Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File:                     gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier:          dd1UgUUl1+dYnkMr+SLrxlt9Oh1zL5x6uJOSpFWMY84=
Subject key identifier:   72:9A:E7:A4:64:7C:17:A6:43:EF:68:E7:D4:01:1B:B9:8E:DC:18:2C
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number:          0655
Signing time:             Thu 24 Sep 2026 22:32:02 +0000
Manifest this update:     Thu 24 Sep 2026 22:32:01 +0000
Manifest next update:     Thu 01 Oct 2026 22:32:01 +0000
Files and hashes:         1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: CzirJeFjlQNhuq+PvoEGRTTFWcNRgxgXKqGsd0HtQ3o=)
                          2: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: 9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=)
                          3: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: m3HEhEwWSLfKtQb2ikmT/BSylxepHuo5uXczBb4yR7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Sep 24 22:32:01 2026 GMT
            Not After : Oct  1 22:32:01 2026 GMT
        Subject: CN=6ab5a4e1-4836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:57:4c:3f:1a:1b:a9:44:ae:d0:56:18:d8:
                    5a:50:a9:46:51:e2:5f:3a:f4:21:3b:2c:80:d3:fc:
                    82:ae:27:f7:4e:90:c6:6a:6c:47:c3:13:cf:b5:6a:
                    2b:7d:67:be:29:2d:47:b4:f3:62:7b:68:08:75:5e:
                    68:5c:e2:ad:de:75:36:63:16:f1:6d:b5:ab:6a:ea:
                    c2:dd:f2:94:e9:cf:ec:a9:66:e7:95:e8:5b:8a:5e:
                    23:17:40:f0:44:de:29:33:cc:bb:6c:cb:c4:51:c5:
                    d5:3a:13:36:5b:88:19:78:36:3a:61:e0:34:92:59:
                    65:12:4d:15:f8:87:04:e4:b1:22:8a:30:5a:a7:e6:
                    c5:45:5d:db:da:78:f4:00:50:45:0a:68:9c:de:8d:
                    e3:e7:d2:d4:9c:9e:07:e6:6c:53:8a:70:b6:50:59:
                    09:11:59:d4:95:b3:ac:5c:c3:1e:33:5f:52:f6:e1:
                    87:13:45:36:58:f0:8e:18:de:72:6f:b4:64:97:2f:
                    0b:cf:ab:89:fd:f7:64:96:8a:a2:54:c3:ef:41:84:
                    d2:21:ff:c0:f0:9f:c3:03:fb:20:03:53:36:91:42:
                    d5:b0:ed:7b:be:e2:40:68:1a:3a:11:dd:0f:31:0a:
                    15:c0:dd:87:89:ea:48:2f:43:54:fb:ce:90:fa:49:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9A:E7:A4:64:7C:17:A6:43:EF:68:E7:D4:01:1B:B9:8E:DC:18:2C
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:dd:ef:88:48:a4:e6:93:f7:32:a1:d9:61:4f:9f:0b:0f:
         13:8b:36:76:b6:80:9e:6a:34:28:3a:c3:9f:3d:4d:57:43:88:
         5a:de:ba:61:e9:8a:f5:ad:e7:1e:6e:0d:ee:59:7d:34:0c:fc:
         00:e5:bd:0c:2e:a2:19:27:0e:1e:27:fe:39:65:4d:55:86:fc:
         43:db:6a:25:2e:e5:15:fc:61:88:89:90:4a:d0:24:a0:0f:6c:
         f7:b7:21:1f:ef:b2:c6:bd:e3:5c:53:09:e1:8a:65:10:51:65:
         9b:de:87:22:86:e7:0d:38:b8:d5:1c:2f:1d:5b:9d:f1:0b:17:
         69:27:b8:23:ef:de:bf:e5:36:1f:a5:50:cb:aa:85:c2:9e:38:
         88:f6:33:05:89:08:20:19:4d:42:48:47:11:72:ad:dc:b1:05:
         fc:64:e2:4e:f0:49:c2:2b:77:34:d8:3d:22:56:e1:d3:91:60:
         0f:a2:1f:3b:ab:aa:0d:1b:2e:f6:1e:b3:5a:c9:3f:d2:73:f9:
         f3:5b:b0:44:53:55:3f:85:d4:9f:df:d0:0f:93:bd:fc:a5:a8:
         1c:0f:20:28:2f:78:5e:90:9e:2b:d4:f5:48:5f:7b:9c:85:75:
         ad:7d:da:0f:c2:0b:3b:f3:c0:96:5f:21:9a:48:65:6f:40:b9:
         a7:f8:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:19:04 2026 by rpki-client