Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
File:                     gH5oiqUL0-OL4xtdTE4GCATrFdw.mft (raw, json)
Hash identifier:          L3EeV7lRfNWBAvBR1Kr+iYyr133is94gU5gF+OEz544=
Subject key identifier:   4C:AC:90:09:A5:B0:D2:EA:8A:66:C2:14:FD:1C:9A:FD:30:4F:A1:AB
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
Manifest number:          015F
Signing time:             Fri 25 Sep 2026 05:07:25 +0000
Manifest this update:     Fri 25 Sep 2026 05:07:25 +0000
Manifest next update:     Fri 02 Oct 2026 05:07:25 +0000
Files and hashes:         1: gH5oiqUL0-OL4xtdTE4GCATrFdw.crl (hash: sSDEZBrmdiAf+csYu6072pqjfjEBoRjs1l4nBLNZGO8=)
                          2: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (hash: faGM7P04DgY9+kePEKWNSWyG4kwQPN9Aqs15IpEWkN8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Sep 25 05:07:25 2026 GMT
            Not After : Oct  2 05:07:25 2026 GMT
        Subject: CN=6ab6018d-95c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:4f:7c:27:44:0b:0c:c0:a2:e0:f7:ee:fd:
                    77:d3:29:00:cd:fe:20:e3:4b:47:ba:db:7d:50:1c:
                    9d:e8:76:68:b9:26:b5:64:41:7d:63:7f:92:cf:28:
                    db:2a:15:27:ff:f3:07:93:2a:14:07:f2:e3:5c:6e:
                    52:fa:ea:04:7b:05:d4:d0:0f:f0:47:a7:eb:6c:01:
                    1f:08:0e:d1:da:0b:21:2f:68:2c:b0:8f:c4:d7:d4:
                    62:11:9a:ee:07:9c:7e:22:5f:58:bd:96:08:b6:a5:
                    d5:50:07:34:74:05:2b:12:7e:41:3d:4f:dc:e2:f5:
                    b1:9c:56:fd:19:9d:0b:07:76:0e:06:bf:c9:ef:95:
                    f7:42:ba:33:00:36:18:41:92:a3:96:44:df:af:52:
                    ca:81:25:b3:78:65:d6:ea:e1:dc:2f:f9:be:a6:5b:
                    4d:07:da:40:82:d8:34:f2:c6:c8:10:e5:70:31:8a:
                    22:47:42:ee:39:62:e1:61:1c:ce:15:00:65:30:26:
                    b5:64:84:e7:64:08:64:97:83:c1:82:6e:e1:cd:47:
                    bd:65:33:b2:23:22:80:36:28:6b:62:07:57:b3:43:
                    68:28:0d:ed:2e:15:4e:0b:ee:5a:f5:69:83:8a:d5:
                    21:ee:50:51:19:b5:2d:2b:30:61:d3:76:1d:0e:89:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AC:90:09:A5:B0:D2:EA:8A:66:C2:14:FD:1C:9A:FD:30:4F:A1:AB
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:11:dc:9e:83:9c:2a:ef:2d:b1:6b:1c:32:32:8f:cd:6e:b3:
         88:13:aa:6b:aa:c5:d7:5c:64:2e:f4:4c:4d:fd:bd:4b:5c:65:
         4d:30:70:40:b7:6e:e0:b4:3f:9f:31:8e:5d:c5:a6:04:b1:f5:
         c0:89:18:63:f0:2e:25:35:24:df:0e:11:04:fa:67:e0:04:0f:
         67:f2:cb:5b:79:93:3d:f4:13:00:6d:f6:d1:f3:36:b4:59:40:
         6e:9f:d1:7c:93:7e:da:f9:52:ca:d9:67:9a:57:86:46:ba:fe:
         bc:5b:1a:dc:98:fe:f3:6f:b0:6b:43:62:00:28:c0:9c:10:60:
         dc:eb:a6:06:5b:12:38:c0:d1:9a:46:a7:02:01:6c:e0:dd:cc:
         42:d4:2c:dc:bc:85:83:90:da:3f:4d:c0:dd:83:aa:07:b1:55:
         92:d8:ec:00:c8:dc:32:32:72:4e:24:d5:69:64:49:ed:59:3a:
         69:46:68:cc:3b:52:49:66:89:3e:70:19:90:7b:ec:ad:1b:b6:
         fc:f0:02:dc:d5:45:68:39:13:4a:97:ce:6f:92:b3:04:6f:ac:
         31:81:2a:b1:4a:ba:54:3f:90:74:cb:42:e7:5e:75:66:2c:c5:
         86:3f:5d:f6:88:38:74:16:ad:ca:db:1f:bf:76:4f:ef:6d:31:
         ed:09:d0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:01:09 2026 by rpki-client