Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
File:                     gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json)
Hash identifier:          9m7TGoYJtd9MNAp9Cui9VIa9WTuKPZF3+0LgIyCW/NA=
Subject key identifier:   B0:F2:D6:B2:FE:98:14:1A:CA:9E:16:0E:5B:E4:1C:0D:F4:66:03:98
Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
Certificate issuer:       /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Certificate serial:       0A05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
Manifest number:          09F7
Signing time:             Tue 22 Sep 2026 19:38:49 +0000
Manifest this update:     Tue 22 Sep 2026 19:38:49 +0000
Manifest next update:     Tue 29 Sep 2026 19:38:49 +0000
Files and hashes:         1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: dNy+20SpIXsw46FdwQvHsQc9H700BTVsc8iqB6EHXvc=)
                          2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: gqN4+0x/iPERujmuiwnxSyaP8QLNa37HtTvPV2wxA2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
                          rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
        Validity
            Not Before: Sep 22 19:38:49 2026 GMT
            Not After : Sep 29 19:38:49 2026 GMT
        Subject: CN=6ab2d949-5e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:f7:cb:2e:3e:fc:92:62:65:d9:17:66:eb:
                    a4:ad:f6:8b:b7:d7:f7:5d:4e:6c:54:76:c6:ac:13:
                    86:84:01:75:e7:20:e3:9f:4e:52:65:f8:c4:8e:8f:
                    38:f9:61:a2:b6:d0:a2:96:d3:74:1f:3c:7c:34:ed:
                    5b:83:fb:55:be:34:76:9c:cc:fc:46:b2:f1:63:17:
                    b6:d0:ad:77:22:30:5c:fd:bd:60:e0:5d:ab:30:c1:
                    77:00:db:89:c0:7f:5e:70:fb:a5:6a:23:15:31:9e:
                    ac:5b:be:02:7b:6a:a2:2b:bb:2b:fa:bf:1a:65:5d:
                    67:57:c5:67:15:33:9c:52:c5:55:27:18:67:4f:31:
                    02:a2:12:a5:13:a3:9d:0d:f4:a8:3c:f2:5e:6b:77:
                    01:39:c1:ca:a3:32:0c:19:11:b7:9e:c1:42:44:0b:
                    e2:a8:18:3c:18:b0:ae:19:06:b9:a3:f6:f2:33:81:
                    24:6d:ab:c3:e3:9a:e8:c2:a2:58:fa:be:6d:b8:24:
                    f1:42:13:ae:4d:83:0c:d4:de:7a:74:7f:f4:91:2a:
                    4a:af:5d:6d:4d:dc:12:c5:7b:18:79:d7:15:97:75:
                    f5:31:e8:c7:db:77:98:f3:79:07:d1:e5:84:f8:9f:
                    f6:a9:b6:dd:06:35:fa:fa:62:fa:d2:93:a7:3f:74:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:D6:B2:FE:98:14:1A:CA:9E:16:0E:5B:E4:1C:0D:F4:66:03:98
            X509v3 Authority Key Identifier:
                keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:6a:f4:d1:17:1e:e0:1f:90:5e:5c:24:1a:88:29:99:ff:
         ee:49:a6:a4:cd:dc:b6:6c:5a:50:8c:7a:37:4e:ae:8e:9f:e8:
         e7:69:ce:e4:a9:b3:40:5f:dc:2e:4b:f3:9a:5b:be:82:14:ab:
         39:c1:4d:04:ef:34:f0:06:e1:96:51:8e:57:0e:89:8b:da:a6:
         f9:a7:57:1a:d4:1e:62:f0:a5:a7:26:cf:af:10:17:99:07:92:
         8c:6b:b4:8a:e6:b7:6d:4e:a6:36:5c:1d:cf:ee:ea:bd:4e:f8:
         25:92:d2:bd:8e:d7:32:d3:00:37:47:16:e7:ce:42:2c:da:bb:
         22:4b:cc:18:26:1b:77:1f:42:b9:f8:42:cd:81:b0:20:f7:45:
         d3:43:f4:a1:ad:91:c0:5c:b1:59:0e:26:9f:f5:97:3a:10:73:
         f3:f8:e9:a5:3a:d8:92:be:fb:6d:67:78:16:0c:00:4a:86:ad:
         c5:a2:e2:de:6b:67:f8:a6:e4:1a:c9:80:56:bf:dd:80:ed:9d:
         3a:00:be:ae:d5:ef:19:94:23:bf:5a:17:df:36:03:2f:ca:a8:
         74:b0:35:9f:b5:a9:a3:1c:ae:86:80:3d:f4:99:0f:66:bd:97:
         76:b9:55:4b:e6:3e:d6:64:9f:ed:68:73:11:d3:28:c0:93:a9:
         97:f0:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:34:42 2026 by rpki-client