Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
File:                     g38GODxsxdOK-dN_AsDIiguFaUY.mft (raw, json)
Hash identifier:          zLKMo8o2mwXiZ4zjpB3cocAJ0d0CuI7yX9BcFJYLb6Q=
Subject key identifier:   C9:75:EE:60:E9:A0:59:8B:D2:08:51:AC:36:44:95:C9:84:A7:F1:9A
Authority key identifier: 83:7F:06:38:3C:6C:C5:D3:8A:F9:D3:7F:02:C0:C8:8A:0B:85:69:46
Certificate issuer:       /CN=A9131821/serialNumber=837F06383C6CC5D38AF9D37F02C0C88A0B856946
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
Manifest number:          25
Signing time:             Mon 21 Sep 2026 08:47:25 +0000
Manifest this update:     Mon 21 Sep 2026 08:47:24 +0000
Manifest next update:     Mon 28 Sep 2026 08:47:24 +0000
Files and hashes:         1: g38GODxsxdOK-dN_AsDIiguFaUY.crl (hash: sGV+7002jcF11HQf3OJzjyjdZ4sF/gRRwwvjxp/DuYs=)
                          2: B786F6BE80A211F1BEE50EFD8CA30FBC.roa (hash: VjMW2cban0Alef8+4ZH9ZJyPTWQbnSuuC5ci8mGfk0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.crl
                          rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131821, serialNumber=837F06383C6CC5D38AF9D37F02C0C88A0B856946
        Validity
            Not Before: Sep 21 08:47:24 2026 GMT
            Not After : Sep 28 08:47:24 2026 GMT
        Subject: CN=6ab0ef1d-085c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:3e:b2:e0:e4:ca:19:b5:ce:8a:e7:46:1b:
                    e7:53:86:e3:0b:12:a1:36:f4:98:40:22:13:4f:18:
                    b8:b8:e8:b0:48:4d:d1:f3:a3:7c:dd:57:4c:6c:04:
                    13:5a:44:d8:c1:3b:be:c5:9d:f3:e6:ee:e2:cb:f7:
                    ec:3d:ed:c1:9e:36:d6:c6:c9:11:91:6a:ce:2d:22:
                    96:04:95:53:78:a6:c4:57:57:fa:f2:9e:7b:f7:53:
                    c6:cc:21:90:12:2e:60:1c:da:69:47:61:e3:12:f6:
                    94:65:ac:03:63:2d:3b:09:43:39:36:be:ac:6f:c2:
                    6e:f7:91:4b:a2:56:76:f7:44:96:a2:31:cb:2a:6a:
                    44:6b:0e:bb:55:5f:2b:52:cf:80:18:07:37:c0:95:
                    20:ee:83:66:85:24:02:0a:d5:4d:1e:96:83:85:7c:
                    05:a9:3f:0d:e9:6b:37:76:cf:36:55:a6:43:6a:37:
                    7f:ec:80:75:a1:d6:84:95:54:fc:e0:45:92:b7:53:
                    b2:8b:fa:2e:69:c9:92:fc:58:11:04:f0:58:c5:ff:
                    05:f4:8f:40:57:57:b7:3a:04:9f:f2:2a:e5:e6:c8:
                    bc:a3:ee:58:92:1f:55:04:0f:d6:ee:d6:9d:07:c9:
                    7b:ea:05:8b:a8:b9:4b:6b:43:5b:ed:59:ff:3c:ed:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:75:EE:60:E9:A0:59:8B:D2:08:51:AC:36:44:95:C9:84:A7:F1:9A
            X509v3 Authority Key Identifier:
                keyid:83:7F:06:38:3C:6C:C5:D3:8A:F9:D3:7F:02:C0:C8:8A:0B:85:69:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:65:78:69:f0:5a:64:68:55:2e:ff:e0:c4:f0:56:55:f4:
         63:19:4c:d6:a2:0e:00:31:db:92:72:e5:6e:60:c7:4c:22:85:
         e4:c6:7d:5f:2c:d2:04:b9:4c:ff:1b:a9:29:81:73:99:cc:2e:
         1e:a6:36:41:d2:3c:ca:67:be:55:96:aa:34:a0:92:17:ee:ae:
         1a:39:9b:6c:8c:ae:9e:54:d2:46:fe:67:c4:1a:68:16:61:ca:
         65:9c:48:83:31:08:85:3c:48:48:35:6a:41:e1:2a:4f:56:b4:
         14:26:05:0f:b1:7f:e8:14:97:17:6b:c0:0a:f5:fe:aa:c1:0d:
         b1:78:ad:d7:24:bf:dd:a1:e8:c7:b9:30:9e:e3:a9:0a:35:d8:
         cd:e4:59:37:53:d4:83:dc:40:df:bc:c3:9a:28:4b:a3:7a:ad:
         64:9e:0c:05:5c:c1:2d:ca:73:4e:06:3c:4a:39:91:f6:b7:be:
         9f:51:bb:67:48:71:0b:68:2d:74:1c:96:f1:41:b2:a8:96:68:
         55:6a:9c:0f:b1:04:54:02:f4:3e:45:67:70:a0:c5:4b:0e:d0:
         99:e5:cf:93:82:09:5b:1c:34:4a:48:23:fb:57:32:49:94:0c:
         6c:83:97:8f:90:da:3d:13:a0:28:d1:44:34:28:cb:1f:f3:a4:
         b7:68:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:15:23 2026 by rpki-client