Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
File:                     G5AiZjIh2M567rA_P1eZ8NV-phY.mft (raw, json)
Hash identifier:          0kYUrbVeP2eHVZLr5C6+tqYRG72WTInerWqJ55n9pao=
Subject key identifier:   43:1F:01:2D:4D:7D:30:7C:CC:47:1D:D9:03:C4:C9:83:37:69:42:7A
Authority key identifier: 1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16
Certificate issuer:       /CN=A9133E16/serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
Certificate serial:       09DF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
Manifest number:          09DF
Signing time:             Sun 20 Sep 2026 19:46:53 +0000
Manifest this update:     Sun 20 Sep 2026 19:46:52 +0000
Manifest next update:     Sun 27 Sep 2026 19:46:52 +0000
Files and hashes:         1: G5AiZjIh2M567rA_P1eZ8NV-phY.crl (hash: wjopZTeeAooEy3fKj5C9Jd4oqRoKZKsjBhnxbxwIOII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl
                          rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2527 (0x9df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133E16, serialNumber=1B9022663221D8CE7AEEB03F3F5799F0D57EA616
        Validity
            Not Before: Sep 20 19:46:52 2026 GMT
            Not After : Sep 27 19:46:52 2026 GMT
        Subject: CN=6ab0382d-0841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:49:ff:bb:64:d0:1a:e6:ba:74:75:d0:c6:
                    2b:f4:51:81:43:86:83:94:39:4a:da:26:dd:0d:55:
                    ee:b0:06:af:74:02:81:aa:3d:35:eb:82:07:23:b8:
                    7f:78:93:b9:9b:b0:4f:b5:d0:d6:9d:fe:e8:ff:64:
                    72:c6:47:bb:d0:7c:ad:11:9c:df:ff:a0:90:b7:84:
                    9c:fb:59:40:43:ef:c9:23:67:b1:98:f3:26:26:e2:
                    66:db:fb:31:f2:03:f6:70:f6:c6:25:51:29:b9:bd:
                    fa:64:ae:e2:b0:34:2e:18:f4:16:2f:d3:c7:df:c3:
                    fc:ed:34:0f:c1:54:45:2c:ee:ff:ed:87:9b:39:b4:
                    6b:be:d3:83:2c:72:74:39:20:40:88:89:61:17:6b:
                    e0:5c:d3:e4:c6:b4:c0:1e:f9:fd:ac:b0:27:7e:b8:
                    e1:5d:f4:71:c7:39:83:5c:55:b7:03:c2:c2:cf:e9:
                    c2:ab:43:95:dc:65:6f:fe:74:73:17:c4:d0:1b:cf:
                    ee:e7:14:ad:b2:c0:ce:bf:d1:b4:ff:f2:f9:48:3a:
                    78:99:b3:13:a6:45:68:ac:2a:52:1a:fa:90:5b:e6:
                    42:25:5a:27:ed:bc:71:df:b0:8c:fd:01:8e:d6:c9:
                    40:71:b0:19:6f:18:66:ad:ea:f4:69:e2:31:19:18:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:01:2D:4D:7D:30:7C:CC:47:1D:D9:03:C4:C9:83:37:69:42:7A
            X509v3 Authority Key Identifier:
                keyid:1B:90:22:66:32:21:D8:CE:7A:EE:B0:3F:3F:57:99:F0:D5:7E:A6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G5AiZjIh2M567rA_P1eZ8NV-phY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133E16/F47B6CD4AC7411EA86EA9F48C4F9AE02/G5AiZjIh2M567rA_P1eZ8NV-phY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:0e:f1:e6:e5:c5:8e:3e:b0:c9:2b:94:e9:93:c1:7f:6d:
         6a:cc:0a:8e:cf:02:cf:16:a7:6a:c6:a5:bb:dc:9f:72:8c:d7:
         2c:b8:35:4e:60:7d:6f:3d:a7:6e:e9:ed:d2:4d:f0:ab:39:14:
         41:2a:f8:dd:e7:ee:84:d1:0b:af:11:e9:02:93:2c:23:00:75:
         36:04:41:8e:e2:96:d1:1b:37:10:6e:0c:90:0b:28:91:41:e9:
         ac:0d:01:50:64:32:f4:15:c0:05:f0:fa:87:a2:d7:34:2a:77:
         af:ca:75:e5:f8:7d:a2:3c:ef:5b:5b:78:e0:84:70:27:30:7e:
         b0:0e:7a:66:20:5a:89:d8:2b:eb:11:0f:ef:a2:83:f5:86:9b:
         67:96:f6:4b:50:33:01:a6:67:ed:9d:ce:39:57:a4:e4:fe:68:
         76:c5:2b:40:f9:6e:10:2f:2e:e0:9c:f3:58:5c:d7:f9:18:d5:
         2f:6d:f9:cd:01:83:23:ef:69:3c:c7:de:60:86:b7:00:08:e8:
         db:26:5e:7f:cd:00:bc:09:80:db:e4:84:c4:b9:19:a8:46:87:
         96:a0:cb:70:6c:b6:3e:eb:11:61:99:07:b3:fa:95:06:bd:42:
         5e:b6:67:47:9d:96:35:91:69:ca:cc:9c:af:93:a4:a6:db:55:
         1d:f8:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:23:24 2026 by rpki-client