Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File:                     GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier:          CqMOY6IWlLFPWYYEtZdkV7EihF3tMPBerisJOWTnI3c=
Subject key identifier:   2C:21:92:13:11:DE:B3:0B:C2:E3:E2:22:7F:00:4C:9B:51:E0:F2:D1
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer:       /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number:          96
Signing time:             Mon 21 Sep 2026 07:27:07 +0000
Manifest this update:     Mon 21 Sep 2026 07:27:07 +0000
Manifest next update:     Mon 28 Sep 2026 07:27:07 +0000
Files and hashes:         1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: clSTCiW/VtswAHKgPKZ+oyEinkurJC1vJkIBoFrvVJY=)
                          2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
        Validity
            Not Before: Sep 21 07:27:07 2026 GMT
            Not After : Sep 28 07:27:07 2026 GMT
        Subject: CN=6ab0dc4b-b314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:c6:80:e5:ed:cf:03:ea:1f:09:6a:4a:57:
                    6d:a0:6a:a4:1f:a0:6c:1d:da:e2:58:57:86:ab:46:
                    17:fd:f3:8c:af:1e:bf:63:01:66:66:51:87:10:9e:
                    e5:79:9f:5a:6d:75:44:eb:04:ac:72:5e:79:86:01:
                    f2:86:e6:58:c4:44:61:cd:4e:c2:a4:29:9e:cd:99:
                    07:67:62:b2:98:91:9c:85:3a:db:e2:c3:63:ec:89:
                    6a:65:96:2e:86:e9:ff:25:3a:1d:36:cb:c7:65:d9:
                    c6:f0:de:95:53:dd:aa:60:3f:12:f5:53:ff:c1:8e:
                    fc:c2:6a:86:a0:b5:9c:7a:cc:a1:2f:6c:0b:97:62:
                    a5:cb:71:d7:b6:2d:a2:db:e5:df:4d:1f:1b:cf:55:
                    45:05:5a:b7:36:09:c2:3f:78:5a:76:4d:85:7d:1a:
                    0a:94:43:0a:00:ee:2a:ba:94:7d:eb:9f:51:8b:06:
                    4e:dc:21:e7:82:64:07:c7:43:b2:5c:cc:9c:d5:7d:
                    b9:5e:01:64:71:44:4c:5e:20:f8:9a:97:dd:cf:d4:
                    ce:ee:bc:56:17:94:aa:94:cb:de:96:c4:c4:5e:b5:
                    dc:3c:06:6c:c4:ef:db:3f:c3:bc:a9:2e:d0:30:02:
                    32:65:0c:55:17:70:b2:2f:6b:30:6a:c0:00:5b:01:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:92:13:11:DE:B3:0B:C2:E3:E2:22:7F:00:4C:9B:51:E0:F2:D1
            X509v3 Authority Key Identifier:
                keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:9e:9b:8e:2b:61:c1:13:a6:13:85:cc:80:ba:51:72:24:
         bd:0a:d9:af:67:b3:67:dd:e8:c4:2f:d4:5f:40:00:80:c8:56:
         73:19:32:8d:68:c4:db:fc:1d:11:fb:4b:f4:89:47:e1:ee:69:
         8e:00:38:64:c6:4a:dd:8b:48:68:6f:e9:02:8e:1d:ca:5a:33:
         91:92:38:d1:70:48:5b:0a:a0:89:de:98:61:a0:c6:30:b1:f3:
         54:9a:97:9c:bf:59:3d:c6:85:98:da:ec:98:52:bf:4b:ff:00:
         12:41:7f:73:0a:2a:c3:b9:bb:25:eb:ca:cf:95:26:c8:36:04:
         30:61:1d:7b:2c:f9:97:13:f1:d3:e4:97:56:43:ee:22:4d:ce:
         23:79:07:51:3f:65:b3:ae:99:18:cc:fa:f0:a9:1e:b4:c5:8a:
         10:7c:e6:1b:ab:73:a1:53:0a:7c:7c:ae:96:54:b2:89:20:a0:
         f5:95:50:8f:81:3e:59:cc:e3:62:8d:51:07:16:bc:ea:93:1d:
         bf:ea:51:7e:68:cd:32:e0:20:7b:2c:d0:60:e8:31:50:dc:88:
         3e:04:06:cd:12:ac:ba:73:0d:e8:ca:c6:a0:c2:0d:04:c8:e5:
         3b:40:fb:2e:d7:13:75:0a:19:04:80:e3:bf:e2:b2:51:fa:2b:
         ab:4e:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:18:12 2026 by rpki-client