Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
File:                     gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json)
Hash identifier:          rb71hSqpelwDgAKiDRue33sn13mGqPp7LtVXjlw8mc0=
Subject key identifier:   A0:FB:15:FA:5C:5F:15:68:75:9C:8A:FF:48:A0:BE:F9:93:89:0A:13
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Certificate issuer:       /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
Manifest number:          96
Signing time:             Sun 27 Sep 2026 08:00:26 +0000
Manifest this update:     Sun 27 Sep 2026 08:00:26 +0000
Manifest next update:     Sun 04 Oct 2026 08:00:26 +0000
Files and hashes:         1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: 82X1f6FsY33ZTP231S+e16MIMwg5XtsxVddHU2iQhM0=)
                          2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
        Validity
            Not Before: Sep 27 08:00:26 2026 GMT
            Not After : Oct  4 08:00:26 2026 GMT
        Subject: CN=6ab8cd1a-ffd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:08:bb:df:39:d2:14:a3:78:0c:4e:16:1f:96:
                    c6:b8:83:31:a8:3a:87:cf:0d:bb:7b:86:f4:ed:02:
                    2e:1b:68:ec:84:af:d3:27:f1:03:cb:61:a6:13:c3:
                    e9:c0:f0:f2:97:e3:ea:1f:02:d2:bc:c7:81:4c:1a:
                    80:df:51:48:19:18:df:a1:d3:87:35:e8:98:67:2f:
                    16:20:02:a5:07:0b:3b:ab:2a:55:8c:78:c7:de:81:
                    47:d0:c0:4d:a0:f4:bd:a0:d7:3e:bc:54:ff:65:83:
                    5b:74:82:89:0b:47:eb:ce:94:07:f3:ba:d1:df:ab:
                    82:db:29:21:a8:cd:c4:fd:42:31:20:1b:ac:5c:2a:
                    2d:5f:34:ae:7a:0d:86:e6:0e:9c:dd:22:8d:df:b2:
                    90:4f:50:71:e5:54:68:b8:0e:4f:fb:5a:a0:bf:24:
                    f4:68:23:48:0c:2b:03:0c:ba:e2:fd:c8:42:f1:9b:
                    16:5d:7a:57:d1:d2:7a:d4:13:94:27:68:95:3d:27:
                    03:8f:c2:67:ce:cf:aa:14:4d:51:8b:92:34:ce:d4:
                    42:d0:53:4d:d0:67:7b:6c:88:f2:fe:09:3d:a9:d0:
                    dc:be:7f:51:c6:62:e8:0a:4d:be:c0:31:55:fe:4a:
                    b7:80:bb:43:95:70:f5:a0:ba:45:64:69:33:d5:aa:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FB:15:FA:5C:5F:15:68:75:9C:8A:FF:48:A0:BE:F9:93:89:0A:13
            X509v3 Authority Key Identifier:
                keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:35:53:a6:50:ab:47:29:87:1e:fc:7a:1f:ad:a5:1c:e1:
         90:c9:35:21:c6:f7:32:f3:a2:08:2a:fb:03:f9:89:e4:03:d8:
         ed:c3:c9:5b:f2:fb:08:75:81:f4:62:18:b6:e0:4b:ad:2a:5f:
         bb:25:a8:1c:3f:f6:16:2f:70:8b:2f:69:c2:a8:d1:33:3b:52:
         80:28:24:30:4b:a7:4e:a3:ea:71:78:be:f4:41:6e:df:c7:68:
         a5:3a:8b:45:a5:6d:5c:54:3c:ed:2d:1d:ec:d9:c4:da:e0:1a:
         53:64:ea:24:c1:77:68:c1:e6:5a:dc:bd:6f:f0:0c:13:ee:5c:
         85:c9:ae:99:4d:13:86:4f:86:14:9c:47:c2:94:b9:69:17:fd:
         1d:1e:e4:76:de:77:24:aa:ea:99:01:c8:83:83:95:e1:13:f5:
         fa:fe:72:0b:da:0f:f5:ae:a6:cf:32:06:2c:c1:c2:43:d2:07:
         0f:5e:40:4e:f3:d7:cd:05:d1:62:f0:4f:28:e0:8a:8b:ee:ef:
         aa:c9:df:a3:5e:39:9c:89:31:28:b0:a7:cf:a4:4e:8d:ab:e3:
         bc:3a:5c:20:85:46:cc:93:5c:bc:d5:97:67:71:41:cb:af:f3:
         f1:6c:e5:0e:d6:e1:98:90:34:7e:44:8b:26:be:2c:bf:0e:3a:
         e4:a8:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:24:52 2026 by rpki-client