Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
File:                     gUM6Y8LXXQAyVSxCbENTPsrINRU.mft (raw, json)
Hash identifier:          3IlZGMCtbkvqpCHKgpIbR6wgVOiUEBIhvaqcdhJ6P78=
Subject key identifier:   A6:FE:19:03:1A:DC:A5:81:3D:48:E8:BC:3A:42:07:7B:82:0B:5A:11
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Certificate issuer:       /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial:       0820
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
Manifest number:          0818
Signing time:             Sat 26 Sep 2026 21:16:42 +0000
Manifest this update:     Sat 26 Sep 2026 21:16:41 +0000
Manifest next update:     Sat 03 Oct 2026 21:16:41 +0000
Files and hashes:         1: gUM6Y8LXXQAyVSxCbENTPsrINRU.crl (hash: sJkSlgCJ5PCen+Ce24zKeDWe5A1QmFhrKaHM3SXaRho=)
                          2: DDFEB10C385E11EB8E85F467C4F9AE02.roa (hash: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
                          rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 21:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
        Validity
            Not Before: Sep 26 21:16:41 2026 GMT
            Not After : Oct  3 21:16:41 2026 GMT
        Subject: CN=6ab8363a-b179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:bb:03:f8:82:32:a8:b8:68:99:bf:bb:fd:
                    78:f7:ac:7e:4a:fe:d7:5b:03:f0:ad:f3:50:01:e2:
                    69:c2:a7:da:7d:06:5c:3e:d8:6f:ef:80:cf:02:70:
                    40:10:1f:40:d0:12:05:67:af:39:c2:b1:22:93:cd:
                    b5:ce:52:a7:61:d5:8e:5a:8b:03:bc:a8:bd:ba:d3:
                    51:be:e2:f3:b5:f7:4e:c9:e4:57:ad:a6:0c:5a:b2:
                    e4:1e:3b:e0:a5:6f:90:0a:93:b2:09:d9:8a:fd:fc:
                    2e:a1:2f:4d:f0:9e:a8:79:12:42:c8:b7:37:69:7b:
                    00:aa:eb:c0:1c:24:a8:61:e5:f3:f7:fe:6e:40:a5:
                    5b:db:f8:f2:08:16:60:46:66:0c:02:23:bb:6b:4e:
                    06:2d:f6:61:18:e9:85:b2:db:37:92:62:e8:7a:2a:
                    0b:03:a7:5c:e4:a2:d2:29:5b:87:eb:39:ae:0c:b4:
                    93:5e:f3:0d:e9:0f:48:4e:3e:89:34:e8:73:ff:3b:
                    be:8a:6a:1d:81:be:4f:b5:af:7c:45:a1:3e:1a:53:
                    cb:9c:25:3f:f9:17:57:d9:54:46:6b:04:04:7f:29:
                    9a:25:c3:fc:12:71:57:f9:e1:f7:83:85:4e:5a:a2:
                    ab:05:2d:01:d6:20:23:ad:17:88:56:72:c0:11:e9:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FE:19:03:1A:DC:A5:81:3D:48:E8:BC:3A:42:07:7B:82:0B:5A:11
            X509v3 Authority Key Identifier:
                keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:97:14:30:55:bf:7c:b8:69:70:db:73:c9:0e:f8:b4:78:
         e1:91:0a:8a:a9:bb:fc:40:09:84:cc:3a:13:74:d9:c1:54:53:
         56:f8:5e:6e:c5:b1:5b:52:61:19:34:4e:f4:aa:0e:f6:f3:fb:
         7e:48:de:23:77:0f:e3:7e:b6:fc:d4:97:89:23:49:cc:0e:fb:
         39:67:70:e8:08:be:70:de:77:27:43:a9:cf:35:79:ad:b7:44:
         fb:f7:27:83:ee:ff:f2:f6:ab:04:4c:7b:c7:25:a0:4f:28:93:
         eb:07:be:6e:5f:f5:4f:40:03:06:4f:af:bf:85:a3:60:3a:66:
         8c:56:7d:17:b1:44:93:0e:60:bc:cc:11:d6:94:7a:da:1a:d1:
         d9:42:16:dd:b4:9a:4d:bf:1c:46:c2:33:03:6c:18:e9:26:cf:
         07:ef:1f:b4:71:0a:fe:40:d5:65:69:75:5e:05:df:ab:99:33:
         fd:9c:38:a0:dc:b4:12:d9:76:74:a8:e3:ee:f7:13:ab:c4:28:
         94:c1:14:16:00:3e:5b:f9:8c:7e:1e:87:85:ae:b7:c0:ed:01:
         f1:15:f7:b8:e6:38:47:68:cc:02:45:4e:83:a3:cc:a4:3a:cf:
         36:cc:25:2c:77:ff:4e:32:9f:b0:b6:78:bf:20:b6:88:d7:2d:
         a7:8e:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:35:13 2026 by rpki-client