Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
File:                     g38GODxsxdOK-dN_AsDIiguFaUY.mft (raw, json)
Hash identifier:          cN+j0cMhwywSebqa2BGXzfsx9L2icUuJRmK1bYhwcxA=
Subject key identifier:   3F:A4:AF:50:82:15:B8:5F:0C:E5:79:8E:CF:B2:0D:8E:9E:38:01:09
Authority key identifier: 83:7F:06:38:3C:6C:C5:D3:8A:F9:D3:7F:02:C0:C8:8A:0B:85:69:46
Certificate issuer:       /CN=A9131821/serialNumber=837F06383C6CC5D38AF9D37F02C0C88A0B856946
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
Manifest number:          2F
Signing time:             Sun 11 Oct 2026 09:21:02 +0000
Manifest this update:     Sun 11 Oct 2026 09:21:01 +0000
Manifest next update:     Sun 18 Oct 2026 09:21:01 +0000
Files and hashes:         1: g38GODxsxdOK-dN_AsDIiguFaUY.crl (hash: 9DANYiSPQ7A2/0PHSg8Otw6MvnKkps8NE9GN3B/7wlA=)
                          2: B786F6BE80A211F1BEE50EFD8CA30FBC.roa (hash: VjMW2cban0Alef8+4ZH9ZJyPTWQbnSuuC5ci8mGfk0s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.crl
                          rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131821, serialNumber=837F06383C6CC5D38AF9D37F02C0C88A0B856946
        Validity
            Not Before: Oct 11 09:21:01 2026 GMT
            Not After : Oct 18 09:21:01 2026 GMT
        Subject: CN=6acb54fe-d1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:92:91:49:8a:a0:9d:6f:27:45:60:75:8f:
                    77:79:57:b0:aa:98:b4:d4:91:cb:09:ed:8c:f9:3e:
                    b4:33:d8:18:8d:1b:e2:2b:b2:19:b0:bf:1d:6f:12:
                    e8:42:9e:74:0a:ef:c3:c1:2a:4e:51:0a:68:4d:97:
                    df:0f:ec:ba:37:b0:fc:d6:25:e1:88:ee:75:82:e6:
                    30:94:c3:20:77:21:8b:00:f8:e6:6b:76:bc:ae:e8:
                    9a:27:d3:f1:84:89:14:58:4c:f6:93:69:71:09:2c:
                    a6:a2:db:a9:3c:63:e2:e8:80:6c:3c:98:77:31:ed:
                    3d:9e:8a:17:2b:18:04:34:cf:76:82:51:e1:e7:66:
                    b6:bb:98:2e:01:48:de:8a:b9:2b:cc:15:62:9b:f4:
                    33:e0:d4:a2:94:19:3b:cc:b4:a1:1d:9c:b6:60:91:
                    47:8c:81:7d:ec:1e:07:ad:e7:64:1e:cd:ef:79:08:
                    f0:5d:63:95:70:94:a2:29:3f:aa:61:9c:0e:0a:aa:
                    2a:5f:27:ec:1e:32:1b:a3:18:71:dc:3a:36:aa:fa:
                    0e:ae:27:51:16:92:09:df:86:84:12:9a:aa:ea:54:
                    51:92:42:2c:3c:32:59:f6:e8:9b:e9:e1:38:a2:2a:
                    2b:ba:a4:9b:b2:27:1a:2e:a6:a9:24:1b:ee:4a:24:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A4:AF:50:82:15:B8:5F:0C:E5:79:8E:CF:B2:0D:8E:9E:38:01:09
            X509v3 Authority Key Identifier:
                keyid:83:7F:06:38:3C:6C:C5:D3:8A:F9:D3:7F:02:C0:C8:8A:0B:85:69:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g38GODxsxdOK-dN_AsDIiguFaUY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131821/20129142809F11F1B191525D8CA30FBC/g38GODxsxdOK-dN_AsDIiguFaUY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:48:d9:de:54:54:79:97:63:cd:20:e5:d8:da:ba:05:04:
         d8:69:e1:91:22:35:59:cc:b1:59:f5:bd:e1:df:c4:4c:50:6e:
         70:d9:fa:de:d0:bf:4a:64:de:21:e0:c7:3a:7e:1c:fc:8d:91:
         14:94:86:05:50:30:fb:91:fc:ae:d8:50:8b:59:17:f0:4b:27:
         6d:1e:78:c5:19:9e:97:61:96:7a:ab:7d:99:4f:1f:6d:48:83:
         80:36:75:5d:71:02:8b:2b:ed:71:03:13:09:85:34:14:da:98:
         8a:49:09:d3:65:45:6a:cc:51:21:52:2d:23:ef:7d:f3:1c:42:
         fd:3c:ff:86:b3:b5:6e:01:4e:f2:a6:ab:6d:f4:33:f4:dc:d9:
         12:4e:8c:dc:02:93:62:38:cb:1c:56:8c:7f:4f:3d:b2:50:06:
         80:ac:5b:6d:e0:0d:29:e5:b1:40:e3:8f:c0:a7:b5:db:eb:be:
         20:45:2a:f3:80:a3:12:9c:55:3f:61:c0:44:cf:0e:19:25:b2:
         d5:ae:63:4d:49:0c:02:37:b8:f7:2e:97:91:69:e2:bb:69:54:
         97:09:3b:be:3e:5b:64:88:3a:e5:40:3a:de:3b:2c:4d:03:eb:
         f8:be:46:e6:b1:e6:5b:b1:66:25:27:fd:ab:a3:5a:b9:c9:af:
         ac:c3:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:09:41 2026 by rpki-client