Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
File:                     g1GgqJRYpHQmpXCgKQH45lQuguI.mft (raw, json)
Hash identifier:          dKyA9mJIbUsu2b1PamFBfyR2eQPnivuYdcNlNQnYpmM=
Subject key identifier:   24:48:70:26:7A:3C:B2:C9:A9:6F:2B:3B:DD:35:E4:B0:C2:FA:56:8E
Authority key identifier: 83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2
Certificate issuer:       /CN=A91B7D3D/serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
Certificate serial:       0550
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
Manifest number:          0539
Signing time:             Sat 10 Oct 2026 23:38:01 +0000
Manifest this update:     Sat 10 Oct 2026 23:38:00 +0000
Manifest next update:     Sat 17 Oct 2026 23:38:00 +0000
Files and hashes:         1: g1GgqJRYpHQmpXCgKQH45lQuguI.crl (hash: 26pA1PiqJKQxIVC0s5x4HQXhQJ8vE4OqoYKA2RCZED8=)
                          2: D516EA2AA1E611EDABFD7D7FC4F9AE02.roa (hash: vxznBiBVR6YDAJK7LuojHusJdEYCXrwVVLv7TWoRtB8=)
                          3: D3E15ECEA1E611EDABFD7D7FC4F9AE02.roa (hash: kPi4zM9MhBs1Z7XrTJy2yFMDPKRgd24Q9Ibk3GjMnUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl
                          rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 23:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7D3D, serialNumber=8351A0A89458A47426A570A02901F8E6542E82E2
        Validity
            Not Before: Oct 10 23:38:00 2026 GMT
            Not After : Oct 17 23:38:00 2026 GMT
        Subject: CN=6acacc59-03c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:33:c7:a6:8e:cc:41:ca:c3:32:f1:00:23:32:
                    6b:dc:76:77:1b:27:60:42:21:61:1e:84:b5:87:e3:
                    f0:47:81:1f:1a:f5:dd:21:ee:e9:1e:ec:24:a2:50:
                    db:7b:08:fc:68:18:07:68:39:52:ab:7f:7d:73:7c:
                    8c:a5:d9:17:a2:12:cf:70:e4:b9:ce:b6:cd:a2:e6:
                    ab:ff:63:52:e8:65:38:68:4a:dd:d4:e8:c2:0b:82:
                    65:a9:89:98:c3:bd:31:87:6c:36:37:fa:13:e4:08:
                    e2:48:df:65:71:c5:c6:90:f7:56:98:cd:78:cc:e4:
                    df:80:b9:1c:82:34:77:65:8c:8b:83:75:52:e2:57:
                    73:58:dd:8f:53:ed:0e:eb:69:d4:cd:98:f8:66:4c:
                    96:ee:14:83:ac:ec:db:82:f1:e2:78:7d:47:6f:0d:
                    e6:0c:b9:1b:81:ee:98:df:11:1b:93:a3:f8:9c:61:
                    96:b6:00:09:50:9d:c4:73:f6:0d:93:58:67:0a:b9:
                    49:3b:09:9b:1d:3b:c5:59:4f:3b:61:be:74:76:15:
                    28:d5:30:b3:bc:f1:45:31:e6:ab:de:ca:bb:8f:97:
                    48:9d:17:fb:5b:06:20:56:ec:52:cd:5e:dd:84:3d:
                    19:5a:4b:a3:59:29:1f:a4:40:cb:21:49:b0:a4:06:
                    61:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:48:70:26:7A:3C:B2:C9:A9:6F:2B:3B:DD:35:E4:B0:C2:FA:56:8E
            X509v3 Authority Key Identifier:
                keyid:83:51:A0:A8:94:58:A4:74:26:A5:70:A0:29:01:F8:E6:54:2E:82:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1GgqJRYpHQmpXCgKQH45lQuguI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D3D/233C0B4663BC11EC8B8C832AC4F9AE02/g1GgqJRYpHQmpXCgKQH45lQuguI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:05:75:68:57:e2:7c:87:3e:c8:b6:11:22:50:c8:9c:94:51:
         93:4e:26:45:ed:f8:a9:24:a6:63:ca:03:49:16:b3:ad:8f:3e:
         4b:97:14:8b:59:fd:ee:8e:fc:33:4d:aa:e5:ac:63:74:5d:c0:
         37:05:23:e3:fb:44:72:dc:ed:9a:81:a6:cf:2a:cf:5b:88:50:
         ba:38:d1:34:8e:48:db:97:d7:68:60:ad:6f:7e:5d:80:64:3a:
         b3:08:06:99:11:a5:bd:1f:13:0a:06:79:f5:60:58:d1:1b:c1:
         f6:ed:ce:48:88:40:9b:9d:b3:34:56:98:3e:41:d0:2c:ed:69:
         2b:22:37:f6:07:3d:bf:cf:cd:88:13:c0:b9:5a:99:bd:28:56:
         de:e8:98:e7:b6:ed:33:ff:0a:c4:63:eb:b1:59:a5:4e:de:a4:
         c3:77:cc:45:17:4b:c0:9e:ab:e3:2c:15:c9:2c:1e:b6:cc:2a:
         2a:87:27:3e:42:8b:c4:06:41:ae:06:82:f7:8a:1d:da:a6:a0:
         24:80:df:25:de:3a:56:58:78:4b:90:3e:56:e4:7e:dc:3a:9d:
         62:f9:56:e6:48:23:f9:86:e0:e6:16:c7:42:1a:ca:54:50:3e:
         d5:13:80:45:36:eb:5a:69:92:44:70:c6:50:be:92:d5:73:c9:
         fc:0e:91:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:02:55 2026 by rpki-client