Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File:                     gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier:          dXPe7u3sLDD/bgGKE4vGVh5ts43WoBuuc6Y/emH0j2g=
Subject key identifier:   B0:C5:B5:34:BA:1C:85:C1:64:88:E6:BD:4C:3E:09:09:7D:0C:56:15
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer:       /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number:          01A7
Signing time:             Mon 19 Oct 2026 04:47:25 +0000
Manifest this update:     Mon 19 Oct 2026 04:47:24 +0000
Manifest next update:     Mon 26 Oct 2026 04:47:24 +0000
Files and hashes:         1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: Nu+z+PsA/mjvDdNLZK9+9cd8wFLTad3pFg+CnzzyJ/g=)
                          2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 04:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
        Validity
            Not Before: Oct 19 04:47:24 2026 GMT
            Not After : Oct 26 04:47:24 2026 GMT
        Subject: CN=6ad5a0dd-8e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:e9:0d:ad:cd:3a:d6:ac:79:65:b9:7b:07:
                    af:4f:48:81:c3:ed:9a:39:d3:9f:94:3d:82:97:27:
                    ee:de:a7:b1:cf:34:e9:f9:2f:8b:dc:52:da:da:a8:
                    38:be:e2:23:81:07:78:3d:54:47:be:a9:0b:60:34:
                    64:57:b2:73:1a:cc:c9:bc:a4:84:b9:87:8b:2b:f5:
                    27:89:b9:2c:d5:0d:c8:a1:e9:af:12:50:0c:f5:f3:
                    cd:fa:31:11:e6:bb:0a:46:85:fc:67:ec:64:aa:4f:
                    8a:08:c0:d3:67:35:f9:97:2e:71:8b:69:c0:72:b9:
                    02:e3:01:1f:47:89:85:4b:77:3c:f1:fb:e3:ae:e8:
                    36:19:1a:78:1a:3a:ba:e7:ba:06:cd:74:11:ba:71:
                    fc:8d:90:e1:40:61:90:ed:fe:f0:cd:0b:9e:93:e3:
                    20:de:7d:05:a7:c4:9e:de:ec:10:e3:51:49:03:78:
                    25:05:71:f8:8c:0a:48:35:2f:55:f2:65:8b:10:ef:
                    8b:e9:4c:ed:68:f5:b5:2b:ed:ce:e9:28:41:3e:53:
                    1a:ea:8f:33:6a:97:5c:35:a7:ac:fc:39:c2:5e:80:
                    9f:80:a6:a3:5b:42:3b:b8:0c:83:73:0e:91:4d:d6:
                    c4:60:49:9a:51:16:6c:7b:40:f1:43:56:16:58:3c:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:B5:34:BA:1C:85:C1:64:88:E6:BD:4C:3E:09:09:7D:0C:56:15
            X509v3 Authority Key Identifier:
                keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:53:7c:c9:4b:c0:f2:42:fb:88:ba:25:7e:e2:88:2d:b5:
         4b:ac:5e:53:eb:d8:49:9f:50:06:46:2d:52:56:b3:02:82:65:
         fa:ca:52:c7:1b:ea:0b:1e:71:54:71:0b:73:75:20:6c:b4:d7:
         23:16:4f:a3:63:82:33:53:b1:da:2b:2f:cc:94:d0:03:0a:8d:
         07:3f:6a:55:02:0c:bc:60:d8:0c:dd:80:ba:d9:13:eb:93:a7:
         7c:a7:f2:ec:8b:e1:12:f2:bb:2d:7c:f9:be:5b:bb:4b:61:19:
         eb:96:9b:2b:74:8b:0b:2e:db:f2:79:2f:6e:60:72:5f:23:d3:
         84:24:39:32:53:d0:9f:87:1a:d8:71:10:79:c7:1c:16:62:72:
         65:5e:4b:45:60:e7:dd:a7:f8:4b:07:ae:36:14:00:68:b5:39:
         45:44:08:a6:fb:70:6b:fc:5c:a6:35:fa:84:19:bc:70:6e:1b:
         59:b9:19:d4:c9:77:03:cb:f4:4d:d7:15:21:32:e8:5e:28:3c:
         03:f1:b9:7a:02:de:4d:23:af:39:ea:e8:2d:05:8c:90:b6:66:
         ce:f7:17:23:55:75:61:4c:b9:c1:73:2b:d2:3b:43:aa:a1:16:
         53:08:3a:54:0a:ed:b1:97:df:8f:57:62:f1:74:34:83:db:05:
         13:70:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:34:33 2026 by rpki-client