Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
File:                     Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json)
Hash identifier:          RAD9jFL3O0hwBxiQoQJgvdk1/9OE/Sx3mhTtR9XG9Qk=
Subject key identifier:   D4:26:43:7B:32:C8:04:76:37:6D:3B:65:50:84:FF:9E:A9:50:1D:45
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Certificate issuer:       /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial:       07E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
Manifest number:          07DB
Signing time:             Tue 06 Oct 2026 21:30:25 +0000
Manifest this update:     Tue 06 Oct 2026 21:30:24 +0000
Manifest next update:     Tue 13 Oct 2026 21:30:24 +0000
Files and hashes:         1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: TrMx8nLvfo+/BR1sLz4rAzOzs5b5C/UGJ51C+OvSa6k=)
                          2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: lzR6pyvl0y5+kPNyylXFhv+PwYmB2saEThM6foq0LbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
                          rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
        Validity
            Not Before: Oct  6 21:30:24 2026 GMT
            Not After : Oct 13 21:30:24 2026 GMT
        Subject: CN=6ac56870-8904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:a2:07:c9:0a:f3:02:35:7b:90:8e:5d:78:
                    34:e2:24:16:69:50:f9:f5:4c:d7:ab:31:88:66:69:
                    24:6e:6b:a7:50:12:bb:98:6f:32:e5:a6:31:db:0a:
                    88:3f:5d:8e:75:b3:3a:da:24:d8:63:93:d5:7d:91:
                    d4:3f:7b:16:f0:3e:e4:54:a4:72:b1:4f:3a:82:c3:
                    d5:10:61:2a:e7:8c:a5:d1:b5:7b:97:75:64:6b:02:
                    a2:1a:48:8f:bb:3d:06:b6:9e:e7:1d:ba:53:a7:b2:
                    14:15:72:c8:36:73:7a:9b:f9:59:18:ce:2e:74:bd:
                    4f:0a:d5:bc:dc:26:3e:f9:d3:53:62:bb:73:d1:95:
                    20:33:cf:21:68:33:00:74:07:04:5c:c2:a8:67:0c:
                    4c:76:df:92:c6:e8:8e:6f:0e:05:67:e0:69:5a:38:
                    5f:40:19:00:bb:ad:ed:07:24:0b:43:3c:7f:4d:40:
                    ef:11:2d:37:b0:1b:21:90:eb:67:75:da:28:22:26:
                    10:89:bb:38:f7:86:94:11:f0:e5:de:77:0a:06:9d:
                    d1:00:e0:0d:b6:20:a8:88:89:dd:36:b2:26:1b:49:
                    ef:df:82:6a:b2:79:d7:99:97:ef:67:91:11:27:db:
                    a5:34:6c:2d:c5:41:10:63:80:ab:a7:dd:9d:68:90:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:43:7B:32:C8:04:76:37:6D:3B:65:50:84:FF:9E:A9:50:1D:45
            X509v3 Authority Key Identifier:
                keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:a2:2d:da:52:3a:c7:3b:b9:7a:3e:e5:41:74:cd:52:f0:
         44:86:a2:86:dd:92:38:50:1a:f1:8e:dc:17:86:e5:f3:56:aa:
         23:65:93:e9:3e:c0:ee:07:cd:15:43:4a:72:e3:97:74:e2:11:
         89:a4:9b:84:5e:87:69:3e:a4:63:6f:40:35:c5:d2:b3:5e:31:
         6b:ad:fd:77:e8:f9:4a:96:12:e0:3f:f2:f4:a0:03:e2:6b:81:
         be:bb:a7:83:95:ee:76:aa:53:f3:9b:2a:91:f3:dc:f9:87:66:
         22:f4:66:3e:6d:e3:ca:be:d4:89:5e:07:26:28:67:56:9f:1f:
         93:9c:a1:64:bc:ca:86:a4:ab:98:e2:8d:00:39:7b:c0:96:50:
         d6:0b:19:24:15:2e:0d:9b:c5:43:e5:96:0f:2d:5d:90:48:0a:
         9c:33:65:d0:7d:d5:94:83:a0:fa:69:94:b1:88:49:ec:2e:cc:
         9a:3e:bf:ce:d7:c4:81:97:46:04:68:05:98:fa:0c:09:74:90:
         cd:15:94:23:d0:7a:a3:65:e8:d8:65:8a:b8:36:a5:b2:18:10:
         b4:8d:39:f4:dc:72:37:05:a4:4b:d1:49:21:f3:da:bc:74:12:
         db:fb:8c:d1:db:3a:20:ee:be:60:0c:79:9b:0e:f6:35:3d:bf:
         9a:ea:61:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE4QUYxMTAvBgNVBAUTKDFBNjkzNENBQjUyMTNEOEI0M0ZENTQzNTg5MzhERDFG
MzFBMTY5MEEwHhcNMjYxMDA2MjEzMDI0WhcNMjYxMDEzMjEzMDI0WjAYMRYwFAYD
VQQDEw02YWM1Njg3MC04OTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuXiiB8kK8wI1e5COXXg04iQWaVD59UzXqzGIZmkkbmunUBK7mG8y5aYx2wqI
P12OdbM62iTYY5PVfZHUP3sW8D7kVKRysU86gsPVEGEq54yl0bV7l3VkawKiGkiP
uz0Gtp7nHbpTp7IUFXLINnN6m/lZGM4udL1PCtW83CY++dNTYrtz0ZUgM88haDMA
dAcEXMKoZwxMdt+SxuiObw4FZ+BpWjhfQBkAu63tByQLQzx/TUDvES03sBshkOtn
ddooIiYQibs494aUEfDl3ncKBp3RAOANtiCoiIndNrImG0nv34JqsnnXmZfvZ5ER
J9ulNGwtxUEQY4Crp92daJA/wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQmQ3sy
yAR2N207ZVCE/56pUB1FMB8GA1UdIwQYMBaAFBppNMq1IT2LQ/1UNYk43R8xoWkK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MThBRi9ENzkyRjQ3NDU2
QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZdERfVlExaVRqZEh6R2hh
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dtazB5clVoUFl0RF9WUTFpVGpkSHpHaGFRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MThBRi9ENzkyRjQ3NDU2QzAxMUVCOEJDMzVCNzRDNEY5QUUwMi9HbWsweXJVaFBZ
dERfVlExaVRqZEh6R2hhUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALqGiLdpSOsc7uXo+5UF0zVLwRIaiht2SOFAa8Y7cF4bl81aqI2WT6T7A7gfN
FUNKcuOXdOIRiaSbhF6HaT6kY29ANcXSs14xa639d+j5SpYS4D/y9KAD4muBvrun
g5XudqpT85sqkfPc+YdmIvRmPm3jyr7UiV4HJihnVp8fk5yhZLzKhqSrmOKNADl7
wJZQ1gsZJBUuDZvFQ+WWDy1dkEgKnDNl0H3VlIOg+mmUsYhJ7C7Mmj6/ztfEgZdG
BGgFmPoMCXSQzRWUI9B6o2Xo2GWKuDalshgQtI059NxyNwWkS9FJIfPavHQS2/uM
0ds6IO6+YAx5mw72NT2/muphKQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:24:11 2026 by rpki-client