Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
File:                     _-G3qHKaDsu-yLL9mpe3SCbM28U.mft (raw, json)
Hash identifier:          AXmzoyQRvUcBpDffLNtbCyNZE1HkBauaOLy57M3qbvQ=
Subject key identifier:   66:CE:10:CF:5A:E3:69:BF:84:67:55:D4:D2:FE:91:95:D7:EC:7E:D8
Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5
Certificate issuer:       /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
Certificate serial:       02FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
Manifest number:          02F0
Signing time:             Wed 23 Sep 2026 00:48:28 +0000
Manifest this update:     Wed 23 Sep 2026 00:48:27 +0000
Manifest next update:     Wed 30 Sep 2026 00:48:27 +0000
Files and hashes:         1: _-G3qHKaDsu-yLL9mpe3SCbM28U.crl (hash: 0TuwT75D31izNF+HH0T9Y6mN2zI0hipJNa5NjbBYVyk=)
                          2: 41669A1AFA7111EFBBC5374BC4F9AE02.roa (hash: olDCuTzSXRa+4yuV9e6OJTjYDQDslUZvSPW/HYSoqc0=)
                          3: EEA8968C461A11ED898DD14FC4F9AE02.roa (hash: rO0tDNcttMplae7nIOvYG1R1bdxFHJg9RWvc/5wp/yQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl
                          rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5
        Validity
            Not Before: Sep 23 00:48:27 2026 GMT
            Not After : Sep 30 00:48:27 2026 GMT
        Subject: CN=6ab321dc-14ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:d6:47:4f:35:ca:fa:35:cc:be:2a:8c:f0:
                    a6:e0:5e:2c:d1:e5:63:96:28:3a:7d:3d:eb:e2:0e:
                    9f:bb:52:56:ac:4c:55:44:73:12:7a:f1:c4:0f:05:
                    54:e8:4e:35:e2:e7:84:d6:e1:16:e0:33:35:15:1b:
                    3d:2b:01:ac:f0:f9:83:cd:ec:42:2f:f4:a7:11:66:
                    62:91:84:bc:28:9a:4a:29:8c:e6:f7:8c:00:72:48:
                    b2:f3:4a:86:5b:63:f4:16:b3:1e:77:02:7e:21:79:
                    fa:77:96:eb:ae:5a:e3:f0:1d:04:4a:98:ca:24:7c:
                    30:b3:70:b6:b3:73:3f:54:0f:7b:6b:f4:31:7a:48:
                    3a:7c:a7:15:8a:59:ca:fc:93:f6:dd:bc:83:99:6a:
                    fd:d3:0c:22:46:0d:e0:5c:6a:48:57:32:8d:3f:6e:
                    c8:fe:96:2f:24:9a:10:52:f3:98:02:8a:95:f8:c5:
                    cd:2d:4e:6e:75:7a:83:96:37:8c:5d:08:a1:e4:8d:
                    e3:91:9f:12:83:61:c3:f0:58:1c:c3:0e:40:b2:09:
                    de:7d:90:9f:aa:a9:df:3b:ec:cf:1d:0b:35:2a:15:
                    aa:9e:67:9b:e9:88:3a:09:d5:e4:45:6d:88:a4:48:
                    0e:8c:b9:0a:1c:ce:56:1d:45:6a:27:77:09:2b:ac:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:CE:10:CF:5A:E3:69:BF:84:67:55:D4:D2:FE:91:95:D7:EC:7E:D8
            X509v3 Authority Key Identifier:
                keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:f8:fa:bd:1e:65:7b:c7:2e:dc:86:99:3e:03:7d:a4:0f:
         0c:fd:2a:ab:05:9b:00:81:cd:d0:53:81:f3:4d:ec:e7:19:cb:
         ce:37:90:12:20:40:23:6d:c0:5c:72:3c:e7:a2:14:85:01:23:
         95:05:0e:a2:14:81:c9:4d:eb:28:96:04:6b:93:66:1a:67:b9:
         c4:35:c8:1a:cc:c3:32:27:8d:cb:dd:37:34:74:de:31:bb:e5:
         b5:ef:3c:0c:dc:26:07:bc:04:60:3e:ea:4c:42:48:e9:40:b2:
         aa:bc:27:30:c1:f2:52:bd:8e:51:44:47:05:2f:d1:4c:91:c8:
         33:4e:53:97:57:79:7b:25:ef:3c:70:88:2b:02:1f:27:67:82:
         bd:cc:14:ad:8b:3a:36:0a:5a:ae:42:72:2e:e8:bc:f1:fc:bd:
         37:7c:1c:20:fd:22:92:90:4f:4b:2c:2f:5f:e4:fa:f2:42:68:
         e6:f6:bb:67:45:75:f9:f3:ff:b9:dc:28:5f:d7:65:53:21:d3:
         f9:31:38:a5:89:f6:83:9e:3b:3a:92:26:b3:a7:d6:82:d5:d2:
         38:21:2a:d4:73:72:d3:23:87:80:b9:a5:62:3f:7d:28:d8:1a:
         8e:ea:f7:a6:d6:8a:5d:da:ad:27:36:a8:a4:76:25:cb:a7:30:
         2b:98:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:43:25 2026 by rpki-client