Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.mft
File:                     gUw9S99ibncSapVHJx_BQKMNgqk.mft (raw, json)
Hash identifier:          M+lr0K12JORA5y/QYqV/5jYAbgmYUj/vD+qnP4pzt/k=
Subject key identifier:   B3:0B:51:29:BE:1B:74:45:44:D1:8C:06:20:E8:CA:ED:EB:00:FA:B7
Authority key identifier: 81:4C:3D:4B:DF:62:6E:77:12:6A:95:47:27:1F:C1:40:A3:0D:82:A9
Certificate issuer:       /CN=A91E1B78/serialNumber=814C3D4BDF626E77126A9547271FC140A30D82A9
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gUw9S99ibncSapVHJx_BQKMNgqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.mft
Manifest number:          49
Signing time:             Sun 11 Oct 2026 06:29:21 +0000
Manifest this update:     Sun 11 Oct 2026 06:29:20 +0000
Manifest next update:     Sun 18 Oct 2026 06:29:20 +0000
Files and hashes:         1: gUw9S99ibncSapVHJx_BQKMNgqk.crl (hash: +QS7UWq1JkobkkmKF1o6llcc74TUnNxiIo0ruH5wH6o=)
                          2: 86592A98A16911F1861203765411F970.roa (hash: 1nAFBJkOlQ0I7ClkOxN2SOxc0bxFcUi1WkWl9lz3Nec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gUw9S99ibncSapVHJx_BQKMNgqk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B78, serialNumber=814C3D4BDF626E77126A9547271FC140A30D82A9
        Validity
            Not Before: Oct 11 06:29:20 2026 GMT
            Not After : Oct 18 06:29:20 2026 GMT
        Subject: CN=6acb2cc1-1032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:b0:93:5c:65:82:d7:81:ee:92:1a:60:d5:
                    16:0d:97:fc:10:76:5a:de:75:1b:ff:29:0f:08:7f:
                    be:a5:03:ff:1a:39:2e:df:51:9a:35:41:07:46:04:
                    e9:e7:18:5c:e9:9a:c0:69:10:b1:d0:e7:79:85:69:
                    e8:9a:32:dd:c9:3a:2e:e9:11:11:20:c6:0d:28:f4:
                    be:41:fa:05:48:83:a0:c4:59:f4:aa:43:3d:5b:54:
                    32:90:8b:29:cb:a5:84:11:b6:bc:44:a3:2f:af:b5:
                    55:f8:69:92:22:1b:b8:ca:13:1d:1c:5d:b3:b7:ec:
                    46:2e:97:aa:f3:a6:f4:41:8e:11:2b:e3:4b:b4:a5:
                    59:cf:0e:2f:8b:ec:51:54:e4:51:c3:1f:5a:06:41:
                    fd:0a:d1:87:a5:1b:60:80:01:2c:64:c1:3f:eb:23:
                    aa:4f:59:d4:0a:ce:ed:ff:a0:37:ba:2d:7d:9e:4b:
                    60:cb:1b:6c:63:0a:58:62:70:8b:ab:de:cc:e3:74:
                    76:2b:3e:9f:97:d6:53:04:3c:d3:36:f8:9b:2b:e4:
                    54:95:9d:62:70:b4:03:fa:1f:11:a4:1c:ad:46:7a:
                    a1:2e:d4:a8:2d:6f:59:cb:9e:28:ef:6e:89:47:a7:
                    78:cc:1b:17:26:83:a1:3f:99:ae:7b:9d:d7:54:3b:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0B:51:29:BE:1B:74:45:44:D1:8C:06:20:E8:CA:ED:EB:00:FA:B7
            X509v3 Authority Key Identifier:
                keyid:81:4C:3D:4B:DF:62:6E:77:12:6A:95:47:27:1F:C1:40:A3:0D:82:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gUw9S99ibncSapVHJx_BQKMNgqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B78/7C9F17FC595B11F1BE59236A9D833773/gUw9S99ibncSapVHJx_BQKMNgqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fe:72:4d:18:36:5f:67:d9:6f:fd:fb:d4:ab:6e:34:00:2e:
         e3:d4:34:67:f9:6d:01:dc:58:28:be:e3:ed:64:15:e4:da:59:
         d0:ea:2f:c5:d0:bc:1e:ae:53:98:01:97:6e:3f:47:5a:10:43:
         90:12:64:96:87:31:e5:00:b3:1e:37:0f:2c:42:2c:3d:29:a6:
         2e:6a:31:6f:b9:4f:cd:e0:26:eb:bf:2d:14:6d:79:64:16:e4:
         ed:c4:89:c6:f4:42:6f:26:45:aa:8d:38:d3:96:ca:88:d2:00:
         0d:85:2d:92:01:f9:42:33:e5:cc:b9:5f:c4:f5:4e:c6:63:76:
         13:f4:96:39:b0:0e:2f:38:b4:68:62:27:1c:64:2f:b0:86:ec:
         90:91:d5:1d:63:67:4a:60:5b:47:4a:b4:8d:73:09:d0:68:b6:
         e5:7f:17:c3:dd:6d:8d:a1:8e:37:e4:8e:33:b5:53:d7:c3:32:
         23:f5:b7:c7:b1:af:d1:70:3d:ec:29:00:2c:4e:f1:dc:26:43:
         b5:ee:0c:6e:ce:22:e7:0f:14:16:d0:0c:bd:e6:d7:24:69:7b:
         c8:9f:08:49:b4:1f:20:7c:80:6d:89:e5:92:73:52:94:88:d1:
         85:fa:dc:69:ec:d8:83:e5:93:91:d7:1a:24:af:dd:8b:5e:b8:
         33:09:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:57 2026 by rpki-client