Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File:                     gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier:          KtPvYVgJ4GdvrSxTcTBYuBRUGHxA7FSayB2x0+a2Tmw=
Subject key identifier:   B6:73:56:45:DD:EE:35:E2:AF:A4:D2:00:2F:0C:3B:9D:30:5B:C5:DF
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer:       /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial:       0871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number:          0868
Signing time:             Mon 31 Aug 2026 20:50:02 +0000
Manifest this update:     Mon 31 Aug 2026 20:50:01 +0000
Manifest next update:     Mon 07 Sep 2026 20:50:01 +0000
Files and hashes:         1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: uRPWTbYgU0zC7i46IcffUlx90vg1xTwpasszAOuc/Yo=)
                          2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: QgpTu41sM6G7HXGpsEzpZ01ASqr1eYUm5aigZVfQiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
                          rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 20:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
        Validity
            Not Before: Aug 31 20:50:01 2026 GMT
            Not After : Sep  7 20:50:01 2026 GMT
        Subject: CN=6a95e8fa-2e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:2c:09:5f:cd:39:b3:7c:6b:fc:79:69:d1:
                    02:eb:0e:40:48:43:5d:fa:c9:8e:b1:5b:6c:55:ec:
                    3c:4f:0f:43:e4:e3:88:b3:3e:64:92:0f:42:ad:4c:
                    bc:8a:4c:58:df:39:c9:e2:a5:48:86:91:e2:0e:6e:
                    b8:3c:2a:3a:fe:fd:74:d0:81:66:35:09:10:d1:9a:
                    e1:6b:28:30:c0:24:41:de:7b:52:4c:81:bd:3d:ba:
                    3a:81:d2:40:c8:75:2d:9f:db:b4:7e:85:4a:fd:87:
                    5c:df:9b:7e:dc:64:21:37:f7:05:6c:81:47:d3:a5:
                    2f:c0:3b:d7:ee:5c:9e:f0:b4:13:9c:d2:f0:47:2f:
                    32:3c:47:f1:04:5e:94:16:02:aa:f2:61:64:fe:0e:
                    41:69:2d:ee:b0:e0:5f:36:b6:a3:03:46:1c:d7:27:
                    03:bb:15:c5:65:e4:a3:aa:9b:56:df:41:66:cb:72:
                    47:98:4c:e1:b0:3c:af:7a:3f:9c:b8:36:bb:18:38:
                    cb:c6:37:ee:e9:46:13:6e:1c:b7:2a:58:62:a4:8f:
                    38:a9:b2:f3:d4:db:24:40:46:ac:05:e0:6b:3d:c5:
                    48:14:92:3e:82:71:19:13:63:2b:53:da:04:ea:d1:
                    77:a2:07:4c:5a:7c:69:29:ee:21:e7:33:17:74:c8:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:56:45:DD:EE:35:E2:AF:A4:D2:00:2F:0C:3B:9D:30:5B:C5:DF
            X509v3 Authority Key Identifier:
                keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:19:d3:66:ac:bc:82:8e:5a:ad:9d:fb:9f:97:23:b6:5f:da:
         38:97:2b:9d:b6:95:74:2b:ed:97:b7:2f:ce:b6:af:73:e0:7b:
         1b:64:7b:f4:ee:ce:0f:11:85:a8:87:fe:ec:2f:2c:ee:ba:9c:
         96:a1:6b:f4:56:ee:bc:2c:77:b4:20:48:d0:1d:99:37:76:6f:
         28:b3:d6:c1:7c:cd:6f:fc:76:95:8c:99:19:37:e1:8d:14:d9:
         85:66:bd:72:d7:4c:45:cf:4e:fc:12:6a:fd:de:07:ac:be:8a:
         cc:07:d8:30:3c:d8:f6:74:63:e5:de:05:93:73:a2:38:d6:2a:
         27:df:f7:83:f4:62:5b:79:f1:0f:03:34:4e:b1:9d:a5:de:eb:
         3c:52:c4:52:12:9a:41:3c:2c:a8:8f:61:71:82:73:3e:41:cf:
         61:81:a4:ac:a6:f9:14:8e:d6:cd:5e:a5:93:92:dc:f4:f7:fc:
         49:df:83:22:ce:32:ef:30:3b:2b:c3:76:c9:a0:a4:98:3e:e7:
         b3:bb:4e:56:16:22:42:12:73:d6:bf:d5:df:58:1e:23:40:0f:
         19:ee:ce:13:cd:59:92:c3:95:f6:d5:92:94:b4:fc:ca:b4:38:
         39:b6:bf:5a:e9:cd:74:55:9a:ec:0d:8a:1b:78:f9:b3:74:7b:
         4c:da:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:51 2026 by rpki-client