Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
File:                     ggn985rwLDua5QPyJddH5nqjzfM.mft (raw, json)
Hash identifier:          zDLQ6q2hvZqYfwcE1mDIas7cKcHxmZQtTANdSzbZR6w=
Subject key identifier:   96:51:65:19:B3:4F:53:7A:0E:E3:FD:26:F1:91:48:FF:62:56:78:73
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
Manifest number:          022F
Signing time:             Fri 25 Sep 2026 02:47:25 +0000
Manifest this update:     Fri 25 Sep 2026 02:47:24 +0000
Manifest next update:     Fri 02 Oct 2026 02:47:24 +0000
Files and hashes:         1: ggn985rwLDua5QPyJddH5nqjzfM.crl (hash: L72TrrXB0GDO8CT6xMeOZHtLcYKDJWx9EGQx2Nc0Ocw=)
                          2: 4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (hash: dYjOKoFq07vgQeItv9OVgz3KsqWlrs+XcRm7MKKAaMM=)
                          3: 007AE4426C9311EEBEA0EB63C4F9AE02.roa (hash: /wkatpVrkS2oqc5vbQzFdNG4qk7SuNWJ/ByIrBY+v+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Sep 25 02:47:24 2026 GMT
            Not After : Oct  2 02:47:24 2026 GMT
        Subject: CN=6ab5e0bd-6232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:6c:92:01:a0:32:7a:18:fc:e1:3d:d8:ac:
                    40:9b:a9:76:d5:be:b8:ec:cc:9c:78:82:37:e2:fa:
                    9e:31:c2:9b:b8:72:80:46:b1:bc:8c:51:49:56:6e:
                    d3:8e:43:5c:c6:5a:b5:83:82:26:ed:28:ef:6e:18:
                    54:72:c8:86:1d:44:d6:ff:76:b8:ec:a8:f9:5e:26:
                    26:58:d6:01:10:21:8b:32:d0:84:d7:d1:28:41:aa:
                    6d:a1:2a:88:da:2b:08:f3:1c:08:6e:d5:72:14:fa:
                    0d:32:d8:b1:5b:d3:c3:80:10:56:bc:0b:c5:40:7f:
                    f7:61:3d:a1:8c:87:19:cf:46:16:5b:e3:51:b9:bf:
                    97:3e:8c:7b:31:69:84:d9:62:2c:bc:a9:5b:11:a0:
                    9d:10:29:08:3b:24:02:b4:2b:8c:f8:05:74:3c:85:
                    ae:64:2d:9d:ce:7a:5b:be:45:b4:77:ff:98:db:8b:
                    be:47:37:85:90:7c:69:be:e8:94:14:4a:db:6c:db:
                    49:a9:15:68:6a:4e:62:1d:b5:ce:6b:5b:9a:c2:50:
                    25:2c:a1:89:5a:06:0f:65:d3:3d:89:73:3f:09:5c:
                    5b:c9:d4:b1:b0:70:ac:88:44:ca:b4:fc:78:f1:31:
                    cf:e7:d1:af:4a:29:14:3d:72:bc:31:44:53:3a:43:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:51:65:19:B3:4F:53:7A:0E:E3:FD:26:F1:91:48:FF:62:56:78:73
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:02:6d:72:3d:28:23:fa:ee:ef:32:38:30:18:fb:00:53:bc:
         ce:07:9a:2c:ca:13:10:77:b5:1d:15:46:59:0f:ce:07:e0:37:
         f2:45:fc:bd:ea:b4:0f:a5:4a:75:9b:6d:f2:a4:3a:20:35:12:
         6d:05:60:dd:3d:bd:0f:c3:a6:df:fa:6a:07:90:b2:db:79:21:
         be:df:fa:77:9f:66:4c:a3:a1:d9:a2:9a:ec:7d:7a:46:f2:3a:
         ae:a6:d7:3b:b3:e7:1b:0e:3e:74:81:21:a0:3b:a8:bd:f9:a2:
         d9:eb:39:2a:c6:b0:0c:a8:bd:4b:db:e8:b6:46:c6:be:80:40:
         08:16:b3:98:a1:76:7e:55:4c:5c:31:2b:8c:f0:cf:28:16:96:
         c5:4a:6f:b9:db:a9:19:5d:cb:c8:f7:44:fd:74:08:1e:d4:5c:
         fd:15:d5:40:05:d4:f8:c7:48:e2:41:1d:68:a4:4f:f8:f4:8e:
         3f:0e:07:5c:16:5f:47:af:60:d9:47:ae:63:34:cd:0a:ac:8e:
         fa:ff:0a:c2:bf:57:40:64:0e:f1:41:13:77:24:12:b7:63:3a:
         91:bc:e7:33:7b:4e:95:b2:98:cd:d7:aa:e5:97:32:9d:d9:5e:
         44:dc:21:c3:23:b6:af:54:64:40:1e:7c:27:2a:47:06:1f:c3:
         47:ff:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:09:51 2026 by rpki-client