Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
File:                     g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json)
Hash identifier:          KpBUHaOKbdR5qTzbUbFtd7BuqhSSLOQqthgTpu3qzjY=
Subject key identifier:   19:F6:79:1C:9B:A2:AD:EC:76:3C:9F:5E:57:B5:4C:9F:91:2B:D7:CB
Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51
Certificate issuer:       /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
Manifest number:          01DC
Signing time:             Wed 07 Oct 2026 04:03:58 +0000
Manifest this update:     Wed 07 Oct 2026 04:03:57 +0000
Manifest next update:     Wed 14 Oct 2026 04:03:57 +0000
Files and hashes:         1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: VA0ZK4aY8NxMt2fQ1sJEJIPdoY61l/HOnu/c6v25csE=)
                          2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: wFV3hxZNMimHCra0GUvVj+qhSpRLii8tAhy60erdhQE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51
        Validity
            Not Before: Oct  7 04:03:57 2026 GMT
            Not After : Oct 14 04:03:57 2026 GMT
        Subject: CN=6ac5c4ad-9a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:47:dc:ca:56:e5:2c:fb:e3:a3:9b:04:96:d1:
                    f7:fc:2b:c8:63:e9:e4:af:f6:13:3d:a6:2c:3c:bd:
                    bc:c3:c3:fc:e8:82:c6:23:39:3f:4e:fe:cf:0c:e1:
                    21:96:9b:ee:fd:0a:5f:7d:e1:dd:00:f4:a3:4e:f6:
                    57:47:e0:22:c2:27:2b:08:a9:93:22:eb:c9:de:69:
                    83:3f:08:36:00:c0:88:ca:91:16:66:6c:13:30:48:
                    10:55:70:63:3a:d0:b9:61:df:ff:e9:f0:ca:1f:aa:
                    d5:bf:b1:56:0f:62:58:ba:07:30:48:22:58:a7:84:
                    4e:b7:1c:22:3a:13:18:17:2a:2c:77:c1:71:64:81:
                    0c:e3:33:87:be:0a:8c:96:a3:3f:70:da:e4:ec:40:
                    17:09:eb:3e:54:71:0f:c4:db:bb:51:13:50:21:2d:
                    e0:ca:b9:80:4f:ec:43:63:31:06:e8:75:e5:ed:e3:
                    00:3a:3b:91:0d:e9:30:ed:45:be:aa:e7:f4:a0:18:
                    57:7e:eb:ff:43:74:ce:86:9d:d6:78:89:84:1c:4f:
                    bf:4d:83:e7:ae:e0:39:bf:25:1d:6a:34:ca:98:b1:
                    22:8f:66:d0:1e:17:fc:7f:fb:60:90:4c:d8:65:87:
                    4e:ce:0c:c9:d6:f9:bc:be:82:65:1a:9d:43:6b:2f:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F6:79:1C:9B:A2:AD:EC:76:3C:9F:5E:57:B5:4C:9F:91:2B:D7:CB
            X509v3 Authority Key Identifier:
                keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:ef:a6:6e:a0:b0:7c:25:2c:18:d7:6c:ab:ac:26:42:82:
         21:52:62:af:21:ca:b5:77:c9:5c:0a:81:ee:c4:38:4b:8a:95:
         b8:6a:d0:cc:b9:62:c6:12:c5:d8:61:2c:72:0d:fc:67:e7:3a:
         74:b3:a9:8f:e5:66:0a:6e:4a:fb:b1:3f:7c:7f:6b:ff:90:41:
         6d:d9:ad:e3:ca:1a:4c:99:9e:13:20:83:e6:97:e0:ef:f3:8e:
         2b:8e:aa:95:e1:07:e9:f3:2a:a7:52:f2:ad:12:43:8b:9d:03:
         c2:09:f2:f1:f6:2c:0b:65:69:93:d0:3b:07:33:b4:f9:29:4e:
         fe:cb:10:85:17:56:f6:9a:eb:68:ac:1b:86:9f:6c:d4:de:d4:
         7a:68:2f:06:38:68:06:07:4a:dc:e3:6d:44:b1:d8:c3:4a:77:
         89:23:e9:19:be:b9:43:3b:10:45:5c:95:a8:2c:14:dc:98:fa:
         9d:3f:af:e9:54:35:f8:23:9a:f4:44:33:af:ab:84:7f:4d:a9:
         43:43:4e:95:94:9c:26:eb:8b:a9:e4:7c:6f:23:ba:7a:e8:32:
         fa:2f:46:f4:d7:b6:4e:c4:c4:73:52:98:a1:8c:ac:fb:51:0f:
         b8:7d:61:09:4c:cf:bb:1d:2f:5d:c3:47:81:9a:38:2b:0b:28:
         f6:e4:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:27:54 2026 by rpki-client