Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft
File:                     g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json)
Hash identifier:          I0NTY5ZLU5mBRMz7RPh5r2sZI7b6frzGPmNgMjxzL9k=
Subject key identifier:   FD:7A:5A:71:4C:58:26:90:B1:CE:3A:94:45:7D:EC:19:53:70:5C:70
Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5
Certificate issuer:       /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5
Certificate serial:       0D62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft
Manifest number:          0D4F
Signing time:             Wed 14 Oct 2026 18:20:55 +0000
Manifest this update:     Wed 14 Oct 2026 18:20:54 +0000
Manifest next update:     Wed 21 Oct 2026 18:20:54 +0000
Files and hashes:         1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: o+616mQKecQUABP64FcfEW70vFUcHZJgW/MKyUUKflI=)
                          2: CD3E621E12F511F180FA8278113D8C67.roa (hash: HiYaFULG330NEjSyB7vQtymlRctIKK1KJBuLZlff9pU=)
                          3: 96AE931812F511F1BA310F6D113D8C67.roa (hash: cXOeiMyk2P1h/V1+QkWeGss+P0oU/Wj1wZhDnilOemo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl
                          rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 18:20:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3426 (0xd62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5
        Validity
            Not Before: Oct 14 18:20:54 2026 GMT
            Not After : Oct 21 18:20:54 2026 GMT
        Subject: CN=6acfc807-2f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:b4:76:af:80:8a:79:a3:a0:83:59:01:97:
                    74:84:4d:ad:8a:b0:a7:81:e0:38:cc:9f:06:38:38:
                    f2:b7:3d:65:26:91:48:53:45:91:45:1e:09:7e:7d:
                    2b:ae:6b:33:59:0c:4f:31:83:2a:d2:97:5c:0d:cd:
                    b9:fc:11:28:5e:9e:6c:40:52:c1:92:a0:03:ff:34:
                    2c:77:c1:eb:41:97:fa:41:a6:ed:b7:cc:19:78:97:
                    ae:75:35:47:ea:fd:c0:42:5b:41:77:3b:e8:52:47:
                    f2:42:c6:da:c4:26:9d:13:64:a5:fb:5c:f5:7f:f8:
                    71:96:91:79:14:dc:7f:6d:06:bf:d0:09:b0:25:62:
                    f1:32:5c:0d:a2:dc:dd:08:a9:0b:e5:13:1e:5c:f7:
                    5d:cc:dd:d9:05:39:3d:2f:ae:25:15:b9:c8:cb:ff:
                    10:b5:ec:1b:ca:97:89:1e:eb:2d:46:38:71:3b:9c:
                    f1:07:96:26:54:49:b9:fc:d4:af:f4:c4:46:af:75:
                    16:9d:b4:9b:88:34:9f:64:e0:47:81:2f:a3:b0:a3:
                    6d:7e:08:2b:5b:ae:11:90:67:23:94:47:4e:9c:77:
                    0f:24:05:86:d8:ff:cc:2a:a5:39:89:4a:49:30:81:
                    f7:68:5a:55:a6:9b:68:c8:c3:21:6f:d0:7f:79:b2:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7A:5A:71:4C:58:26:90:B1:CE:3A:94:45:7D:EC:19:53:70:5C:70
            X509v3 Authority Key Identifier:
                keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f9:16:1e:d5:8f:eb:0b:36:db:45:45:20:3a:50:15:f0:6b:
         d4:2d:71:7c:fe:06:86:d1:d5:8d:e6:81:42:71:c0:8c:58:5c:
         e7:7a:08:0c:00:20:bf:57:78:a3:ea:4c:b6:4d:cb:ab:71:5f:
         d1:41:91:13:b7:ca:a6:bd:82:3d:02:af:f2:7c:f2:e6:8f:12:
         03:ab:7e:f3:1d:9a:ba:32:d9:cd:41:51:a5:4c:e8:c1:6f:1d:
         74:af:7e:c6:af:bf:1a:8d:9e:f0:f9:14:50:9b:e2:bb:33:c9:
         c9:2e:0a:59:f4:22:95:a7:79:73:0f:f1:78:82:a6:13:c6:b3:
         2c:f8:13:8b:36:59:fe:3e:97:2f:2f:70:df:8d:33:ed:2f:cc:
         06:cc:20:ba:ec:3f:45:f0:9d:c6:b3:70:ee:17:14:9d:da:07:
         b5:6e:cd:3b:62:5e:56:e5:42:cf:01:05:85:6e:6e:95:3a:ad:
         59:33:c6:15:dd:fe:22:3d:ed:2b:8d:5c:54:78:7b:e0:8d:62:
         3c:b0:2d:92:68:ef:e8:c6:66:72:bb:1d:4e:e7:89:5d:85:74:
         55:54:6b:7a:38:c9:23:cf:5c:c2:5f:3d:f0:11:c9:cb:c3:6f:
         d3:24:87:34:44:18:f8:e8:6f:89:9d:88:2b:b6:7c:cd:b3:34:
         17:0c:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:34:51 2026 by rpki-client