Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
File:                     gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json)
Hash identifier:          bx+ARthMBzMrbYQu96FTPtS5NZcxB0y8kcbcoX7d+1o=
Subject key identifier:   14:FF:AD:50:6A:BD:0C:96:57:9F:E7:A6:F7:48:6B:91:9E:95:63:0F
Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21
Certificate issuer:       /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21
Certificate serial:       0649
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
Manifest number:          063B
Signing time:             Tue 22 Sep 2026 22:24:23 +0000
Manifest this update:     Tue 22 Sep 2026 22:24:22 +0000
Manifest next update:     Tue 29 Sep 2026 22:24:22 +0000
Files and hashes:         1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: xIlDZeB+ZN0UtD7vaphnTemCF0Y+v92tJPSatJiQmmQ=)
                          2: 513D702E112511F081CC4E49C4F9AE02.roa (hash: NH/K1DDvn5aeutjluyX6sIyhLYFZZaLzJygBEDC22+Y=)
                          3: 972D6576112511F08AC1A549C4F9AE02.roa (hash: cXS9kwOeIytUZvskHO0vNiq0jU3tFCH1tuVFz+pCcZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl
                          rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21
        Validity
            Not Before: Sep 22 22:24:22 2026 GMT
            Not After : Sep 29 22:24:22 2026 GMT
        Subject: CN=6ab30017-26e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:0d:d5:78:b3:68:4a:38:03:76:d5:3c:10:
                    28:48:36:d8:1a:bf:34:02:f3:59:63:df:dd:32:a3:
                    6c:e4:3c:55:91:18:97:7e:7f:fb:5d:d3:cc:a9:b3:
                    78:40:4e:7a:71:92:03:1a:e0:12:1e:d2:a3:1e:e4:
                    e1:ff:9f:a2:3f:a8:21:04:f9:da:1b:57:d9:53:c1:
                    36:9f:c8:e7:d4:98:ab:a3:17:33:e6:99:21:d5:18:
                    2a:67:6b:90:ed:09:de:6c:45:33:80:f0:69:4f:26:
                    64:94:8b:77:a2:0a:f8:27:66:07:ee:48:91:5d:11:
                    b0:18:16:5a:92:8c:c4:6b:69:00:29:0c:e0:8a:05:
                    68:03:43:7f:46:20:ee:de:97:57:8f:b1:c5:18:e3:
                    20:6f:3b:12:72:59:b8:35:cc:11:c2:94:4d:ba:48:
                    a9:02:6b:32:e7:c6:ff:81:f3:c3:25:36:e3:a4:d4:
                    39:a4:d1:7e:da:7d:25:ba:57:05:1b:99:70:76:53:
                    e7:d3:0d:4e:9b:49:69:ad:25:b4:b6:68:16:c4:cf:
                    80:6f:ef:03:17:d7:c5:4f:db:5b:ae:60:8e:00:95:
                    2f:c6:0e:0c:a1:86:9c:d8:bd:e4:80:89:60:e7:6e:
                    12:38:3a:8f:0c:6c:8f:d9:96:79:a9:77:8a:4a:ce:
                    bc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FF:AD:50:6A:BD:0C:96:57:9F:E7:A6:F7:48:6B:91:9E:95:63:0F
            X509v3 Authority Key Identifier:
                keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:5a:ed:54:09:31:8d:9c:fa:97:bb:1e:7d:6d:3b:87:95:
         b2:de:42:4d:c4:15:76:7a:62:80:ba:05:41:94:6c:36:6f:f4:
         5d:b3:ed:6f:2e:78:54:78:7f:bb:0e:32:11:74:9a:b4:b4:d7:
         e0:69:a2:5f:92:31:08:9f:46:66:dc:11:aa:ad:56:16:19:6e:
         af:5d:9e:67:23:45:5c:63:cc:14:a1:b4:dd:4f:02:26:5f:a4:
         68:fe:2a:31:37:74:8a:19:19:bb:7d:ea:31:87:df:a6:40:aa:
         b2:6a:91:86:63:28:5b:62:69:67:65:ce:cf:3a:b9:80:a4:b7:
         d5:7f:d1:4a:21:84:0b:54:2b:ef:75:4d:58:07:92:89:a1:31:
         1e:e8:ec:59:20:a8:15:45:bc:38:e3:25:4a:a0:d4:ca:46:c5:
         95:46:27:50:ed:60:c3:10:09:65:b7:17:27:e7:84:15:8c:8f:
         45:d6:31:87:d7:ef:a2:4f:7d:97:9f:4f:a7:25:b0:80:1c:a1:
         4e:dc:8a:32:a2:6f:3d:e8:81:02:a8:fe:f5:28:37:99:0a:c4:
         66:a7:e1:60:11:09:24:bd:bd:15:61:74:a8:63:bf:75:8c:83:
         04:0c:f7:81:02:b7:84:73:50:08:bd:2c:5b:46:0b:35:15:c2:
         49:20:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:35:23 2026 by rpki-client