Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
File:                     gCfg71TQC2H3E28JcZv89MRTNAU.mft (raw, json)
Hash identifier:          AZAcYPusGPm7U+5gdQzHikWF4kK+LdCWQvmgJeDh3ck=
Subject key identifier:   67:86:A4:4A:8A:75:E8:EA:F9:00:44:EF:8D:EC:66:A7:C4:2B:04:56
Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
Certificate issuer:       /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Certificate serial:       35D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
Manifest number:          35BE
Signing time:             Tue 22 Sep 2026 14:27:45 +0000
Manifest this update:     Tue 22 Sep 2026 14:27:45 +0000
Manifest next update:     Tue 29 Sep 2026 14:27:45 +0000
Files and hashes:         1: gCfg71TQC2H3E28JcZv89MRTNAU.crl (hash: ytjzGE6Ar1hHAjUQWWAZwu5hIYXFA0Ongh4ABeV8Tfk=)
                          2: 566D47A6914211F1B8AFAA236311F970.roa (hash: M8w4C6kxFAX4a/1mupbFMnzHAisy+JyhxEEHGHUAERg=)
                          3: B305D4F4D4D911F0990CAE1CC4F9AE02.roa (hash: WxWTWJ/XU+5a7F5CKHub9rL/f65J4kMT+zVAopSr/ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
                          rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13777 (0x35d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
        Validity
            Not Before: Sep 22 14:27:45 2026 GMT
            Not After : Sep 29 14:27:45 2026 GMT
        Subject: CN=6ab29061-4198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:fe:99:9a:39:f4:08:07:c1:30:28:c1:5b:
                    e4:c1:be:e8:2e:c6:f5:bc:43:88:38:c3:d2:e0:a7:
                    16:1c:c1:5b:55:b8:e6:d3:4d:36:4f:4b:7b:8d:04:
                    0b:aa:7a:1c:a6:0c:8b:37:c2:62:a8:87:7b:0e:09:
                    0a:32:85:b9:39:b6:37:0f:59:cb:76:69:2c:94:15:
                    28:d9:62:d3:35:1d:01:0e:0e:03:43:28:32:42:6a:
                    9e:fb:fb:98:a3:9d:db:86:dc:e7:69:ff:a3:93:e1:
                    64:1c:e6:9c:e4:82:e5:b6:a2:e5:72:ee:b6:1b:cf:
                    27:1a:c0:1b:5a:39:a4:76:98:ee:28:70:34:0f:84:
                    d2:1e:c4:64:90:47:25:99:ec:26:9d:a9:14:e0:54:
                    7a:3e:fb:f4:46:91:58:aa:d4:a7:10:cb:a2:28:45:
                    9a:26:89:bf:63:01:33:e5:ab:1e:b1:ca:ce:20:09:
                    b4:8d:50:3c:cc:48:6b:d7:49:fd:2f:8c:df:6b:0b:
                    b7:e0:2f:74:a5:da:7b:2a:fb:f4:ef:47:c4:cd:dc:
                    e2:b1:cc:78:33:c0:37:c7:13:c6:64:b5:d8:60:50:
                    d5:0c:57:58:1b:49:37:16:5f:94:37:10:47:23:1f:
                    de:36:73:25:ea:4c:bd:33:17:2e:c8:8f:22:e7:e1:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:86:A4:4A:8A:75:E8:EA:F9:00:44:EF:8D:EC:66:A7:C4:2B:04:56
            X509v3 Authority Key Identifier:
                keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1a:97:7a:2a:31:c4:1b:3d:85:40:ec:b1:ea:45:c0:e5:ff:
         0e:55:ac:38:e9:69:f0:e6:df:3a:d6:b0:3b:10:e6:94:23:1e:
         ba:57:df:80:60:1e:00:54:9f:22:22:e6:4e:79:7b:3e:7f:ad:
         4a:be:98:97:f0:2f:b1:68:9c:52:cc:74:d9:45:19:be:20:2e:
         33:96:4b:fb:da:9e:14:10:97:c1:7c:ba:9f:4a:37:51:47:d5:
         a6:99:78:1a:5d:a7:fb:43:13:ec:92:b3:25:eb:40:4c:dc:70:
         41:f6:e5:eb:59:76:00:24:e7:cb:22:28:63:92:02:98:d4:08:
         ac:50:97:7a:46:e7:87:f7:61:94:3e:00:f4:3e:3b:0d:df:ab:
         4d:04:d0:e4:3d:40:02:36:e6:7e:d3:34:f5:c6:b5:6e:5b:ac:
         6c:a4:fa:ad:76:88:8b:62:79:a9:21:19:26:91:fe:46:fe:40:
         52:e3:b6:30:de:ce:a0:3b:6b:87:ce:fe:23:33:be:10:43:11:
         9f:5c:0c:8d:69:5f:7a:48:d4:f4:f3:ac:76:58:b4:de:9b:83:
         d4:a3:5b:fa:e0:72:6f:75:ed:5f:61:d5:35:ec:e5:04:ca:cf:
         b8:85:a4:ad:2b:17:6c:87:96:9f:05:1a:3d:65:b5:07:96:71:
         39:c3:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:47:15 2026 by rpki-client