Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File:                     g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier:          g2ox0/pt2tRkmEJGP8+C2x+vS4s5/gOaAdy8wzFP7F8=
Subject key identifier:   A0:74:28:DB:57:FD:56:A6:B5:9F:62:36:35:58:BE:68:DF:38:14:51
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer:       /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial:       0158
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number:          0153
Signing time:             Fri 09 Oct 2026 05:54:52 +0000
Manifest this update:     Fri 09 Oct 2026 05:54:51 +0000
Manifest next update:     Fri 16 Oct 2026 05:54:51 +0000
Files and hashes:         1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: pbJ6niTt7XneGKfCbIiaWK5Qzvjn+uK8L4ExaPU60Vs=)
                          2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 85VnbBesAuFtmnoaNDKNK175y8YDoN8WdUlNmCsSoTg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 05:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
        Validity
            Not Before: Oct  9 05:54:51 2026 GMT
            Not After : Oct 16 05:54:51 2026 GMT
        Subject: CN=6ac881ac-bec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:1b:e3:d2:67:ec:d5:d2:55:52:e0:00:d4:
                    4b:b1:f8:49:67:7e:44:52:f3:d1:01:5c:43:37:7d:
                    05:45:b1:a9:54:b3:c5:38:aa:55:68:fa:c4:d2:a9:
                    61:2d:28:19:50:95:25:d4:62:ec:05:52:71:cc:aa:
                    01:22:d0:f6:10:7c:20:08:d9:51:fc:1c:c0:92:da:
                    04:c1:4a:07:65:c8:3f:b1:12:05:3e:43:d3:8f:b1:
                    37:52:f6:cb:f4:ce:3c:a0:69:ee:2f:1b:99:55:47:
                    2d:90:46:02:6b:8d:26:2c:a8:48:91:dd:16:a4:3e:
                    90:7f:e3:3f:d8:72:dc:bd:95:81:90:ce:bf:7b:82:
                    12:f8:6b:46:70:86:ec:3b:e6:36:87:bc:3c:9f:48:
                    99:70:2a:28:a5:fb:2e:ff:7b:b3:33:98:63:a3:36:
                    b7:18:a6:b6:b9:7c:48:09:cd:c4:62:ea:f8:d7:fa:
                    cd:57:25:88:3d:b7:73:27:e1:94:eb:32:f2:25:0b:
                    30:0b:22:92:3a:ae:43:fb:51:59:03:15:f4:b0:cd:
                    de:38:12:86:f8:3f:41:54:a1:af:31:b4:b2:f6:c5:
                    15:49:00:b5:01:9c:a6:90:fc:27:b8:07:f8:ee:5e:
                    45:57:b0:9a:7c:c5:12:4d:f3:67:ad:b9:3b:95:a5:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:28:DB:57:FD:56:A6:B5:9F:62:36:35:58:BE:68:DF:38:14:51
            X509v3 Authority Key Identifier:
                keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:f9:94:34:25:48:db:09:dd:a6:80:f4:9e:fb:c7:71:35:
         9a:c4:dc:33:bd:f7:7c:9a:36:e7:1b:6d:68:56:3a:f0:23:16:
         5e:0b:e5:39:8d:9b:c1:50:c2:aa:bf:13:7e:b4:97:3c:2f:49:
         d3:99:7c:91:4e:eb:77:7d:d3:61:27:10:40:88:1e:22:7e:4a:
         f2:c0:e0:4a:ca:de:c3:32:19:5d:b4:de:62:64:12:f4:bc:9d:
         78:a0:31:21:27:4d:c0:66:91:15:d8:20:1c:66:10:ff:a6:31:
         bf:38:e9:fb:b3:81:95:3f:28:b8:d9:78:50:ae:dc:e0:be:ae:
         0e:16:b0:a1:6c:0b:7a:a3:da:bf:f0:ad:9c:84:3d:ca:15:3b:
         80:10:36:eb:36:81:63:3f:22:56:4a:a9:c2:bb:e2:c2:14:a0:
         5a:85:42:79:c1:5b:53:01:c0:e3:c4:fa:29:a9:77:98:bc:bd:
         31:af:c7:b6:78:38:dd:cf:24:fd:2b:13:df:f9:69:dc:56:d9:
         31:a6:aa:82:41:23:1d:4a:4b:c1:55:e9:48:64:b8:1e:ba:34:
         22:9f:da:79:ac:c3:29:46:27:15:01:74:3a:42:7f:3d:60:fd:
         45:7f:2c:de:4a:3b:dc:d0:28:cc:00:53:6a:e7:29:f1:92:21:
         bb:a9:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:23:55 2026 by rpki-client