Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
File:                     gFLXiRiFOIg0vD1ozrIclvdiXmc.mft (raw, json)
Hash identifier:          rDeQrTIl2bXxj8C5eirXtFXkZNB6AAKdJSNGj8fYGug=
Subject key identifier:   35:51:0B:6E:E9:47:B5:C2:C9:ED:EB:52:92:DF:6E:41:0A:82:3D:A5
Authority key identifier: 80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67
Certificate issuer:       /CN=A91CBE89/serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
Certificate serial:       1F59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
Manifest number:          1F58
Signing time:             Sun 04 Oct 2026 16:00:57 +0000
Manifest this update:     Sun 04 Oct 2026 16:00:57 +0000
Manifest next update:     Sun 11 Oct 2026 16:00:57 +0000
Files and hashes:         1: gFLXiRiFOIg0vD1ozrIclvdiXmc.crl (hash: bsUpr01caMmUJbzC3VyiG1PZWEfC2QbiizGeKVeyHm0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8025 (0x1f59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE89, serialNumber=8052D7891885388834BC3D68CEB21C96F7625E67
        Validity
            Not Before: Oct  4 16:00:57 2026 GMT
            Not After : Oct 11 16:00:57 2026 GMT
        Subject: CN=6ac27839-060d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:dc:b6:f6:a2:ed:dd:a2:85:43:f4:b2:63:
                    c0:41:f4:26:d9:99:21:43:6c:f8:74:1e:21:75:10:
                    35:8a:af:07:06:fe:e8:29:92:12:bf:c0:46:fc:08:
                    bb:4c:07:ee:c3:38:f7:d8:58:4f:e2:5a:59:b9:29:
                    7a:9a:e8:65:0a:c2:9a:7c:ca:62:63:82:e3:5f:8c:
                    97:52:c2:a0:bf:ed:c4:41:c7:2a:1e:5d:10:18:1d:
                    1a:16:06:43:fd:93:99:77:6f:85:88:fb:52:2d:ba:
                    ba:b4:a8:c1:84:45:4d:41:48:ce:db:02:75:4c:d5:
                    07:a2:2f:7b:8a:02:34:4c:3f:b8:5e:c5:70:9c:53:
                    59:e8:82:45:7d:81:ad:ba:26:44:1d:7f:7d:ca:93:
                    4e:ad:d4:05:d8:a5:97:40:c0:b0:84:b8:37:50:30:
                    11:47:45:2b:93:23:f0:e2:1c:53:10:b3:bc:ed:92:
                    d6:e6:24:eb:04:93:53:80:bc:ac:bd:cf:1d:e5:d7:
                    96:45:a5:ed:14:1b:16:02:48:d9:94:6a:0e:d4:78:
                    bd:cc:44:89:28:84:b9:8f:12:72:77:e7:c6:f1:a3:
                    cb:ed:9c:0d:8b:5d:6a:99:1b:d0:db:0a:8d:f9:f5:
                    58:de:1d:a0:15:7b:31:fd:82:b0:51:d3:19:03:ab:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:51:0B:6E:E9:47:B5:C2:C9:ED:EB:52:92:DF:6E:41:0A:82:3D:A5
            X509v3 Authority Key Identifier:
                keyid:80:52:D7:89:18:85:38:88:34:BC:3D:68:CE:B2:1C:96:F7:62:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFLXiRiFOIg0vD1ozrIclvdiXmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE89/F2726A18763C11E6B01E0859C4F9AE02/gFLXiRiFOIg0vD1ozrIclvdiXmc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:55:3a:74:e7:59:49:68:62:9b:e1:2d:25:41:2e:09:42:e4:
         7e:26:cf:89:3d:13:fc:60:03:92:ac:e4:73:7b:df:52:16:46:
         4a:ee:57:85:cf:14:ff:da:9f:f7:73:c8:9f:93:d6:a7:8c:70:
         07:d5:30:e8:a9:0f:a5:45:6c:72:41:a2:68:7e:2e:e0:8e:a8:
         23:45:be:d4:bb:e3:29:a9:91:2e:ae:ad:0b:eb:5c:91:6b:d9:
         7c:c7:da:46:72:f5:64:ce:92:b6:b3:60:46:55:78:4c:ec:cb:
         4b:4f:39:16:3c:53:70:f4:5b:64:30:3c:aa:4f:6d:30:d1:0d:
         ff:ac:51:80:e5:a0:a6:c3:63:d9:74:c4:df:98:77:0d:85:00:
         e2:38:cd:aa:28:56:47:7c:2a:25:bd:b3:fa:9e:18:60:92:f1:
         4c:81:9b:f8:92:9d:82:f3:99:87:31:88:05:c7:22:82:c1:74:
         5c:ef:d4:0b:cb:77:c6:bc:5f:b4:46:32:ba:a1:fa:db:5b:51:
         31:a2:4a:1f:7a:e1:05:9c:0a:28:88:07:a1:9a:cc:3f:2f:fc:
         58:d6:51:f3:27:89:62:14:f3:3b:bf:85:fe:cc:a2:36:9a:66:
         36:a4:95:bf:3e:3b:1e:09:77:97:78:bb:a1:f8:9e:73:84:47:
         8d:54:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:52:28 2026 by rpki-client