Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
File:                     gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft (raw, json)
Hash identifier:          HZ2Zu0/hj3GiystHzlnvnUtkruGypxNhSrJ4neFZjN8=
Subject key identifier:   28:91:1C:59:67:37:F0:A2:66:18:BE:3D:D3:C2:66:B1:89:25:A7:A0
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Certificate issuer:       /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
Manifest number:          0129
Signing time:             Sat 03 Oct 2026 06:27:14 +0000
Manifest this update:     Sat 03 Oct 2026 06:27:13 +0000
Manifest next update:     Sat 10 Oct 2026 06:27:13 +0000
Files and hashes:         1: gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl (hash: Nliw6IxwZP3m0KC6LKLZ31pW1QTlrZiNZD/j8/F6SwQ=)
                          2: 691B3B36FCC611EF8337B652C4F9AE02.roa (hash: 4RVRUZFMjrHSHp+QVOflneRKf1QSznuKsw3ALAxUkIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
                          rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
        Validity
            Not Before: Oct  3 06:27:13 2026 GMT
            Not After : Oct 10 06:27:13 2026 GMT
        Subject: CN=6ac0a041-35c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:7b:a4:a5:86:53:93:6a:c1:57:0e:82:60:
                    df:41:4d:10:82:03:78:76:5c:89:94:9d:ca:10:38:
                    a8:09:96:f8:00:f6:9c:ae:fc:e7:0b:c1:56:d2:6c:
                    27:14:c2:e2:9f:ed:76:2c:0e:27:ab:ac:78:1d:c1:
                    6a:d1:81:5d:26:53:f9:f6:59:f8:c9:05:d3:65:7c:
                    2d:8d:b4:f5:1e:2c:7d:95:ac:e3:8d:5f:c1:eb:b9:
                    22:39:1c:32:38:f2:c0:1c:43:21:a9:91:ad:25:4f:
                    18:30:ec:a2:99:12:be:b0:51:ed:97:aa:de:09:ec:
                    37:26:a6:12:16:89:cf:b5:99:2e:2c:f5:0e:b2:dd:
                    e7:ee:7a:b2:2f:e3:49:83:49:66:34:7c:07:68:01:
                    d3:69:cf:ad:d6:fb:31:f0:38:77:24:06:34:1c:9e:
                    61:20:af:24:7f:40:e8:84:86:64:bb:78:db:73:8c:
                    5b:0b:14:71:50:89:0e:13:70:21:d0:0e:c8:c7:c8:
                    0f:50:29:ac:f4:56:dc:1e:d8:73:f8:62:5b:7b:5e:
                    ed:5d:e6:1b:06:93:44:01:1c:df:8b:9e:e0:41:e9:
                    71:ac:4c:a8:45:f0:65:1d:b9:76:07:a6:14:ae:0e:
                    ec:ad:06:45:e4:d2:f3:86:57:6d:47:c5:f6:ac:00:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:91:1C:59:67:37:F0:A2:66:18:BE:3D:D3:C2:66:B1:89:25:A7:A0
            X509v3 Authority Key Identifier:
                keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:75:ce:85:93:28:57:05:df:8a:03:da:1c:d1:f6:a5:41:
         72:ee:f3:c6:79:88:a1:63:2d:74:fd:78:a8:7b:c0:66:ed:48:
         fb:24:ff:bb:fd:85:da:7c:9c:88:42:57:18:b8:1b:eb:f6:74:
         37:a0:ef:a0:df:f9:e4:a1:1b:8b:8d:95:a7:1e:8b:8a:0f:2d:
         bb:ee:53:9c:ed:f0:4b:19:a2:77:47:42:4d:ff:23:77:51:b3:
         97:e2:0a:1f:d8:81:bc:8c:d1:9a:70:08:05:48:e3:39:0a:2d:
         07:43:13:16:92:99:09:9d:67:8b:22:68:a0:aa:6b:e7:d8:10:
         45:b2:7d:e6:d4:79:b8:05:b7:9d:05:e9:75:0b:d1:b5:7c:ed:
         34:7a:b6:34:24:98:b1:c8:91:48:5e:69:13:f7:4c:63:93:d4:
         90:6c:85:59:01:f9:47:28:17:f5:31:97:d0:b0:03:9d:6c:fd:
         92:80:6e:3d:9f:55:37:c1:f4:b0:66:87:fb:e4:6a:89:0d:2b:
         a7:fc:89:be:d8:45:69:7c:56:7d:cd:da:36:c3:2e:d7:db:2b:
         ce:cd:65:f0:88:d2:f6:25:42:55:64:16:b2:24:e9:eb:86:6d:
         d5:ac:fb:2d:73:c6:00:e3:c0:75:0b:50:0e:ba:6f:c5:9a:4a:
         bb:06:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:26:10 2026 by rpki-client