Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
File:                     gnj0fexbetwgGJf5m8xuK_qI0BU.mft (raw, json)
Hash identifier:          nI7/r5ccxkybDj8+dgk0pNRTETTVSZ6AIFJ7MKBiVgk=
Subject key identifier:   96:71:7C:22:41:95:E2:AF:6C:34:1C:F6:D9:6C:C4:58:07:68:A0:E4
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       4084
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
Manifest number:          3C05
Signing time:             Thu 08 Oct 2026 14:20:23 +0000
Manifest this update:     Thu 08 Oct 2026 14:20:22 +0000
Manifest next update:     Thu 15 Oct 2026 14:20:22 +0000
Files and hashes:         1: gnj0fexbetwgGJf5m8xuK_qI0BU.crl (hash: Vi5wVjyaNYEEUOZNfvDFmXpqUCNiXJuOOsO2YeNyIsE=)
                          2: AF4D576AC55E11E9A634E487C4F9AE02.roa (hash: Ip+BuKNVBvWT59r68mKsxF3JDM5skWNyTIfOgWfcJNE=)
                          3: MfV1xa7bDbXKtafMnwyypyqeh8g.asa (hash: +NbTSmuswGnGY1P97PSRco4HDSCwcmQNJmY7SyJ/cFE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16516 (0x4084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct  8 14:20:22 2026 GMT
            Not After : Oct 15 14:20:22 2026 GMT
        Subject: CN=6ac7a6a7-b3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:46:b7:8e:07:1a:6d:2c:94:3d:e9:b2:b2:
                    ff:26:c4:22:70:a1:47:91:90:5d:80:07:08:3b:4c:
                    0b:75:fa:bd:8f:a4:aa:89:08:05:ef:cb:92:0e:66:
                    9f:79:d8:a4:65:11:6f:ba:d5:69:1b:2f:73:07:57:
                    57:0d:1d:8c:5c:cd:f1:77:76:7b:53:ff:52:35:33:
                    46:7f:31:18:64:71:fe:df:79:11:3d:cc:11:bb:47:
                    0c:95:9f:fb:2e:8b:3a:7f:54:d0:b0:27:1b:3a:61:
                    1a:a3:3e:9b:f5:a0:3a:9e:50:b7:a8:2c:5b:db:58:
                    0a:d9:97:ef:6f:32:a4:64:cc:de:ca:cc:55:43:13:
                    60:97:96:88:c5:a2:77:22:b1:67:c4:62:a8:d9:eb:
                    35:89:64:c7:6f:3e:ef:a8:f1:99:4a:17:0d:22:bd:
                    0f:17:d3:26:8a:4f:a2:2f:9d:66:5a:e4:d1:0f:35:
                    cc:88:ea:e3:eb:20:e5:5f:18:67:ff:00:f9:ae:1b:
                    c8:b1:72:e2:1a:a3:f0:7e:13:3e:93:53:47:92:bc:
                    9c:99:e1:8d:9c:9a:9a:13:1b:37:93:e0:e1:af:e4:
                    be:3c:8b:31:9d:75:6b:3e:c5:6d:41:37:50:bb:b2:
                    d0:3d:21:c6:6a:f4:3f:3b:44:8c:a2:69:48:25:48:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:71:7C:22:41:95:E2:AF:6C:34:1C:F6:D9:6C:C4:58:07:68:A0:E4
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c3:28:0e:b4:59:3b:fb:74:e5:dd:60:6e:d3:a6:f6:22:9b:
         50:ef:89:0e:0b:87:b1:38:d4:97:42:f9:c7:ab:6f:fb:16:fa:
         63:8f:a9:64:39:ad:0a:11:0e:ec:0e:08:a4:21:5c:75:aa:03:
         7b:ad:e9:ca:81:b6:8c:8e:3c:0f:0b:c3:b4:74:f2:a0:fb:df:
         5f:3b:7f:0d:9f:a3:2f:05:ea:8c:44:31:ce:e7:d8:45:a8:e3:
         1c:05:72:8b:87:51:62:9e:4c:76:80:a3:21:0d:b5:b3:cb:6e:
         93:09:0e:06:5d:4d:e7:64:8d:0d:6b:7d:75:76:3f:90:77:50:
         bc:25:1d:01:c6:95:2e:3a:fb:49:29:0b:89:bd:0a:38:2f:68:
         12:1b:fa:00:da:95:1b:5d:6f:5b:64:79:f6:26:58:6e:1d:91:
         5e:a3:be:fd:ea:de:d8:cc:bf:60:0c:2a:b7:45:31:cb:28:f1:
         63:0e:d8:37:0c:fa:e6:fe:06:0a:38:b1:33:8b:d5:a5:40:32:
         03:96:00:40:90:56:52:c4:33:20:2f:d0:23:d6:fa:10:13:3d:
         bb:7b:9a:81:03:85:66:5d:e2:14:bd:16:c8:ee:9f:d9:9c:c3:
         c0:bd:94:e4:04:4f:71:82:bb:06:4c:03:03:a5:be:4f:3c:06:
         23:89:f0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:21:57 2026 by rpki-client