Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
File:                     G43u2x08SMwcTCF7lpx5hUGkzHc.mft (raw, json)
Hash identifier:          pF6STK2uHQ3ySczUmFiEECB8iJACcOQRJ+5IVTU7V3w=
Subject key identifier:   48:01:C2:EE:CF:52:50:C5:EE:7B:CE:68:67:1E:F5:49:59:52:3A:BF
Authority key identifier: 1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77
Certificate issuer:       /CN=A9124803/serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
Manifest number:          0744
Signing time:             Tue 22 Sep 2026 21:36:39 +0000
Manifest this update:     Tue 22 Sep 2026 21:36:39 +0000
Manifest next update:     Tue 29 Sep 2026 21:36:39 +0000
Files and hashes:         1: G43u2x08SMwcTCF7lpx5hUGkzHc.crl (hash: o7a68v5cBhz2Kty8ks5qx3qzEQdncozsmaFPciiaoB8=)
                          2: 62CCFF308C7211EB98A6DD43C4F9AE02.roa (hash: l6AU9MxLeYtTJT1Gg9hXsmqoACZsqQ18yneyI+RgJt8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl
                          rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124803, serialNumber=1B8DEEDB1D3C48CC1C4C217B969C798541A4CC77
        Validity
            Not Before: Sep 22 21:36:39 2026 GMT
            Not After : Sep 29 21:36:39 2026 GMT
        Subject: CN=6ab2f4e7-fe28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:7c:d1:80:df:77:c0:d2:d7:29:fd:71:0e:
                    66:ca:fd:4d:e6:5b:26:01:21:9e:4f:0a:5e:4f:0e:
                    f3:9e:35:97:88:70:9c:06:5c:92:7a:0c:ce:9e:59:
                    32:dd:b7:a1:47:77:58:a0:93:d3:f1:e6:4f:4a:7b:
                    13:da:22:d1:a4:8c:c4:53:96:39:b7:93:ac:b2:2f:
                    22:75:dc:f0:a1:ee:a7:c9:f8:e1:78:da:ce:02:64:
                    dd:71:12:8a:4c:20:6b:3e:0c:10:b3:22:cb:31:b0:
                    2d:2d:20:13:b6:12:27:0f:c5:89:f2:ab:c4:c8:a2:
                    7d:a1:4e:8c:ee:9d:78:5f:e4:68:53:43:23:8f:bc:
                    3f:1f:95:5f:e8:4d:e2:03:0b:a5:9a:32:7e:fe:53:
                    69:6d:90:16:0c:e6:18:5f:55:c7:ba:36:74:b3:8b:
                    bd:8a:e9:1c:b9:ce:14:3f:ab:6d:7e:d3:60:cd:59:
                    db:39:51:44:ce:dd:ab:f0:41:6b:90:18:df:94:cd:
                    5f:40:c9:1b:e8:20:e4:a8:f0:3a:bf:01:7a:66:6c:
                    b5:9e:09:2e:23:34:68:29:41:70:1b:bb:f4:d9:8b:
                    a9:af:20:cf:9e:45:cc:a2:d5:24:59:3d:09:c2:3a:
                    93:17:7c:13:ea:26:3c:45:59:b8:24:6e:2f:4c:de:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:01:C2:EE:CF:52:50:C5:EE:7B:CE:68:67:1E:F5:49:59:52:3A:BF
            X509v3 Authority Key Identifier:
                keyid:1B:8D:EE:DB:1D:3C:48:CC:1C:4C:21:7B:96:9C:79:85:41:A4:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G43u2x08SMwcTCF7lpx5hUGkzHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124803/977D73608C7011EBAEA11341C4F9AE02/G43u2x08SMwcTCF7lpx5hUGkzHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7e:30:04:ab:3d:3d:d7:b6:9e:2f:d4:f6:d4:6f:85:45:9c:
         03:59:9e:5a:8e:2c:ad:9e:42:eb:82:38:e0:40:c7:93:e9:19:
         e1:e7:65:32:87:c7:bb:f9:92:ec:33:d8:61:6c:63:ba:3e:1f:
         97:bd:fb:d0:47:3a:17:b3:94:a0:aa:55:8f:e0:21:70:e6:20:
         a7:6e:08:3f:9e:b3:6e:9f:8e:86:ae:61:72:ba:1a:b4:e5:86:
         31:80:96:54:58:3c:89:0c:93:10:03:bd:97:74:f2:83:e8:26:
         72:18:99:a9:51:64:e8:67:25:bc:4a:97:85:eb:23:f2:bb:13:
         d4:f9:b5:38:ab:8c:84:f2:81:af:e6:0c:f6:2b:2f:19:73:3b:
         db:f7:a7:23:66:b6:1d:e4:3b:c5:a8:b7:dd:94:64:16:82:d1:
         f8:11:29:58:b5:61:d2:20:d5:d7:cc:a1:fd:55:30:89:72:4e:
         96:cd:2c:a8:a7:e5:40:26:37:1d:29:39:5f:11:85:22:02:7f:
         f3:e2:67:10:a5:f6:a3:8f:db:9c:1b:30:56:f7:65:b6:d3:96:
         d1:c7:fd:38:36:9a:79:df:33:a1:e7:87:9f:ee:db:f2:0a:ec:
         9c:c0:72:cd:33:a6:0d:01:20:4f:f7:f3:f1:a8:58:0d:36:9d:
         5a:5e:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:09:42 2026 by rpki-client