Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
File:                     gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft (raw, json)
Hash identifier:          3DO4f0kO9mRhN1HfPjp6/gTNwqm1BUStoAqnhcTsV1E=
Subject key identifier:   1E:69:89:D7:73:27:A5:F6:87:27:8D:93:94:F6:0E:E3:34:49:5B:8D
Authority key identifier: 81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD
Certificate issuer:       /CN=A91393AF/serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
Manifest number:          17
Signing time:             Fri 25 Sep 2026 09:10:43 +0000
Manifest this update:     Fri 25 Sep 2026 09:10:42 +0000
Manifest next update:     Fri 02 Oct 2026 09:10:42 +0000
Files and hashes:         1: gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl (hash: d+2VNTgkUhErW9K5mcoJv2OUQ1OzzPb+xHhcesSninU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl
                          rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91393AF, serialNumber=81A74ACBF59FA7520ECE6CC5C43627A9BDAA72AD
        Validity
            Not Before: Sep 25 09:10:42 2026 GMT
            Not After : Oct  2 09:10:42 2026 GMT
        Subject: CN=6ab63a92-7da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:1d:98:2e:d5:7e:37:95:32:a7:90:2e:ac:
                    36:20:c1:e6:93:6a:aa:3d:01:e7:4b:8d:1a:53:a6:
                    0f:ed:90:d1:cc:c0:fd:52:2e:44:4a:20:95:5f:a6:
                    8a:f0:9d:3d:78:15:22:2e:20:d7:2d:d0:2c:e7:bd:
                    33:bf:63:61:d0:0f:50:17:3f:e8:ac:bc:31:9f:78:
                    48:ac:b8:1d:73:0c:bc:f5:25:b1:d7:69:2a:ea:55:
                    2c:60:a4:fb:b7:e4:84:4e:94:78:11:5a:b0:c7:2d:
                    c7:72:e0:93:48:e4:e5:13:f2:59:1d:2d:43:31:90:
                    59:ae:db:c4:05:33:24:b0:8a:11:9a:22:43:4a:63:
                    63:26:dd:0e:e3:0b:83:e2:53:1f:fd:d7:67:4f:33:
                    7f:3b:b6:b9:96:24:af:8d:cb:c6:6f:12:0d:9f:76:
                    74:07:85:00:0a:c5:7d:20:53:de:fe:69:03:b7:2f:
                    11:11:3a:03:11:a2:c2:e5:22:72:bb:a7:1c:20:ab:
                    84:70:6b:e7:d3:a2:a7:91:1e:80:dd:62:33:76:05:
                    f5:a9:21:2f:59:f2:bb:7a:9d:cd:65:46:a8:9c:f7:
                    e1:0b:ad:9b:82:46:69:5b:1c:28:7d:b8:e7:59:9a:
                    55:9d:99:1c:e4:54:0e:0f:39:30:10:a0:d1:2b:54:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:69:89:D7:73:27:A5:F6:87:27:8D:93:94:F6:0E:E3:34:49:5B:8D
            X509v3 Authority Key Identifier:
                keyid:81:A7:4A:CB:F5:9F:A7:52:0E:CE:6C:C5:C4:36:27:A9:BD:AA:72:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gadKy_Wfp1IOzmzFxDYnqb2qcq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393AF/3CBD07F8995B11F1BE0CE0905811F970/gadKy_Wfp1IOzmzFxDYnqb2qcq0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:18:d7:7f:e8:7a:1d:98:4a:53:03:34:cb:ff:90:b0:ce:
         60:9a:57:03:8b:cd:c0:85:2c:a5:68:3c:db:5e:00:28:03:37:
         bf:e7:6f:14:19:2b:4b:17:a8:11:ed:2d:f8:6a:5a:52:2f:fb:
         3e:02:1e:2c:34:de:bc:98:58:3b:30:91:51:19:c3:e8:30:89:
         d9:85:08:21:65:0c:d2:25:ba:fa:fd:aa:58:98:ae:6f:ac:b0:
         ce:b1:42:5b:8e:97:ee:43:ee:d2:2f:69:7d:04:b7:82:62:d6:
         aa:dd:0d:ef:23:44:38:c7:46:29:44:d6:79:5d:20:10:2b:7c:
         82:d8:85:1e:00:b7:b1:10:3c:92:e2:e2:de:81:75:23:6d:97:
         23:77:72:94:e4:a2:8a:70:70:ee:98:09:a9:ad:56:a6:e1:f8:
         d3:38:3e:6c:62:36:e3:33:c3:4a:da:03:9c:24:44:8f:98:26:
         78:92:8f:2e:7c:ae:e0:30:86:ad:23:4f:78:68:64:05:e4:e6:
         7d:cf:c2:fa:fe:6e:cc:2c:3e:c1:1f:c9:c6:90:95:c7:56:eb:
         dd:55:ab:c8:f0:41:91:87:da:75:69:5a:ab:59:ec:6c:6d:52:
         75:4a:01:53:f8:5b:29:41:78:fe:fa:71:0e:49:6e:7b:a5:d1:
         c5:2f:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:40:08 2026 by rpki-client