Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
File:                     GHWJdndWd8NAIPDun97Wlit4ol8.mft (raw, json)
Hash identifier:          hcDd4QSUiTIjKNR5x5iyMkwPWAKETyqNu3ykOANmDrs=
Subject key identifier:   97:D7:F9:58:4D:33:CE:98:9C:30:9E:81:B2:8D:58:82:2F:B0:F8:94
Authority key identifier: 18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F
Certificate issuer:       /CN=A91448CB/serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
Manifest number:          13
Signing time:             Mon 21 Sep 2026 09:03:29 +0000
Manifest this update:     Mon 21 Sep 2026 09:03:29 +0000
Manifest next update:     Mon 28 Sep 2026 09:03:29 +0000
Files and hashes:         1: GHWJdndWd8NAIPDun97Wlit4ol8.crl (hash: ZU3kBUOrHVM/fG4hA0fQ7Gt6tFtX+SqKLGhe+8YW+Eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.crl
                          rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91448CB, serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
        Validity
            Not Before: Sep 21 09:03:29 2026 GMT
            Not After : Sep 28 09:03:29 2026 GMT
        Subject: CN=6ab0f2e1-44a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:0b:2d:46:49:cf:dd:2d:69:be:35:02:28:
                    14:d0:fd:9f:44:23:17:8c:02:a1:55:73:99:82:ba:
                    81:cc:63:39:9d:29:1f:21:90:d7:5b:27:97:dc:a6:
                    9f:a4:2a:ed:6c:1f:b6:97:24:1a:ad:5c:ac:ac:ae:
                    77:26:a2:63:b9:58:8d:ef:94:ed:c6:b8:d8:c3:91:
                    b7:a1:e1:6f:86:9b:7b:01:8c:46:60:56:76:96:74:
                    94:1b:b6:cd:d7:7f:a8:48:36:38:8d:1e:f5:ef:ea:
                    27:97:67:8d:12:64:95:87:d3:f4:ac:20:21:9d:3b:
                    16:1b:c7:c5:8e:96:5a:c3:98:cf:83:47:43:09:89:
                    b7:78:d5:dc:54:3d:5f:05:15:a7:2c:c6:1f:4d:81:
                    02:5f:0d:0d:98:c2:7f:fd:e8:5e:e0:98:9e:01:c3:
                    ba:ca:cf:12:5d:57:24:b3:33:c9:1f:f8:77:d0:0b:
                    a7:24:f4:c6:5d:9b:62:19:aa:31:7e:d9:1a:06:e9:
                    86:59:05:88:94:e4:7a:b5:16:06:be:be:b9:21:30:
                    9c:31:6c:47:44:43:df:d4:36:3e:08:60:52:c6:55:
                    c2:dd:63:2f:d7:a4:b3:a1:ae:87:d2:89:9d:3b:e1:
                    a9:98:df:7e:b5:90:9d:07:cf:6a:92:7e:6e:d5:cd:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:F9:58:4D:33:CE:98:9C:30:9E:81:B2:8D:58:82:2F:B0:F8:94
            X509v3 Authority Key Identifier:
                keyid:18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:ef:63:db:38:38:34:18:7b:f0:1c:68:48:65:a6:f6:8c:
         04:c3:a3:bb:b2:a9:03:05:68:bb:ae:73:c4:3b:fc:ef:f5:f6:
         77:6b:6c:47:37:78:2b:d3:5a:dc:b2:9d:93:25:f7:65:43:a3:
         ef:85:61:8a:bc:fd:49:57:db:41:ff:a0:90:19:e6:17:1a:3e:
         9e:b2:4c:b1:17:8e:35:ed:de:9b:14:a7:8a:45:5b:97:bb:27:
         87:78:14:3d:9d:2a:0a:c6:65:53:ec:f8:76:db:c3:65:32:97:
         28:92:52:bf:65:13:75:0c:1c:48:dc:9e:d5:6b:9b:ba:bd:21:
         7a:f3:4e:50:56:77:9e:f5:20:df:b7:ac:d0:ff:ce:b8:c1:24:
         a8:58:ee:a7:60:65:ea:81:64:f7:bb:18:19:21:03:52:9f:45:
         c7:e3:66:73:44:0e:fc:82:1f:c3:38:ee:dc:ca:f0:32:9f:33:
         e0:5b:54:dd:d9:4d:dc:61:72:42:30:b4:90:77:26:2b:d2:48:
         71:bf:2d:90:f7:e0:83:72:bb:d2:9e:4f:48:05:00:da:18:4c:
         45:ef:6e:b3:9d:8c:22:96:d5:7a:11:c9:57:5d:cc:17:24:22:
         66:8f:76:df:61:94:0c:ae:88:f6:50:5b:26:e3:15:7f:c4:f2:
         50:8c:3a:47
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NDhDQjExMC8GA1UEBRMoMTg3NTg5NzY3NzU2NzdDMzQwMjBGMEVFOUZERUQ2OTYy
Qjc4QTI1RjAeFw0yNjA5MjEwOTAzMjlaFw0yNjA5MjgwOTAzMjlaMBgxFjAUBgNV
BAMTDTZhYjBmMmUxLTQ0YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCaDwstRknP3S1pvjUCKBTQ/Z9EIxeMAqFVc5mCuoHMYzmdKR8hkNdbJ5fcpp+k
Ku1sH7aXJBqtXKysrncmomO5WI3vlO3GuNjDkbeh4W+Gm3sBjEZgVnaWdJQbts3X
f6hINjiNHvXv6ieXZ40SZJWH0/SsICGdOxYbx8WOllrDmM+DR0MJibd41dxUPV8F
Facsxh9NgQJfDQ2Ywn/96F7gmJ4Bw7rKzxJdVySzM8kf+HfQC6ck9MZdm2IZqjF+
2RoG6YZZBYiU5Hq1Fga+vrkhMJwxbEdEQ9/UNj4IYFLGVcLdYy/XpLOhrofSiZ07
4amY3361kJ0Hz2qSfm7VzXjPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl9f5WE0z
zpicMJ6Bso1Ygi+w+JQwHwYDVR0jBBgwFoAUGHWJdndWd8NAIPDun97Wlit4ol8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0OENCL0QzMTQ2NEZBOUJD
NTExRjE4RkUwMzc2QzU3MTFGOTcwL0dIV0pkbmRXZDhOQUlQRHVuOTdXbGl0NG9s
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvR0hXSmRuZFdkOE5BSVBEdW45N1dsaXQ0b2w4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0
OENCL0QzMTQ2NEZBOUJDNTExRjE4RkUwMzc2QzU3MTFGOTcwL0dIV0pkbmRXZDhO
QUlQRHVuOTdXbGl0NG9sOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBEz+9j2zg4NBh78BxoSGWm9owEw6O7sqkDBWi7rnPEO/zv9fZ3a2xHN3gr01rc
sp2TJfdlQ6PvhWGKvP1JV9tB/6CQGeYXGj6eskyxF4417d6bFKeKRVuXuyeHeBQ9
nSoKxmVT7Ph228NlMpcoklK/ZRN1DBxI3J7Va5u6vSF6805QVnee9SDft6zQ/864
wSSoWO6nYGXqgWT3uxgZIQNSn0XH42ZzRA78gh/DOO7cyvAynzPgW1Td2U3cYXJC
MLSQdyYr0khxvy2Q9+CDcrvSnk9IBQDaGExF726znYwiltV6EclXXcwXJCJmj3bf
YZQMroj2UFsm4xV/xPJQjDpH
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:23 2026 by rpki-client