Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
File:                     CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json)
Hash identifier:          uvXahz6q7FLEGDFm/fgQyK5vQAiMMDFbEzPtmoW5IYo=
Subject key identifier:   AC:57:2F:A1:10:F7:0E:49:8A:80:DC:1F:69:3F:E5:C9:D1:08:D8:57
Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD
Certificate issuer:       /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
Manifest number:          0179
Signing time:             Fri 25 Sep 2026 04:44:19 +0000
Manifest this update:     Fri 25 Sep 2026 04:44:18 +0000
Manifest next update:     Fri 02 Oct 2026 04:44:18 +0000
Files and hashes:         1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: PJTDqmUzhC0h1jTt4B9l2cDYso6q42nb2MLAF+EGAHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl
                          rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD
        Validity
            Not Before: Sep 25 04:44:18 2026 GMT
            Not After : Oct  2 04:44:18 2026 GMT
        Subject: CN=6ab5fc23-3f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:02:da:8b:80:e5:8e:d4:88:c6:0f:9b:64:
                    64:d1:07:cd:42:eb:dd:7f:9a:fe:55:5b:b8:65:e0:
                    4a:3c:cd:a1:c1:86:ed:54:c2:38:09:81:35:7b:97:
                    71:25:95:10:8e:9f:63:00:5e:23:28:d6:e8:30:32:
                    7c:0e:1b:1a:a6:ca:a1:fa:3c:c9:e2:f2:01:ad:96:
                    71:7a:a2:0e:22:5f:3d:58:f4:a1:60:20:cc:56:a2:
                    12:a0:59:e9:7f:ec:c7:60:c2:97:f6:b8:af:42:0a:
                    1c:6e:27:53:ee:6b:a5:39:6d:e4:2a:08:d7:10:4c:
                    1a:1c:9a:61:9a:88:fc:9d:56:0b:0a:0e:20:c8:1a:
                    c3:3c:ce:cc:1a:93:a5:b0:ea:71:49:56:f6:3d:55:
                    81:e6:e5:98:1a:bb:c5:f1:36:b4:7c:16:13:b7:22:
                    b6:60:0f:cf:c6:c8:e4:10:7f:fd:82:1c:33:c0:ec:
                    2b:6d:38:fb:4f:fb:56:5d:8f:62:48:a8:43:f1:73:
                    90:db:27:10:44:d0:1d:72:27:40:64:80:91:99:66:
                    03:77:e0:bd:34:ab:42:14:e9:44:60:90:fd:f3:ea:
                    08:7e:3a:fb:e8:f9:bb:4a:40:4e:b5:f6:39:21:ce:
                    ca:c4:87:41:50:98:d2:c9:91:b9:e0:21:21:69:96:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:2F:A1:10:F7:0E:49:8A:80:DC:1F:69:3F:E5:C9:D1:08:D8:57
            X509v3 Authority Key Identifier:
                keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:28:50:4d:c1:59:4f:71:84:0f:b8:fe:bb:65:b1:cd:5b:
         a7:80:75:b5:a5:42:e5:b2:17:5c:66:37:20:5a:fc:7b:e1:60:
         a5:91:de:9e:f7:95:5e:0c:61:37:5c:6b:6a:97:29:ec:a9:66:
         13:56:db:c3:36:76:12:cd:8d:40:77:87:21:11:33:15:90:0b:
         c7:5b:f9:30:4c:54:04:b7:61:51:db:1d:c8:3a:ac:d9:64:69:
         3a:6b:64:3e:a2:8d:eb:94:b1:c5:a1:8d:67:a3:5b:8f:6e:34:
         70:c8:fe:9d:16:77:ff:95:cb:16:71:8c:58:71:24:28:92:2f:
         2d:49:14:89:f7:45:f8:c7:3e:f5:cf:29:95:4a:b2:ef:0d:c5:
         0a:c9:e4:b3:cd:63:ec:b6:a4:e3:49:f1:f7:3b:05:50:19:c8:
         fa:6a:f7:6e:0a:cf:5d:d0:8a:9e:de:13:90:0a:9b:39:69:d6:
         e5:05:53:a0:2a:91:7a:64:ac:4a:d0:25:84:62:84:d7:78:2f:
         0e:52:16:70:e2:08:75:b2:50:8d:19:0d:92:3b:f7:9f:cc:bb:
         aa:8c:03:93:07:6d:ad:94:cd:fa:0c:8a:dd:3e:8b:c2:e5:ec:
         c7:85:13:21:38:91:8c:12:1f:b6:48:dc:fc:3f:fc:81:d6:b0:
         53:55:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:29 2026 by rpki-client