Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File:                     _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier:          TjMbGvVXyRRPFOuSmDziBpiac2qgCDcXxZh3y1zokDk=
Subject key identifier:   77:09:20:7D:7B:84:8B:68:10:98:62:F8:6C:A9:71:8C:06:4A:67:5A
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number:          02F2
Signing time:             Sun 27 Sep 2026 01:15:06 +0000
Manifest this update:     Sun 27 Sep 2026 01:15:05 +0000
Manifest next update:     Sun 04 Oct 2026 01:15:05 +0000
Files and hashes:         1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: 8Wuw17U0lQy4E3fdEdBO/isCJAhmf5IBAtWbwy3zlGs=)
                          2: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
                          3: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Sep 27 01:15:05 2026 GMT
            Not After : Oct  4 01:15:05 2026 GMT
        Subject: CN=6ab86e1a-86c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:d9:c0:e9:08:2c:c9:ec:11:3f:a3:88:8f:
                    c9:46:60:5d:5a:98:3a:dc:4c:b9:ab:5e:06:c2:76:
                    8a:8d:c4:0e:bb:1f:44:99:77:a8:42:36:b9:d3:37:
                    7b:dc:43:d5:45:85:ad:79:7c:07:e9:de:99:d9:aa:
                    e0:17:84:e1:d4:82:02:23:dd:c5:8c:a7:d1:ef:0d:
                    05:9a:c8:37:34:32:aa:b3:46:63:42:83:39:e0:1b:
                    48:11:83:5e:d1:df:53:26:71:e2:2d:13:5b:72:f2:
                    74:ff:57:af:de:88:06:61:51:29:ac:6e:b9:4d:af:
                    0f:32:30:d6:fc:b4:45:55:c9:7a:22:5b:d0:e5:2d:
                    9c:81:60:92:00:1e:5b:03:d2:1c:fa:b0:9d:25:6d:
                    1c:0d:7f:a1:b0:03:5b:6c:f1:77:98:fb:f2:7e:27:
                    4a:89:29:d3:61:ce:1d:ae:cb:e3:02:3b:17:a6:8c:
                    a9:ac:a6:9c:fd:62:ae:ca:9b:fb:91:4f:fd:a2:74:
                    9b:12:9d:7d:74:15:bb:2f:44:98:70:69:27:b0:ef:
                    78:f2:42:0b:2e:e4:53:56:79:5a:94:7e:d0:0b:81:
                    7a:43:57:30:fc:f0:3c:20:65:7d:4c:d5:5b:47:b7:
                    7b:52:e3:a1:ac:68:f7:93:ec:cc:ce:08:59:be:76:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:20:7D:7B:84:8B:68:10:98:62:F8:6C:A9:71:8C:06:4A:67:5A
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:92:c6:08:1c:18:7d:e1:88:8f:92:b1:01:d0:50:c1:fa:
         81:2b:ed:3b:82:e5:56:59:11:74:c2:70:58:b6:a8:84:62:11:
         cb:8f:e0:a2:5d:14:70:31:0f:83:b7:98:0a:7d:ff:58:8b:0c:
         cb:2d:e0:3d:2a:59:7b:32:bb:81:49:a1:01:3d:64:f6:6c:f6:
         d7:23:a6:d8:36:cf:a4:83:15:83:9c:ba:d6:e5:e5:2d:cd:35:
         ee:e4:20:c1:4c:38:e0:61:75:2c:e5:3f:93:f0:dc:d8:36:c2:
         bd:66:9f:f0:00:30:f1:a0:84:9b:2c:2b:6e:ff:d1:20:13:18:
         3b:01:9b:10:7b:32:a1:ab:7d:b0:b2:f6:68:1f:de:47:c8:32:
         10:3e:02:ce:ff:78:b4:fb:a5:dc:a1:e5:d4:99:06:45:3c:c5:
         8c:83:e7:41:30:7c:93:76:42:e0:87:3a:34:2a:b8:24:27:ec:
         31:a3:fe:9e:81:25:9b:01:f7:9a:2c:f7:e2:cf:2c:4e:ff:9d:
         25:db:6b:56:26:6d:54:9d:ae:bf:ba:82:6b:e6:3b:fc:45:c5:
         ef:97:04:87:f0:23:e7:10:db:af:56:be:9f:30:4d:2e:7a:8c:
         e8:ef:cb:17:1c:ae:98:ea:e0:0e:b3:bc:28:bc:f0:3d:58:ba:
         d6:30:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:45 2026 by rpki-client