Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File:                     gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier:          NXKKMuQpQxqWM8WJ9EvHaCxIGM1/TKp7wh4nESpiusg=
Subject key identifier:   7B:D7:DC:AB:FC:53:5E:C1:F5:F7:A4:D6:4D:6D:BC:8A:FF:4B:91:97
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer:       /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number:          0161
Signing time:             Sun 27 Sep 2026 05:37:18 +0000
Manifest this update:     Sun 27 Sep 2026 05:37:18 +0000
Manifest next update:     Sun 04 Oct 2026 05:37:18 +0000
Files and hashes:         1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: u3f+xGMJCDzyv5dfDJCH2vD8l+yJ6JmwNTp6+AZP3kA=)
                          2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: fKB1wROuPCiOAs2iiH8T0iD/fbxHacro6VdzGc7766Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
        Validity
            Not Before: Sep 27 05:37:18 2026 GMT
            Not After : Oct  4 05:37:18 2026 GMT
        Subject: CN=6ab8ab8e-8d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:bc:9b:6d:f2:b5:86:52:7d:70:2a:e7:85:
                    2c:10:ab:b1:f4:bf:71:f5:9f:11:df:68:3b:3b:c7:
                    41:ce:02:06:35:3c:90:7d:93:0f:36:f8:5c:a5:15:
                    fb:84:fc:cb:f6:e5:61:73:1d:6c:e9:4c:cc:55:ca:
                    d6:a3:f5:08:3b:88:4e:07:d1:62:5e:e4:f7:d1:f3:
                    44:94:e0:7a:ce:26:73:29:80:1e:42:18:fd:14:6f:
                    83:e9:ea:7a:f6:9e:09:ff:51:ce:68:b1:14:33:26:
                    0c:75:35:74:6b:e8:c1:78:b5:eb:ef:fd:b2:67:f2:
                    9c:ae:06:49:01:a1:34:2e:a8:b3:a3:0f:77:b6:20:
                    4b:96:f6:cb:8a:48:75:0d:72:5e:04:0e:2f:fa:cf:
                    78:f7:d6:1c:16:8f:77:7e:81:b1:b1:89:e7:ee:62:
                    58:9b:61:28:86:9e:59:d1:8f:76:0e:b9:1b:1d:92:
                    ce:9e:ad:e3:00:ed:b5:bb:31:07:11:03:fd:99:c4:
                    18:ff:4c:67:bd:ac:98:52:53:e7:73:89:d6:b5:09:
                    df:94:0b:94:7e:3a:e9:7c:c5:bf:1f:e5:37:55:c5:
                    ca:cd:f4:70:a1:73:99:90:1d:44:13:89:da:e2:d2:
                    1a:5e:f3:42:7c:2e:0b:c6:11:96:80:fd:b9:59:a7:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:DC:AB:FC:53:5E:C1:F5:F7:A4:D6:4D:6D:BC:8A:FF:4B:91:97
            X509v3 Authority Key Identifier:
                keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:4d:26:1e:cc:f9:b8:ef:64:92:d8:61:c6:46:99:73:11:
         1a:75:1e:0f:99:44:0f:2b:74:9e:64:8a:1c:3e:35:9f:ad:96:
         5b:d1:65:c1:4c:7b:1c:31:10:10:51:d7:69:dc:b8:76:a8:a2:
         a2:cf:6e:f4:c2:46:67:3f:f8:29:0d:36:76:60:e4:b3:9d:33:
         8b:56:d8:05:4e:e5:e3:f9:3a:01:49:dd:5c:b6:c7:05:8e:1d:
         e7:47:08:73:e3:f5:77:af:78:2c:f1:53:3d:0f:97:fb:08:3f:
         02:a6:fe:55:ef:5b:49:7e:f2:e5:37:4d:37:8f:08:42:d2:4d:
         63:43:5c:e2:b9:95:2c:4a:31:ae:eb:5b:1e:7f:9b:6d:6e:93:
         66:fe:d9:36:43:2e:6a:63:de:40:e1:6e:a1:d6:93:55:55:93:
         ff:4c:29:52:58:43:ac:5a:30:2c:e1:f3:4d:86:d6:47:10:15:
         24:06:02:a2:18:94:e2:46:2d:45:e8:76:fc:5d:b6:31:6f:c0:
         ff:b1:6a:3d:da:b3:58:26:63:10:b3:e4:d3:b2:2a:8e:4b:20:
         96:ea:54:15:c9:03:59:9e:c0:76:2d:c7:8f:59:1a:b6:f8:ec:
         94:3f:0f:cd:43:69:93:af:a1:c2:b7:1d:3c:4c:66:cc:3e:91:
         3f:e5:53:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIxQUUxMTAvBgNVBAUTKDgyQTc2OURENzQ2QzgzMUY0QzREQjI5RDZBNjVERTA4
RDZBRDk1RUQwHhcNMjYwOTI3MDUzNzE4WhcNMjYxMDA0MDUzNzE4WjAYMRYwFAYD
VQQDEw02YWI4YWI4ZS04ZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxsq8m23ytYZSfXAq54UsEKux9L9x9Z8R32g7O8dBzgIGNTyQfZMPNvhcpRX7
hPzL9uVhcx1s6UzMVcrWo/UIO4hOB9FiXuT30fNElOB6ziZzKYAeQhj9FG+D6ep6
9p4J/1HOaLEUMyYMdTV0a+jBeLXr7/2yZ/KcrgZJAaE0Lqizow93tiBLlvbLikh1
DXJeBA4v+s9499YcFo93foGxsYnn7mJYm2Eohp5Z0Y92DrkbHZLOnq3jAO21uzEH
EQP9mcQY/0xnvayYUlPnc4nWtQnflAuUfjrpfMW/H+U3VcXKzfRwoXOZkB1EE4na
4tIaXvNCfC4LxhGWgP25Wae2swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvX3Kv8
U17B9fek1k1tvIr/S5GXMB8GA1UdIwQYMBaAFIKnad10bIMfTE2ynWpl3gjWrZXt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjFBRS83NDkxMkIyQ0FD
NzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4OU1UYktkYW1YZUNOYXRs
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dxZHAzWFJzZ3g5TVRiS2RhbVhlQ05hdGxlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjFBRS83NDkxMkIyQ0FDNzMxMUVGQTNDQkQxNEFDNEY5QUUwMi9ncWRwM1hSc2d4
OU1UYktkYW1YZUNOYXRsZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcz5NJh7M+bjvZJLYYcZGmXMRGnUeD5lEDyt0nmSKHD41n62WW9FlwUx7HDEQ
EFHXady4dqiios9u9MJGZz/4KQ02dmDks50zi1bYBU7l4/k6AUndXLbHBY4d50cI
c+P1d694LPFTPQ+X+wg/Aqb+Ve9bSX7y5TdNN48IQtJNY0Nc4rmVLEoxrutbHn+b
bW6TZv7ZNkMuamPeQOFuodaTVVWT/0wpUlhDrFowLOHzTYbWRxAVJAYCohiU4kYt
Reh2/F22MW/A/7FqPdqzWCZjELPk07IqjksglupUFckDWZ7Adi3Hj1katvjslD8P
zUNpk6+hwrcdPExmzD6RP+VTbg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:49:13 2026 by rpki-client