Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
File:                     G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json)
Hash identifier:          pYUEupc5XG02wsG2X8P9Pe38qO++vinxUYfOudEcxGw=
Subject key identifier:   75:2B:A0:63:67:12:85:9E:13:4C:F3:29:09:E6:9C:92:64:73:A2:EB
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Certificate issuer:       /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial:       0A3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
Manifest number:          0A33
Signing time:             Tue 22 Sep 2026 19:32:37 +0000
Manifest this update:     Tue 22 Sep 2026 19:32:37 +0000
Manifest next update:     Tue 29 Sep 2026 19:32:37 +0000
Files and hashes:         1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: /SjcQCctjBfwhNduxUaq02NCIDXhlS3FFDJt9Q9/ufk=)
                          2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: dtXmtJBVm8P8OuQoT+Q52qD+Vudy7GZ/K52aKBTJI5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622 (0xa3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
        Validity
            Not Before: Sep 22 19:32:37 2026 GMT
            Not After : Sep 29 19:32:37 2026 GMT
        Subject: CN=6ab2d7d5-d6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:39:61:0e:d4:2d:3e:22:1d:58:76:7c:63:
                    f4:de:d9:f9:19:0a:d6:e2:83:aa:bf:08:e6:1e:78:
                    76:db:a2:0a:0e:a6:0b:90:8e:fe:a2:21:b6:18:4e:
                    db:95:b9:32:43:62:fe:15:29:f0:cc:58:e4:0d:99:
                    a9:f4:8a:d1:99:77:97:20:9b:32:3b:f6:90:9b:c5:
                    18:37:9f:69:23:85:d0:67:b3:94:92:53:fe:57:ca:
                    b1:18:46:03:ed:49:2a:3b:77:82:a7:20:71:a6:3b:
                    23:97:1c:82:e6:a0:6a:75:c8:40:a3:46:06:93:80:
                    45:24:0b:9b:9c:d1:60:24:05:85:c8:c7:48:3f:74:
                    e6:fd:5c:3f:12:e2:39:81:b7:d4:83:71:c2:28:a2:
                    21:e4:9f:3f:ee:7b:ee:23:e3:65:9f:57:73:2e:b4:
                    0a:e9:dd:42:bf:e8:c7:3f:04:4a:02:b6:60:c4:be:
                    f0:30:96:80:ca:cc:56:22:f9:19:58:37:5a:84:fe:
                    82:2e:ca:c9:39:aa:6b:08:6f:f1:10:04:75:fa:a4:
                    73:72:5d:b3:f2:fe:09:07:5a:53:19:2d:ea:32:4c:
                    d2:43:4b:9f:70:ec:da:e8:4b:a6:0c:05:b7:0a:f9:
                    e9:2f:57:3b:c1:34:c7:d0:e0:32:8c:c4:c7:f5:f6:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2B:A0:63:67:12:85:9E:13:4C:F3:29:09:E6:9C:92:64:73:A2:EB
            X509v3 Authority Key Identifier:
                keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ac:11:6f:2e:1a:a5:6b:1a:ab:b7:2a:89:85:f4:85:60:b2:
         b2:fe:13:a7:8f:99:2a:ea:4c:8b:b4:8c:a0:cd:5a:45:54:55:
         df:a4:a9:24:a5:6d:de:45:19:b8:93:62:cc:11:96:ed:f7:ce:
         7d:f7:71:fb:a5:94:d3:8a:39:07:68:9a:cb:3f:5c:53:05:15:
         9e:8a:3e:11:27:eb:93:3a:2c:e9:25:1a:66:35:35:49:b5:26:
         21:cc:1b:47:56:82:8f:41:f1:61:77:9b:f8:e4:6b:9a:53:25:
         2c:d1:07:08:77:32:4c:01:55:ab:6d:1d:28:9b:c8:08:92:fa:
         8a:67:44:d3:44:33:e1:6e:4f:50:3e:8f:51:1e:04:13:28:de:
         c7:e0:dd:cb:86:27:64:9b:ff:c3:bb:cc:28:6f:4e:4f:9d:27:
         83:32:9a:1f:d8:a6:8a:dd:51:2b:e2:2d:70:e6:06:7e:fb:4b:
         10:a9:c2:11:c9:8a:8b:e9:21:b0:8a:55:58:79:84:98:d3:38:
         07:ed:db:2d:25:36:b6:40:1b:98:1b:49:2b:58:b2:cf:87:be:
         28:da:89:09:da:76:7f:69:f0:80:cd:5c:d9:9b:4e:f9:33:0e:
         f5:fe:2c:41:8f:fd:51:a1:ca:e3:c6:81:5b:b9:fa:6a:d2:dc:
         58:f2:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:36:23 2026 by rpki-client