Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
File:                     gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json)
Hash identifier:          S55Rjkgy5xPqobtw65nklDrPrcXAoYySo4ICT/yiGv0=
Subject key identifier:   8B:7A:53:C5:9C:1B:F9:A7:8B:66:3B:03:AA:F7:26:DC:07:73:2F:06
Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00
Certificate issuer:       /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500
Certificate serial:       0734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
Manifest number:          0701
Signing time:             Sun 20 Sep 2026 22:06:44 +0000
Manifest this update:     Sun 20 Sep 2026 22:06:44 +0000
Manifest next update:     Sun 27 Sep 2026 22:06:44 +0000
Files and hashes:         1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: Q1O0MIcAZ/9XHl5pZT54zcQEXwo221RZyGEe8H91u/4=)
                          2: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: fMMz+0pPzt4f7JJCwdRoZPgQjZkf7Cl5Iy84Bz8x9r4=)
                          3: 899A5138691611EFBED13942C4F9AE02.roa (hash: M2rKB/SETm64+KuJixRJ1nMhhLrqEJUPbxUEZ6z7VDs=)
                          4: A6C94076624711EC9B815772C4F9AE02.roa (hash: dju0CNTYXThmKrA0e4pebqeIBKSRlwEicu9HpaViXJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl
                          rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500
        Validity
            Not Before: Sep 20 22:06:44 2026 GMT
            Not After : Sep 27 22:06:44 2026 GMT
        Subject: CN=6ab058f4-bd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:7f:50:eb:29:b5:b4:64:82:e0:ec:8a:9b:
                    e4:9c:24:2d:b1:b6:12:47:4d:58:a4:b3:53:96:01:
                    9a:f4:ed:09:59:05:96:f8:34:52:c6:47:16:d3:95:
                    72:cf:4d:c7:65:c0:6c:aa:a1:71:11:d6:46:13:45:
                    b4:02:01:20:6a:79:e5:26:d3:df:8b:ad:af:b9:9f:
                    dc:40:97:90:0f:9e:a5:30:32:7c:b3:bb:a5:9e:4d:
                    49:f3:52:30:27:63:67:0e:91:4e:8a:f4:33:1b:83:
                    c5:75:bc:98:e8:40:d5:a3:25:21:6a:80:a9:85:a6:
                    45:b6:12:bf:b4:5e:96:65:e8:b9:42:02:76:26:54:
                    b2:2d:83:4a:90:54:0e:05:cf:9b:30:2d:ee:70:81:
                    61:3d:7a:7d:47:db:a0:c8:48:80:4c:31:f5:95:08:
                    56:6b:1e:5c:95:fc:d6:0c:f8:3e:fc:7b:e3:25:51:
                    d6:0c:de:7a:e3:d9:86:99:51:96:64:4a:f9:5b:16:
                    b4:d8:41:df:49:e6:70:8e:ab:79:45:41:12:80:28:
                    03:e9:a1:49:30:8e:5c:df:03:c1:d6:14:26:12:9f:
                    89:b8:cb:7e:5e:a9:4f:3f:46:bd:5c:d8:6c:f8:f8:
                    3c:d3:d5:9c:4c:d4:44:33:2c:95:74:d7:00:50:a5:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7A:53:C5:9C:1B:F9:A7:8B:66:3B:03:AA:F7:26:DC:07:73:2F:06
            X509v3 Authority Key Identifier:
                keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:78:54:9e:60:4a:14:83:2f:a0:ce:86:e9:15:fe:e0:cc:94:
         8a:2f:51:f8:7a:30:69:eb:49:1b:b4:9d:50:19:6a:70:59:17:
         9b:17:a2:0b:99:21:be:94:03:cb:c5:d3:f8:6a:78:74:53:62:
         7f:9b:3e:c7:c4:e9:37:f4:89:96:71:65:be:3e:f7:8a:6e:16:
         7c:c0:bf:98:55:63:0d:11:59:51:df:f6:20:bd:5f:5d:02:ac:
         43:29:07:ba:15:e7:6b:46:1d:c0:e6:5e:20:28:b8:7d:29:fd:
         89:6d:dd:26:9f:4e:ad:8d:92:33:da:0a:4a:b4:5b:fc:41:3f:
         cc:ee:25:be:1c:e1:6e:af:78:ef:a0:1d:bf:21:86:92:89:56:
         12:58:cf:77:7c:da:80:01:d9:44:15:32:ca:f6:af:59:c2:1f:
         54:d3:79:1e:b1:02:0a:e3:75:ae:26:05:16:d2:2b:8a:ae:42:
         b1:0d:ce:83:64:85:93:34:ce:f1:68:59:a9:5d:82:a3:d0:18:
         d3:24:6f:eb:3e:8a:6c:cf:ec:ea:0e:c7:ba:26:2a:32:37:2b:
         8c:c4:ff:f0:6d:29:b1:80:84:72:77:56:ff:e1:46:df:db:36:
         ac:9c:41:d5:d6:ad:f5:37:69:81:01:3c:4d:3e:01:0f:8f:70:
         d3:a1:bc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:44:41 2026 by rpki-client