b:d5:90:ca:1e:05:7c:ee:41:9c:82:01:75:a4:0c:1d:27:27:
         55:26:17:77:2c:e0:c9:9d:4a:54:3e:d4:c5:dd:40:ba:d6:cd:
         dd:dd:60:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:05 2026 by rpki-client