Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
File:                     05gN65FABIn5D_5q7xfErdhrEh0.mft (raw, json)
Hash identifier:          xIzJtva6HlURzSDDeTtVwglBktVoNAPS6ek78OojDI0=
Subject key identifier:   2D:49:1B:AE:96:52:AB:A5:0E:A5:FF:42:3A:94:D6:26:45:FC:D0:53
Authority key identifier: D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D
Certificate issuer:       /CN=A916D6BA/serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
Manifest number:          47
Signing time:             Fri 25 Sep 2026 08:32:12 +0000
Manifest this update:     Fri 25 Sep 2026 08:32:11 +0000
Manifest next update:     Fri 02 Oct 2026 08:32:11 +0000
Files and hashes:         1: 05gN65FABIn5D_5q7xfErdhrEh0.crl (hash: ylDjJ5DkzMl1SGvhzQY0YpALTNNHTFVK23GJ/YkKWmU=)
                          2: 990DC3124B5E11F1A334296EAF833773.roa (hash: ZrU1yEE9T1CVij7RmKAnUigJhTMs5XRxyKi/FLpZjq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl
                          rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D6BA, serialNumber=D3980DEB91400489F90FFE6AEF17C4ADD86B121D
        Validity
            Not Before: Sep 25 08:32:11 2026 GMT
            Not After : Oct  2 08:32:11 2026 GMT
        Subject: CN=6ab6318c-c982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fc:d2:37:c7:3b:9e:5a:06:f7:6c:81:d1:a4:
                    e3:81:19:7f:93:25:ba:93:9d:43:9d:06:67:75:c6:
                    6b:ec:dd:21:70:8f:71:32:ef:ee:5e:54:67:68:4b:
                    86:2f:35:a5:ee:99:89:bb:a9:ed:66:56:d0:a9:ce:
                    0e:c0:65:c5:88:7d:33:44:56:6b:03:45:9a:46:de:
                    6b:a9:7f:2a:1c:00:bc:cb:1c:0b:fe:86:6e:c6:92:
                    45:eb:c9:1a:c8:dd:02:c0:a0:b2:17:bf:ba:2c:0e:
                    32:d0:24:e8:70:0d:1d:ba:16:81:16:f4:bc:18:38:
                    59:23:81:6b:8a:7a:be:a2:4a:8f:fa:be:80:0f:82:
                    4f:94:2c:66:93:a7:6b:04:5e:83:f0:59:af:7a:c8:
                    bf:72:ad:52:d0:99:c9:6b:45:9a:2e:21:59:d0:08:
                    24:e3:27:f0:bb:5e:66:2c:ac:49:01:57:3e:c9:17:
                    f0:f0:0a:c2:24:f6:ec:7a:97:b2:e8:5e:32:30:80:
                    2d:8b:3e:69:4a:ba:2a:d0:97:fd:4f:a8:cc:76:63:
                    1d:48:04:b6:1d:65:37:95:96:f4:aa:c7:0a:43:7e:
                    a9:6f:d1:ae:fb:e9:8c:78:b0:04:57:0f:8c:a7:12:
                    b8:9b:c7:e5:3b:dc:de:1b:0b:ee:d7:9e:e0:cc:4c:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:49:1B:AE:96:52:AB:A5:0E:A5:FF:42:3A:94:D6:26:45:FC:D0:53
            X509v3 Authority Key Identifier:
                keyid:D3:98:0D:EB:91:40:04:89:F9:0F:FE:6A:EF:17:C4:AD:D8:6B:12:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05gN65FABIn5D_5q7xfErdhrEh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6BA/D21F35EC4B5D11F195097115AF833773/05gN65FABIn5D_5q7xfErdhrEh0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d9:be:a7:25:5f:6e:2b:97:8c:a4:2a:37:6c:3d:49:d5:8c:
         9f:95:74:8b:0a:87:e0:52:9c:92:95:e7:3e:01:7d:37:0b:86:
         aa:63:a4:a5:5a:81:a7:ef:fd:b0:e6:3e:af:bc:9e:c1:11:bb:
         43:78:7a:e8:62:8f:db:50:46:6f:41:a0:e4:99:6b:fb:ea:e8:
         f1:69:76:52:77:d0:bc:11:0e:f9:8f:86:be:c5:a9:64:ad:90:
         f6:20:b4:6c:1e:c0:0d:a4:48:24:6b:c2:fd:30:bb:29:f8:f1:
         3b:85:09:c1:22:0d:c6:d9:9f:95:8b:f9:e6:b9:b8:c8:bc:cd:
         09:b7:27:4e:82:6e:bf:a6:c3:7b:1c:26:a8:ab:58:67:08:bf:
         75:96:13:a4:ac:ea:89:de:b3:b3:38:2b:33:8f:70:62:e9:b5:
         47:4c:d8:88:13:57:32:60:c0:3a:3a:57:4e:06:9a:f6:ae:71:
         1d:ab:53:9b:0b:55:67:80:f7:cf:ef:09:18:eb:8e:76:cf:94:
         67:21:d4:72:82:f3:76:aa:da:6d:fa:36:ff:d6:90:3c:81:54:
         6b:23:15:67:c4:5f:1c:a6:45:14:94:bb:15:30:8c:27:47:8e:
         bd:4e:99:13:43:49:57:4d:c3:ee:35:f8:aa:cc:66:30:b6:ee:
         d3:f0:76:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:21:01 2026 by rpki-client