Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
File:                     GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json)
Hash identifier:          u97BDOFIwe/Ltr0knSg2GR8vqRkv+pCcdGU198KIXaQ=
Subject key identifier:   AD:9B:49:59:AA:58:4D:C5:75:96:9E:AB:75:C1:A4:1D:71:F9:87:11
Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0
Certificate issuer:       /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
Certificate serial:       1121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
Manifest number:          1115
Signing time:             Tue 22 Sep 2026 17:11:38 +0000
Manifest this update:     Tue 22 Sep 2026 17:11:37 +0000
Manifest next update:     Tue 29 Sep 2026 17:11:37 +0000
Files and hashes:         1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: /DkVDmhErOL+4bRgCA6khzjDvCE/FG/XpANd0c2bKr0=)
                          2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: jCCDoorl7tGGMcr3pfC1q0uHFcnOI0z1MG7mbxcK7Sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl
                          rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4385 (0x1121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0
        Validity
            Not Before: Sep 22 17:11:37 2026 GMT
            Not After : Sep 29 17:11:37 2026 GMT
        Subject: CN=6ab2b6ca-1d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:81:01:65:32:c5:5e:90:a4:a6:a0:a2:fe:
                    cc:ae:d8:cd:9e:60:cb:01:c0:b5:16:83:20:d1:dc:
                    62:fe:90:ed:e8:d2:92:3e:9a:53:b4:0a:91:02:b5:
                    dc:48:1b:a8:af:f7:e0:2d:a8:62:d6:c5:92:d6:01:
                    2e:ee:52:0d:58:3d:f8:78:01:5d:3c:95:6b:92:73:
                    bf:6f:d3:c8:d6:a4:a0:4f:fb:2d:85:78:16:70:64:
                    16:ea:f7:6e:0c:76:e8:04:9e:02:42:c8:7c:ec:a6:
                    b3:b9:7f:71:ac:71:ac:4d:d4:44:d7:ba:e2:39:d7:
                    99:2c:c2:b7:00:a9:df:b4:56:2b:ea:c4:4a:9b:8e:
                    fe:b3:20:d4:e4:0c:7e:dd:b6:7a:fa:9d:a1:48:20:
                    04:45:53:21:68:60:d1:07:d9:d2:83:b1:e7:56:e8:
                    63:ce:8c:e4:da:d9:ee:34:4b:00:8a:6a:da:a6:f6:
                    cd:63:99:59:2f:35:6d:49:2f:c9:08:36:9e:6f:77:
                    8c:61:48:f1:28:3b:90:49:0f:f6:e7:0d:40:fe:dd:
                    2d:3f:a8:fa:8d:f1:ea:03:72:c9:22:e7:b9:27:5a:
                    f0:f5:41:b7:e4:6e:df:4d:fc:05:2f:31:5c:c9:c4:
                    36:11:bc:64:16:dc:8e:42:1c:6a:9a:e0:9b:80:91:
                    f7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9B:49:59:AA:58:4D:C5:75:96:9E:AB:75:C1:A4:1D:71:F9:87:11
            X509v3 Authority Key Identifier:
                keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f5:50:3d:cc:a5:7e:d1:8c:f5:dc:01:2b:7b:2a:ad:74:2d:
         2b:fd:49:50:e0:45:8b:e8:66:12:62:61:2e:b2:7c:63:0e:1f:
         8b:4f:f4:87:63:1b:20:ab:8b:a5:0b:48:66:06:49:00:8d:9d:
         7f:30:05:ac:99:79:ac:91:fb:35:e2:e5:20:89:33:76:c1:37:
         e1:b3:e1:3c:79:5d:1a:3c:3b:01:1e:7b:d0:1e:b3:d4:a2:da:
         7e:e6:0d:94:44:ef:be:bb:e0:dc:43:c0:39:4a:19:3e:c1:69:
         ef:cc:e8:48:a6:e1:36:00:fd:00:75:31:57:ff:57:52:0d:27:
         32:b5:39:a8:92:98:b0:e8:2a:bf:1b:98:63:b7:be:27:ba:53:
         c6:44:e6:4a:d4:cb:93:e4:de:47:21:00:18:7d:ef:e3:ea:90:
         7d:7e:82:59:9f:e6:fe:e7:18:d3:74:ba:d2:1c:8a:6e:e5:22:
         1a:88:59:c4:46:ea:ae:98:9b:a7:ee:42:ed:be:ba:79:0c:2b:
         4c:fe:6f:9e:f7:ab:e4:28:36:bd:5d:72:52:f9:b9:08:55:85:
         ca:f2:de:c6:d5:6e:fd:a1:49:2b:e9:bf:02:09:9f:f7:07:bd:
         dc:ef:9d:7f:4d:33:a4:1e:58:7b:cd:fb:30:16:89:71:20:e9:
         8a:96:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:47 2026 by rpki-client