Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
File:                     G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json)
Hash identifier:          uwpNVefmamIjtyxJ+IpyunaKK8QCrW0qie142TNEFEM=
Subject key identifier:   19:4F:49:03:1C:B4:8F:10:75:36:9A:F9:A7:69:56:05:16:19:F3:92
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Certificate issuer:       /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial:       0A41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
Manifest number:          0A36
Signing time:             Mon 28 Sep 2026 19:50:42 +0000
Manifest this update:     Mon 28 Sep 2026 19:50:41 +0000
Manifest next update:     Mon 05 Oct 2026 19:50:41 +0000
Files and hashes:         1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: lSeCa75P+Y9DUD7GMFVGR3m2Hv0agiIhK5FNDlehmbI=)
                          2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: dtXmtJBVm8P8OuQoT+Q52qD+Vudy7GZ/K52aKBTJI5Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
                          rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 19:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
        Validity
            Not Before: Sep 28 19:50:41 2026 GMT
            Not After : Oct  5 19:50:41 2026 GMT
        Subject: CN=6abac512-20d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:60:fd:7a:39:31:2e:3c:c3:0d:96:fb:cb:
                    34:59:12:c2:e6:60:3e:38:30:a3:56:4a:95:23:a5:
                    e7:e8:00:d2:ae:ab:01:3c:fa:61:ee:fb:be:5f:09:
                    b1:57:89:61:76:1a:58:78:be:9e:7e:4c:0b:e6:c1:
                    f9:ac:0e:8f:06:a4:f4:1b:da:ed:12:49:93:55:8f:
                    f7:63:02:e7:aa:ac:c1:6b:71:41:b3:58:ed:e5:7b:
                    5f:a0:2e:82:b1:77:a0:bd:14:e4:ce:8a:23:22:ea:
                    98:f0:0f:24:43:84:7e:ba:dd:a4:b5:2b:0a:a9:f5:
                    07:bb:09:5f:5b:0c:43:94:c3:99:95:51:71:d1:96:
                    fa:cb:29:29:48:a5:a6:74:9e:fd:d1:3c:55:57:1b:
                    5e:15:5a:f6:a3:34:cf:5f:62:29:cf:96:00:14:51:
                    ed:d3:ef:61:a2:99:73:34:7c:56:ea:ac:f0:38:75:
                    fd:32:80:07:4d:8b:08:25:02:0a:9b:49:c3:52:8a:
                    c5:2d:a7:0f:fe:3a:29:37:2e:e6:02:5a:5c:e3:f6:
                    19:9b:cb:1e:9b:46:fb:ab:86:b7:b5:a7:ae:c7:5e:
                    83:5b:fa:93:ad:71:e2:d7:dd:6c:d0:5c:43:7d:f4:
                    1e:03:98:80:14:00:d8:03:73:76:16:a5:2d:0e:a9:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:49:03:1C:B4:8F:10:75:36:9A:F9:A7:69:56:05:16:19:F3:92
            X509v3 Authority Key Identifier:
                keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:58:be:96:e6:5a:e7:85:0d:9f:36:14:eb:c7:59:10:14:
         46:2f:7f:12:b3:e1:0f:45:a0:4d:c7:82:4d:87:42:8e:d5:c1:
         1f:ac:87:70:1e:89:bf:a7:b7:09:c6:57:1d:5f:ea:17:77:17:
         88:3e:eb:b6:38:56:a4:ee:ee:28:d7:9e:89:5f:57:46:76:b1:
         5b:56:00:bf:2d:93:54:29:97:4d:da:2e:01:18:f0:4b:d0:cd:
         a5:fd:be:8a:f4:b5:1b:79:c4:6b:ad:f0:f5:54:8c:cd:d3:5a:
         81:cd:af:c1:f6:b8:61:5c:95:d1:3e:ae:9f:f9:96:1c:06:73:
         cc:ef:bd:46:75:fe:f8:38:e4:f6:e3:cb:5c:47:4e:55:c7:61:
         6c:aa:ba:1f:37:7c:b9:65:12:3e:65:66:02:59:07:c9:0c:b0:
         64:84:33:9c:83:4c:cd:ff:73:ca:c4:c0:c5:1d:14:0b:de:ab:
         97:67:3d:aa:d8:f0:fe:5f:24:78:07:35:cf:8e:d9:4a:83:8f:
         7a:08:9c:6c:a1:8a:6c:87:07:bb:08:7e:11:ca:1f:b3:95:35:
         d1:57:97:52:0d:33:e9:21:b0:8b:00:ed:78:14:ef:20:09:5f:
         97:23:73:16:1b:6c:9e:ef:69:d2:af:df:57:6a:fe:2c:5b:28:
         8f:fb:d8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:37:27 2026 by rpki-client