Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
File:                     1gwwsan1nJWa1JZ_L21XKst1KZw.mft (raw, json)
Hash identifier:          GccF0tDLqdEnX0QLD/NFhT5/4IDlSvkcllT3PQadnxc=
Subject key identifier:   13:F0:2C:89:C6:03:73:DF:4F:39:09:54:86:77:7A:77:2F:A3:4E:88
Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C
Certificate issuer:       /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
Manifest number:          0143
Signing time:             Wed 23 Sep 2026 05:18:42 +0000
Manifest this update:     Wed 23 Sep 2026 05:18:42 +0000
Manifest next update:     Wed 30 Sep 2026 05:18:42 +0000
Files and hashes:         1: 1gwwsan1nJWa1JZ_L21XKst1KZw.crl (hash: ZHx9AlpdTHNCuTdFWsXKi025c5L+vQaxILswfb0xFw4=)
                          2: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (hash: GqBmWG7cp4InXGzH112fZPiBHKzEQ6yteA8i5t3EwNk=)
                          3: A7C0D96E0CDD11F0A8463D28C4F9AE02.roa (hash: WbcHkuV1KGZpUWsgSLnvoF/j0nloKO7jZjWyz2sKLc4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C
        Validity
            Not Before: Sep 23 05:18:42 2026 GMT
            Not After : Sep 30 05:18:42 2026 GMT
        Subject: CN=6ab36132-8c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:af:4a:28:60:cd:c6:5e:9b:32:d9:05:3b:
                    0c:d8:52:83:a4:0c:5d:c4:48:e0:3e:92:3b:01:6a:
                    cd:30:2c:89:a1:da:c0:3b:fe:dd:2b:a6:b2:98:b8:
                    b5:16:a2:42:76:7e:fe:85:71:c7:74:24:39:66:45:
                    ee:97:5d:44:04:61:1f:6e:2d:b5:ed:4e:25:98:b0:
                    1c:55:34:0f:40:0b:f0:f8:ed:4b:53:2d:b0:27:3f:
                    23:e6:23:57:5e:23:5f:ef:ac:ce:7b:2d:08:9f:43:
                    6c:aa:ca:06:b6:41:d7:ff:1b:89:46:40:f4:c1:a2:
                    32:b7:ed:18:9c:f2:9e:72:f7:a0:45:e2:14:02:c0:
                    49:17:af:c8:67:a6:d8:e2:b7:94:33:61:e9:69:a6:
                    85:e2:ce:c6:65:c8:ac:41:9c:f0:58:10:a9:9a:c4:
                    e6:6b:1e:ea:9b:80:6e:1b:9c:6b:58:63:ee:dd:63:
                    ac:25:a3:0c:82:6c:cb:5c:4b:10:0a:51:73:a1:b4:
                    6a:89:c4:78:b7:f7:dc:d9:4a:8e:6a:a9:1b:f5:cf:
                    05:f9:f6:11:21:90:d2:36:f9:41:54:dd:97:1a:ff:
                    21:fa:da:79:33:7e:88:9e:69:94:14:6c:e4:1b:ad:
                    e5:b6:c9:24:52:dd:b4:fc:68:59:bd:cc:51:7c:dd:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:2C:89:C6:03:73:DF:4F:39:09:54:86:77:7A:77:2F:A3:4E:88
            X509v3 Authority Key Identifier:
                keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:ee:41:d4:31:4f:7b:67:dd:77:ae:b7:a9:74:36:ad:64:
         a3:16:d7:8a:01:e3:fe:c0:0f:fc:1f:c3:12:94:f2:00:39:64:
         ca:b8:18:98:c1:64:1b:2a:01:32:86:93:3c:54:95:3d:4b:78:
         8b:53:22:b4:3f:0b:58:7f:d3:b7:a7:b0:17:0b:77:b1:24:9d:
         67:46:86:6b:51:bc:5f:eb:5a:6f:8e:e3:41:1d:77:3b:84:78:
         52:31:e2:3c:f4:a4:1e:71:cd:dd:05:f4:80:0e:7f:0b:7e:c6:
         97:d0:71:69:cb:ba:1a:69:54:af:fd:ed:06:33:c8:70:63:41:
         32:79:33:00:95:c6:c9:e4:e9:97:9a:4d:0a:7b:be:27:ef:b4:
         63:32:bb:74:3d:43:0f:69:28:8c:b5:75:d3:a1:a4:d2:c3:cb:
         cd:1d:c9:a6:9c:b9:be:7e:15:32:42:a4:db:16:87:ea:5d:a9:
         ad:c2:43:ab:08:d9:ae:bf:17:8e:ff:3f:8c:ac:ca:c4:a9:3d:
         71:74:07:aa:23:18:64:fa:59:98:cf:a3:2a:7d:cf:bc:18:63:
         ee:e1:27:e2:be:ea:09:ea:d7:b7:91:d6:e3:45:39:74:4d:69:
         5f:34:e7:0f:94:bc:5d:43:c4:09:16:89:ab:ad:7a:46:e0:fe:
         d0:9e:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:31:44 2026 by rpki-client