Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File:                     GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier:          qzKW1/rPkcfOERlCG7HnQ+iwHM4C4Y6Qb2MD+A4J5So=
Subject key identifier:   46:13:DD:56:9D:7F:A6:E4:6D:AB:74:EB:F7:BA:8A:BD:02:5A:52:31
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer:       /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number:          0388
Signing time:             Wed 23 Sep 2026 00:22:38 +0000
Manifest this update:     Wed 23 Sep 2026 00:22:38 +0000
Manifest next update:     Wed 30 Sep 2026 00:22:38 +0000
Files and hashes:         1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: Crp0tUtdCORXG+sYt96Ct6CWC2j0SXHs+w4hVCG652E=)
                          2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: zggpt7R4a+PI4pARo9mUAXvumVGB88Ycl82ZQK6m+OE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
                          rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
        Validity
            Not Before: Sep 23 00:22:38 2026 GMT
            Not After : Sep 30 00:22:38 2026 GMT
        Subject: CN=6ab31bce-1c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:51:9d:c1:73:ad:76:ea:39:6b:b1:90:28:
                    fe:17:d5:0f:64:63:a8:0a:22:03:93:dd:1a:15:cd:
                    65:ec:cf:51:ca:da:5d:96:e3:0f:1f:1a:07:0e:5a:
                    76:5b:0a:6d:04:78:22:6c:ae:75:95:49:64:d9:4c:
                    16:a0:f3:b3:4d:3b:1f:dd:a3:a7:df:79:57:36:f5:
                    a6:31:4a:a2:0b:b0:0b:ee:51:d3:00:d8:f6:9d:ec:
                    f0:82:34:2d:5c:08:26:48:fd:a6:06:ef:cb:15:57:
                    6f:3d:50:1f:22:1b:c0:c4:e2:d9:e3:46:6d:62:6c:
                    68:cd:2b:ed:8c:8c:8c:e6:a6:48:e3:66:5d:53:25:
                    f4:ae:d2:af:f5:1e:67:92:70:af:04:aa:6c:11:a5:
                    62:47:26:9f:c1:2d:08:58:bc:8f:47:75:a9:d7:53:
                    8e:9c:21:29:28:3d:1c:d3:ac:6c:ac:d1:80:38:07:
                    58:cc:26:95:3b:12:f9:99:9c:6d:0a:6e:26:61:59:
                    e7:ca:df:38:56:a0:fc:0c:c5:d6:02:52:a8:ad:ce:
                    a8:f8:07:69:d4:5c:18:6a:70:cb:91:b9:f8:07:59:
                    e6:84:ed:a5:ac:a8:41:4c:f2:af:dc:f3:c8:eb:e5:
                    5a:1c:e8:6b:9d:0f:15:a4:fc:55:97:8f:6e:48:30:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:13:DD:56:9D:7F:A6:E4:6D:AB:74:EB:F7:BA:8A:BD:02:5A:52:31
            X509v3 Authority Key Identifier:
                keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:6c:a8:e4:07:bd:93:2a:fa:fb:ef:a3:2f:4a:69:e1:d2:
         e5:62:67:fe:97:d7:dd:c2:38:d5:44:ea:2c:75:63:63:65:9f:
         2f:c1:9e:8f:08:22:24:6d:ae:98:d3:18:c1:30:7a:a8:e7:5e:
         bd:02:ea:a0:59:0a:16:c6:95:45:2f:b0:80:14:31:01:e6:3e:
         b0:7c:cc:ad:92:03:ab:70:21:a2:0d:1c:57:3c:9f:0d:db:72:
         e8:0b:56:8e:7c:af:c2:f5:a9:9c:ff:40:f9:1f:74:ab:fd:5f:
         e0:32:4e:b8:f3:11:05:2e:17:68:3a:f0:c4:a3:aa:c6:ed:fa:
         12:60:ae:2d:4b:43:d3:33:40:cf:cf:d9:b5:a6:71:a9:ed:a8:
         38:69:ee:cb:5d:a1:73:e8:89:fa:66:2f:66:73:12:c6:5b:f1:
         5a:ec:ca:3d:bf:a3:a2:1f:28:54:65:1e:a8:4a:b9:ac:6d:f5:
         3c:01:11:64:fd:81:d2:b4:8e:13:37:a2:dc:61:3f:af:20:2b:
         57:92:b1:97:65:8f:fa:7f:97:aa:0d:d5:32:99:ee:d1:c5:da:
         08:45:d6:8e:d5:95:92:a9:f1:51:4d:e7:8a:f1:e7:b9:88:70:
         f5:56:5f:b3:b5:48:a0:eb:72:69:88:ac:38:ec:df:b0:03:34:
         2a:7c:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:39:04 2026 by rpki-client