Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File:                     5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier:          pTgbZygKkjnMNd9FwKo1kqDCJIIsYfzlKVpUpiEmD1U=
Subject key identifier:   2B:65:BC:E1:20:D5:91:DB:5F:22:C1:4E:54:90:97:39:A1:D6:CA:71
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer:       /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial:       14B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number:          1487
Signing time:             Sat 26 Sep 2026 16:55:53 +0000
Manifest this update:     Sat 26 Sep 2026 16:55:52 +0000
Manifest next update:     Sat 03 Oct 2026 16:55:52 +0000
Files and hashes:         1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: sUfZZ1QPLRK/zhPlw+/BewtE76aIg1QJOwRTCgSQAos=)
                          2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: r9JGVgj9zikJ7F79B2BaZrfg6rmzbuab3Jau6eNt9Fs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5299 (0x14b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
        Validity
            Not Before: Sep 26 16:55:52 2026 GMT
            Not After : Oct  3 16:55:52 2026 GMT
        Subject: CN=6ab7f919-cd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:eb:02:2c:71:79:76:a6:9b:6c:de:af:b3:
                    56:2a:83:7e:65:30:66:3e:81:51:79:bb:72:ac:7d:
                    e2:e9:6d:dc:12:ce:d6:14:5d:ef:2d:4f:31:7d:e9:
                    8c:04:bd:e1:fd:d7:b2:ce:e8:c9:4a:ad:49:77:2e:
                    f2:27:bd:9c:11:43:06:12:a8:16:a7:fb:b5:a9:46:
                    2e:f9:c4:6b:b9:4a:d4:5d:f4:5b:59:8c:0a:dd:ed:
                    5a:bf:a2:47:74:08:13:1f:56:7c:ca:2d:c6:46:33:
                    0a:af:83:e5:4d:99:84:57:02:f8:f7:f0:4b:df:c5:
                    b8:e0:19:95:7c:64:23:36:0a:12:90:9b:cb:8a:98:
                    05:81:1c:4b:cd:a0:55:ec:6b:c3:5f:bf:73:9c:22:
                    17:02:96:fa:50:0c:ed:fe:07:e9:2a:2f:58:e9:37:
                    c1:c6:05:30:d5:21:f0:4f:9b:78:f1:2e:6f:f8:da:
                    d3:71:d0:83:9f:ec:9e:a2:8a:e4:37:56:29:45:31:
                    63:da:01:6f:2b:ae:61:85:a6:0c:88:0a:b6:7b:a7:
                    d3:b2:60:ac:c3:8c:c0:99:2b:2e:2c:28:3e:8b:69:
                    c2:eb:51:85:52:fd:6e:59:4f:1e:48:aa:86:ab:b7:
                    a4:ae:fc:82:6f:5b:04:21:f2:da:0c:9c:0d:8a:1d:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:65:BC:E1:20:D5:91:DB:5F:22:C1:4E:54:90:97:39:A1:D6:CA:71
            X509v3 Authority Key Identifier:
                keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:de:50:f8:3b:a7:f2:8d:73:18:8e:7e:a2:10:8b:ec:97:b0:
         d7:7e:6c:ce:7d:a2:11:b8:53:1b:a3:4e:5c:5c:4c:2d:fd:81:
         83:0f:72:df:2f:a9:5f:d0:7f:56:b3:00:46:12:57:2c:d3:95:
         3e:1d:7c:43:45:7d:c9:73:67:3d:30:0f:34:89:5e:a9:2a:f6:
         ec:eb:31:95:2e:b5:41:39:74:5c:e3:a7:14:08:15:df:54:d5:
         6c:f1:b9:48:ec:77:ab:bb:7a:13:56:89:fe:5e:d2:73:60:a0:
         01:a0:fe:e5:1b:a7:15:a4:4b:d4:3c:b2:ae:f3:d7:eb:af:b6:
         01:e8:23:59:74:a4:02:0a:e9:09:28:9c:03:3d:ef:df:3a:01:
         d5:ce:7b:d5:b5:0d:5f:6c:aa:fc:42:16:46:0f:91:69:90:67:
         ea:7a:fe:dc:cd:61:d0:b1:3d:37:ed:b6:d5:97:40:d4:20:c9:
         50:fb:22:b8:a8:77:54:a2:c7:85:04:16:64:7f:d0:fb:02:a4:
         af:19:3f:b1:af:0a:b4:e0:f1:46:2b:b3:01:2c:fd:0b:be:29:
         54:df:46:e7:bf:5f:b1:7f:11:ab:39:a3:ab:33:99:ce:ed:78:
         d3:33:c4:ca:42:e4:5e:69:1a:00:f9:30:39:88:43:2a:e7:05:
         30:ea:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:40:58 2026 by rpki-client