Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
File:                     mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json)
Hash identifier:          3Zn0fBnL552Bx3sg4CJfKI/BDLlOVT1uf7tIL+C6YM8=
Subject key identifier:   43:D2:4F:A1:F4:6A:FF:18:5F:89:30:EF:36:55:C9:06:DA:69:01:56
Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7
Certificate issuer:       /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
Manifest number:          0804
Signing time:             Sun 20 Sep 2026 14:47:02 +0000
Manifest this update:     Sun 20 Sep 2026 14:47:01 +0000
Manifest next update:     Sun 27 Sep 2026 14:47:01 +0000
Files and hashes:         1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: Fx8SUQH/pFlHGTOIv8AKLF4X+N+mPmdwlZakKwr1fqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl
                          rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7
        Validity
            Not Before: Sep 20 14:47:01 2026 GMT
            Not After : Sep 27 14:47:01 2026 GMT
        Subject: CN=6aaff1e6-267c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:94:09:4a:22:a8:1a:c7:39:0f:0f:b7:0f:
                    f0:99:f8:29:31:97:f2:c4:b9:ed:47:da:c7:90:5f:
                    8f:ab:8f:6e:f4:86:79:58:13:95:ec:26:06:01:df:
                    e1:b4:25:0b:79:63:96:c3:d8:52:29:11:5a:d3:cc:
                    4f:52:95:4a:08:58:88:52:f0:25:59:ab:0e:a4:8c:
                    09:8d:53:3e:ab:1c:fa:51:3c:60:27:da:e5:09:b2:
                    46:d9:b4:66:2b:5f:7b:ce:f6:bc:81:23:46:1e:91:
                    04:fd:ad:94:0f:e6:57:ae:8d:9b:3c:be:a4:82:12:
                    18:47:c2:a0:b2:8c:ea:2e:35:5f:79:77:ad:48:5f:
                    08:d2:9c:43:4c:60:9e:d4:5e:92:09:06:da:10:be:
                    ec:41:1b:ec:14:72:f7:7f:9e:05:3c:d1:99:be:95:
                    07:2e:6e:48:12:e1:6f:d1:f8:e3:d2:be:c9:e8:a5:
                    8a:dc:f6:13:46:ce:3e:e5:da:db:3e:dc:47:f7:a5:
                    c8:f3:44:8c:48:f1:2d:5d:76:c4:6f:23:9a:f7:d8:
                    58:cb:d5:82:28:ab:f4:17:bc:6f:02:61:f3:87:7a:
                    d5:39:2d:ef:1b:ae:50:b8:0f:f2:fe:ac:c7:fa:cf:
                    4f:84:46:1a:f4:05:b4:7f:d5:bd:3a:d2:9b:7c:d5:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D2:4F:A1:F4:6A:FF:18:5F:89:30:EF:36:55:C9:06:DA:69:01:56
            X509v3 Authority Key Identifier:
                keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:86:0d:97:e8:9f:61:1a:26:71:86:0d:49:0f:e5:bd:1d:3a:
         8f:5a:fd:8f:96:a9:27:8c:48:07:d7:14:d3:ba:68:d2:1f:5a:
         5c:6e:0d:08:b4:a8:c0:c4:db:5b:71:5e:c1:c5:c8:87:d8:5d:
         38:55:59:ce:ed:15:51:af:a0:90:17:03:b8:ab:bf:6e:9a:f9:
         85:bf:9f:69:87:55:75:95:b9:80:cf:c3:1b:ac:73:28:97:02:
         bc:81:a3:61:ca:f6:74:f3:73:1a:73:3e:d1:55:8e:bb:6e:43:
         41:67:4a:17:b8:24:0e:23:e6:59:02:2a:52:cf:ec:1f:d0:49:
         b0:21:96:2b:a3:72:64:94:c2:45:03:a1:22:37:d6:1a:b5:9a:
         2c:41:54:a8:1d:63:de:8f:55:ab:06:0e:bf:d6:29:97:74:0c:
         4e:9d:31:d3:72:70:69:70:1c:99:d8:a4:aa:52:a3:f9:21:f0:
         f9:8a:6a:f4:94:02:a6:86:74:a7:29:2e:44:ba:16:60:ed:64:
         be:d0:63:64:66:3b:34:d4:e6:23:52:1c:5e:f8:a4:06:91:13:
         3a:34:37:d6:42:53:b1:d6:1c:77:24:eb:05:a2:e9:94:ca:46:
         4c:2b:ed:ee:93:4e:1f:b2:e2:5c:5f:22:ee:bc:93:ce:bf:31:
         8d:67:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:28:48 2026 by rpki-client