Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File:                     gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier:          t3JSrQLVyku0UbrUcklfzFZCv89WucCBRoQnG4bF8ZE=
Subject key identifier:   4D:03:BF:47:60:39:8C:9C:A7:24:A6:C7:5D:54:A6:75:5C:BC:24:F3
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer:       /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial:       0CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number:          0CD4
Signing time:             Tue 22 Sep 2026 18:22:58 +0000
Manifest this update:     Tue 22 Sep 2026 18:22:57 +0000
Manifest next update:     Tue 29 Sep 2026 18:22:57 +0000
Files and hashes:         1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: 1SqGcz23JZTQ+iceNnpyJdpMqmkGQj4ouAmkw1Za4dw=)
                          2: FE677A947F3611F1AEABD9D88FA30FBC.roa (hash: xXKNP1utbvVSzFEm+p/CVGumail8NouJOePObgsIKAg=)
                          3: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: aM0okos6HP2lmuHFZTzsM6czS1dLwWW/PzQ8J/OHsFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
                          rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3313 (0xcf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
        Validity
            Not Before: Sep 22 18:22:57 2026 GMT
            Not After : Sep 29 18:22:57 2026 GMT
        Subject: CN=6ab2c782-9541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:5b:f9:c5:93:19:b6:34:0d:a1:6e:cf:6b:
                    6c:9e:be:74:89:c9:3d:c6:6b:ef:0e:b1:e4:f2:7d:
                    e4:ca:e0:f2:17:e6:d8:47:82:0c:21:e9:26:bd:ff:
                    f1:87:86:6c:39:ea:2d:17:83:a5:ad:1d:e7:f4:b1:
                    21:35:ba:6a:2b:3c:92:ca:1c:96:f1:43:ef:8e:43:
                    4a:fc:6d:78:14:96:2c:a4:3d:0c:4b:05:05:98:3f:
                    bb:43:74:fd:33:55:ef:80:95:ce:5e:eb:6d:67:11:
                    ad:a0:80:1d:ce:0f:5e:f4:1a:e6:30:8c:6e:72:d7:
                    8a:3c:cd:c3:8d:2f:cd:b0:df:d3:7c:e9:26:01:ae:
                    10:3a:80:ad:35:29:66:1c:2a:bf:c2:f0:61:58:a0:
                    65:1e:1e:03:b0:64:7e:e3:92:99:c2:14:15:63:09:
                    aa:95:aa:42:89:4a:f1:70:7f:a0:c2:04:ad:65:99:
                    9e:58:a8:6e:87:bc:0e:51:df:85:ed:e8:47:fd:5f:
                    64:51:18:28:e1:c8:4b:44:95:82:61:c4:4d:d7:dd:
                    c5:b1:30:30:ca:35:c0:10:b2:22:cb:9a:97:66:5f:
                    83:e1:15:86:ca:ea:e3:75:97:ac:c8:ab:45:2b:41:
                    30:7c:dd:b7:ce:18:e1:d4:21:02:85:1c:43:51:fa:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:03:BF:47:60:39:8C:9C:A7:24:A6:C7:5D:54:A6:75:5C:BC:24:F3
            X509v3 Authority Key Identifier:
                keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f2:0b:46:e8:dd:d5:b4:be:a0:23:97:06:e6:65:90:59:83:
         c9:dc:4b:bc:ee:06:b0:73:83:a4:55:dd:fc:3f:83:5d:f9:df:
         76:0d:b1:56:9d:3b:0d:82:d6:f5:9d:73:8b:b5:33:56:c2:e5:
         09:4f:c1:d1:45:c2:33:26:8e:05:85:19:f8:ce:9c:79:3d:d4:
         ab:00:3f:84:1c:94:c9:09:35:c6:48:72:01:33:28:14:aa:87:
         5a:b6:5d:57:e1:f9:80:70:41:0e:13:8d:e3:81:a9:02:90:1e:
         81:74:f5:67:0c:4d:0d:e7:bf:fb:2e:d2:89:e5:ab:b4:52:f3:
         77:ef:e4:c3:d0:3b:44:85:b3:07:29:96:ca:0e:c4:65:f9:05:
         92:36:39:b7:b0:26:7d:33:1c:94:44:77:d9:d2:20:93:0a:b4:
         53:ca:d7:5e:34:9f:13:9c:4d:e4:43:3c:35:c9:ad:73:00:c3:
         22:d3:ac:83:42:4f:53:c1:1c:ed:ad:80:7c:ea:82:d7:d5:45:
         ca:9b:51:4a:fd:69:62:65:ca:33:3b:6c:36:4e:fb:5d:f5:ec:
         d8:8d:d6:8f:bb:31:8e:a9:8f:ff:df:d1:88:0a:f8:95:64:fb:
         6f:b3:d1:44:18:bf:f8:61:a1:79:51:b5:58:0b:01:db:84:ca:
         8a:b4:a2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:46:15 2026 by rpki-client