Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
File:                     gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft (raw, json)
Hash identifier:          qlo8QrTtUd/Ho9E1k+FPeyUXjXsZ3Tv1xgiL4yAQEv4=
Subject key identifier:   A6:28:30:CA:5B:A7:15:B1:79:31:C9:7B:51:DC:68:82:F1:D4:66:1C
Authority key identifier: 81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56
Certificate issuer:       /CN=A91EEBAD/serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
Certificate serial:       0717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
Manifest number:          070C
Signing time:             Tue 22 Sep 2026 21:51:27 +0000
Manifest this update:     Tue 22 Sep 2026 21:51:26 +0000
Manifest next update:     Tue 29 Sep 2026 21:51:26 +0000
Files and hashes:         1: gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl (hash: JK9wY7rhkaGrdNZ4ZDf9lqMye5miSgsjBstb3G7JjGM=)
                          2: 9FCD0EE6A34411EB94DFE619C4F9AE02.roa (hash: Xr3+TbIOof9u/LmbNudhZ3Fw1f9PhHkFv4UjhuCI3JM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEBAD, serialNumber=81FFF215005DA1AFAC5E24ABBCC03CA70F664B56
        Validity
            Not Before: Sep 22 21:51:26 2026 GMT
            Not After : Sep 29 21:51:26 2026 GMT
        Subject: CN=6ab2f85f-b563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c1:90:65:9a:53:1d:6a:02:b3:df:51:b2:ee:
                    f4:b1:70:7e:d3:fc:0f:29:72:8a:d1:e2:87:52:63:
                    84:c9:a8:df:02:11:6d:56:7a:43:4c:40:ad:d0:95:
                    5b:e2:26:17:75:84:3f:b3:64:36:de:d9:22:0d:12:
                    e5:9c:ce:b7:c5:14:b5:a5:57:12:16:cb:20:ff:16:
                    19:59:af:8c:46:f6:73:e1:44:04:03:67:7e:4d:9a:
                    06:29:a8:63:8a:8a:d8:28:df:55:16:92:34:6f:5b:
                    02:1a:19:50:68:cf:55:a6:fe:7e:bd:9a:52:3d:1d:
                    b3:fa:6b:84:59:1d:92:92:c2:4b:0b:66:b7:97:a4:
                    60:82:c5:5a:78:84:ed:92:24:a7:3c:ba:71:91:31:
                    01:37:8d:de:ac:d6:4b:96:72:fe:fb:1c:da:02:fd:
                    f7:6f:cc:44:94:62:7a:b1:a3:af:df:b3:6f:08:da:
                    06:c6:fb:f9:65:a1:aa:9e:dc:a5:bd:36:a9:8a:1d:
                    8a:0c:2f:d7:2b:25:e4:35:c8:a1:42:df:3e:b3:f8:
                    a5:58:8f:8e:1c:97:15:c5:bd:3f:8e:11:e9:90:87:
                    b1:03:6e:2c:40:15:d3:d7:1f:ab:02:8e:2d:b1:a3:
                    b0:e1:87:5f:d7:3a:59:00:76:69:76:f5:5b:b2:2e:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:28:30:CA:5B:A7:15:B1:79:31:C9:7B:51:DC:68:82:F1:D4:66:1C
            X509v3 Authority Key Identifier:
                keyid:81:FF:F2:15:00:5D:A1:AF:AC:5E:24:AB:BC:C0:3C:A7:0F:66:4B:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEBAD/50D91E66A34311EB997B3319C4F9AE02/gf_yFQBdoa-sXiSrvMA8pw9mS1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8b:d7:93:0c:58:bb:86:58:60:75:ab:b1:31:11:bb:3b:44:
         a6:e7:b0:60:89:59:81:49:76:40:94:0a:66:14:47:ba:7c:c6:
         1d:78:05:cb:4c:e9:a7:b5:0e:f2:fe:30:00:df:fa:3f:f2:58:
         8e:e2:21:0f:2c:a8:dc:e1:7b:33:6f:24:d8:e4:f8:bf:bb:c3:
         e8:b5:97:6e:f7:06:da:c3:3c:77:ab:dc:ae:34:df:fa:66:42:
         49:43:c4:b1:f1:0b:2b:57:fe:62:e7:53:37:65:36:36:dc:7c:
         54:3d:e6:e7:a3:2d:3d:2e:b9:ba:fd:52:cb:54:e6:f1:71:8c:
         d9:c9:52:5b:a4:fe:b3:78:08:09:9f:8f:d0:29:c7:76:19:57:
         52:f2:52:4c:54:ec:12:00:0c:14:cb:e0:33:71:cf:2d:09:34:
         cf:6f:08:9d:51:ff:99:dc:ce:50:7f:ba:d6:cc:d6:d3:a5:84:
         fe:a8:0f:7c:a1:51:9c:85:34:a5:88:b1:df:e8:af:8b:7c:6c:
         06:ca:27:a4:71:45:2b:2b:b3:98:5a:b8:02:98:45:6d:8e:05:
         ac:63:95:2c:79:b9:20:c9:77:99:5d:45:72:02:81:e1:b7:6a:
         09:e3:c9:f8:db:d8:16:b1:f1:c1:fa:2a:79:ea:83:af:cb:2d:
         64:3c:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:04:02 2026 by rpki-client