Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File:                     G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier:          fR4ifEaqlWx+zcBTlzk98pG3ATlwuc9SeLtTB+inh0s=
Subject key identifier:   8C:A8:AF:2D:2D:16:0D:F1:07:F5:9A:BE:24:67:EB:59:0D:3C:21:C6
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer:       /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number:          0291
Signing time:             Sat 10 Oct 2026 22:46:30 +0000
Manifest this update:     Sat 10 Oct 2026 22:46:30 +0000
Manifest next update:     Sat 17 Oct 2026 22:46:30 +0000
Files and hashes:         1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: LNNAHUO0yz/9iJv1yONr/Omw9znwYHDDpG8L7rk3+SQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 22:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
        Validity
            Not Before: Oct 10 22:46:30 2026 GMT
            Not After : Oct 17 22:46:30 2026 GMT
        Subject: CN=6acac046-b8b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:42:23:5f:22:7d:3b:cb:fe:34:d7:fe:2f:
                    8c:70:5c:54:14:d3:46:56:92:01:6d:78:00:32:c7:
                    cf:32:ed:2a:d2:27:83:10:88:b4:57:3b:5f:4b:e3:
                    63:c7:d7:61:ac:91:03:63:be:4f:3e:80:9d:76:e5:
                    73:05:8c:d3:bc:7d:b5:44:f4:6d:33:91:9d:ad:2c:
                    af:59:dc:e7:76:63:58:f8:48:ab:03:da:7c:94:31:
                    54:69:4c:99:fb:52:b7:5e:b2:b2:93:41:aa:ca:44:
                    c3:f1:b0:53:df:2e:5d:64:49:52:63:53:63:6e:20:
                    6d:69:96:bb:91:0b:1d:15:46:f9:b3:ba:45:50:12:
                    5a:91:80:45:d3:36:b5:00:47:d6:0d:91:11:46:36:
                    c4:80:8f:aa:f6:72:5e:8c:07:af:c7:5f:e9:60:16:
                    53:d1:a9:89:ea:02:4d:a9:42:22:49:42:dc:4c:79:
                    e9:4a:30:50:10:7f:40:e5:72:d8:94:fb:43:52:b7:
                    b3:22:88:bb:49:55:0b:c3:0a:04:a2:72:d5:ce:11:
                    d9:ab:ff:17:b7:f4:6d:b2:51:64:d2:37:5a:c6:f6:
                    ef:f3:21:8f:17:ea:ec:3c:05:15:1b:9e:d8:f8:77:
                    f6:7c:55:fa:bf:e9:ed:f7:b2:0c:ed:92:06:01:62:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:AF:2D:2D:16:0D:F1:07:F5:9A:BE:24:67:EB:59:0D:3C:21:C6
            X509v3 Authority Key Identifier:
                keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:60:66:38:08:08:bd:90:38:d1:f0:1e:de:01:ae:ed:c3:bd:
         cf:09:21:de:69:d6:12:80:a9:fb:dc:46:34:1d:4e:bd:67:86:
         59:fe:7b:e8:94:74:d4:92:37:28:48:29:7b:5c:61:02:5e:49:
         82:fb:2f:39:c6:61:a7:6e:c5:1d:eb:b3:79:9c:79:4b:8c:e6:
         9a:8d:d7:28:49:00:5c:90:39:b4:c1:c5:25:dc:c7:c7:96:9d:
         b2:54:fa:67:6b:f2:78:f0:b5:b0:b6:52:44:2a:ac:87:f0:fa:
         3f:b8:9f:63:a4:f4:61:26:2b:76:e8:47:2d:b8:5a:cb:be:e2:
         61:f2:94:79:9c:bd:56:a1:c9:48:8f:13:7a:50:f3:56:00:80:
         8a:d6:5c:ae:3e:d6:81:04:e8:7c:82:9b:86:f4:74:8f:4a:ae:
         8e:ae:c9:c0:3c:6b:2a:a0:5c:c5:dc:ae:ca:b8:63:71:2b:ff:
         42:f8:fa:79:2b:73:e5:0c:2e:27:0e:b1:4b:b6:17:4e:aa:a5:
         ec:eb:47:3d:f2:27:c2:63:42:db:9c:9d:07:80:0e:6d:2c:5a:
         9a:fe:57:10:15:96:66:7e:6c:6b:2e:a2:9b:ea:80:34:5a:9d:
         35:7d:8f:7b:b8:db:08:78:43:03:59:9a:5e:ac:17:04:87:04:
         0c:9c:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:51:55 2026 by rpki-client