Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File:                     g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier:          QEybIGk/S4BQlokyvpaKUZH3u0C7aJcOp4iqzL7XA28=
Subject key identifier:   94:E3:0F:E5:D5:BB:16:27:EA:5D:49:4E:70:AD:36:3D:76:24:89:58
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer:       /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number:          0535
Signing time:             Fri 02 Oct 2026 23:53:19 +0000
Manifest this update:     Fri 02 Oct 2026 23:53:19 +0000
Manifest next update:     Fri 09 Oct 2026 23:53:19 +0000
Files and hashes:         1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: QSdrXod/ftlyZ6D/X/m5H3UbBW6D8FGuHQCfOtU9gNI=)
                          2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=)
                          3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
        Validity
            Not Before: Oct  2 23:53:19 2026 GMT
            Not After : Oct  9 23:53:19 2026 GMT
        Subject: CN=6ac043ef-815d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:b3:3e:11:b0:be:bd:46:3c:a4:a0:21:1e:
                    60:04:c3:5b:db:a2:8b:4d:7e:4f:39:7a:a9:39:38:
                    2f:28:1b:b0:04:21:5b:5d:86:b9:9b:69:d2:65:cc:
                    9c:b1:bb:4e:05:a4:fb:33:7c:b9:0c:a0:05:4a:20:
                    00:8b:29:ce:02:2c:39:74:d3:c8:9e:ca:14:d2:b7:
                    2e:18:64:2f:fb:7c:64:a1:63:77:84:cd:2e:c1:71:
                    a8:b6:bf:05:17:fa:2c:3f:7e:62:c4:79:be:f7:01:
                    74:43:25:11:c6:29:ca:d4:69:b6:c6:d0:8a:52:f0:
                    8d:45:02:18:99:b8:52:b2:c5:ab:93:7d:75:23:3b:
                    2b:72:66:b0:22:88:85:ee:02:0e:75:fc:de:c0:a5:
                    ea:e0:6c:14:5f:d0:42:d6:95:97:7e:a9:1c:05:6c:
                    fe:74:22:20:82:04:5c:fa:e8:af:66:ac:85:ea:ac:
                    73:1d:cc:8e:e6:91:57:ae:92:bd:99:30:4e:4d:16:
                    70:ba:08:d6:ea:bb:16:7c:f2:bd:46:46:99:cd:9d:
                    ad:4e:a3:d7:da:ef:58:dd:3b:73:f6:00:46:d6:c4:
                    87:e9:55:10:99:8b:80:d4:2f:c3:7f:8e:b5:4d:e3:
                    27:8c:17:2a:b0:9f:23:92:f8:40:62:78:2f:1e:c0:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:0F:E5:D5:BB:16:27:EA:5D:49:4E:70:AD:36:3D:76:24:89:58
            X509v3 Authority Key Identifier:
                keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:00:0e:15:88:b9:40:b3:70:c2:2b:b6:df:fb:e0:d8:27:
         65:54:bd:e0:7a:b2:a9:1b:64:94:9b:f5:a9:eb:47:14:41:87:
         31:84:58:dd:64:72:2c:48:f2:42:52:29:10:27:5b:1c:25:c2:
         05:45:f1:cc:b5:fe:ee:23:9f:c8:f7:5a:b9:fd:d8:d2:b6:14:
         9f:15:4b:f1:a1:83:d1:31:58:5e:7a:ae:38:79:28:2a:39:0a:
         c6:31:1c:d5:b6:12:67:ea:71:2a:af:88:50:fd:df:3b:9e:3f:
         0e:ee:94:20:39:f5:ae:76:e6:da:7c:25:f4:3d:f3:b6:f9:3f:
         b7:2c:8c:18:bb:f2:ea:9a:16:0d:c1:3e:3e:a4:1e:76:4e:22:
         75:4a:e5:74:bc:7d:23:4c:d6:74:03:de:dc:41:11:7c:78:d7:
         a9:94:50:6d:c1:e1:03:8c:40:aa:16:24:ba:86:f0:5a:44:28:
         52:9d:d7:29:2b:07:b4:52:08:f5:b2:ad:0b:24:82:81:69:84:
         bf:cf:46:65:5a:52:2f:9c:eb:09:d9:83:82:f2:2b:f3:7c:10:
         4e:db:59:7f:06:7e:3c:37:b6:a9:78:b3:ed:7f:74:c6:4d:87:
         6c:92:8d:74:a1:20:e8:14:96:4c:dc:1f:a9:bc:39:90:27:38:
         07:94:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:22:05 2026 by rpki-client