Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
File:                     _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json)
Hash identifier:          U9AiZo/psEf0qIhCPF+vSCsV3uvgqWASbJXpe/V2XSQ=
Subject key identifier:   07:CB:C9:0F:8A:85:1D:17:53:FF:8C:BE:80:56:88:C0:56:59:A1:3C
Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
Certificate issuer:       /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
Certificate serial:       27E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
Manifest number:          27D4
Signing time:             Sun 20 Sep 2026 15:36:07 +0000
Manifest this update:     Sun 20 Sep 2026 15:36:06 +0000
Manifest next update:     Sun 27 Sep 2026 15:36:06 +0000
Files and hashes:         1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: XyobuH8JCaYLYXMOhbmMVvSWFt8OYjnPnAEp9D1czfU=)
                          2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: NdTxn+HasKfGOEbIN5yYPJ4JBQuKbqVM6GqJLCJsrzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl
                          rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:36:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10213 (0x27e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
        Validity
            Not Before: Sep 20 15:36:06 2026 GMT
            Not After : Sep 27 15:36:06 2026 GMT
        Subject: CN=6aaffd67-b010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:c9:60:89:45:61:35:ff:7f:f2:02:da:28:
                    9d:8d:b3:0a:32:fa:2e:8e:c0:e3:8f:9c:3d:61:a5:
                    b3:6d:3f:82:ad:c3:07:90:69:1f:87:ac:46:27:b9:
                    d9:7d:e8:be:10:c6:62:8a:9b:1a:e6:dd:d4:5f:e6:
                    e4:83:f6:c7:8f:93:b9:12:6e:88:e8:65:82:06:6e:
                    52:63:f6:27:92:f7:10:54:d2:ce:3d:0d:9d:5f:07:
                    07:38:87:12:80:e9:99:62:de:36:e5:b9:e2:85:13:
                    4f:af:7a:38:ff:39:85:09:8d:ba:95:ec:55:4d:0c:
                    a7:03:e6:03:b6:bd:2e:ec:45:9a:f0:cf:01:b6:8e:
                    87:b0:e7:bc:99:9d:4f:f5:8f:f2:81:27:58:32:a7:
                    68:fe:a9:fd:f2:3a:a3:7b:86:2b:05:8e:34:93:2f:
                    cf:8d:1e:23:23:4a:74:42:ba:5c:3b:8e:e2:b1:6c:
                    0b:0e:61:f2:d4:37:31:46:43:b3:83:0a:19:1e:77:
                    c7:d2:c3:ca:0f:12:96:b1:0c:c6:89:76:01:09:59:
                    54:57:80:80:ca:d8:38:de:e6:df:3d:0e:9f:b1:46:
                    0c:da:1d:60:f5:86:41:d0:8e:9d:ca:37:cd:0e:64:
                    d6:8d:3b:24:61:d1:b6:cd:10:a7:33:d9:68:a4:ef:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CB:C9:0F:8A:85:1D:17:53:FF:8C:BE:80:56:88:C0:56:59:A1:3C
            X509v3 Authority Key Identifier:
                keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ee:2e:04:8f:27:85:f4:2f:35:6c:60:de:fc:40:ea:c1:9b:
         59:e4:c5:a5:e2:03:9a:c6:35:70:8c:1f:1e:2b:bf:c4:d0:17:
         8f:df:68:36:45:92:63:1b:da:ee:95:46:12:76:4e:a7:6d:48:
         74:c1:27:32:95:7d:70:27:6c:be:df:d5:a2:5b:91:bb:1e:6c:
         5e:33:1d:3b:be:00:92:e2:b7:e2:2b:05:d7:b3:00:bf:58:35:
         dd:9f:6a:66:34:12:61:3b:68:41:c5:1f:e9:83:07:f1:fd:37:
         51:68:c7:d9:c3:be:fd:d3:95:04:60:78:a7:ac:6a:bb:12:da:
         7b:54:52:3a:f9:f7:c6:e3:1d:c0:11:1b:88:42:98:d7:b3:7f:
         d1:5c:c0:46:d0:19:5b:7c:cc:b5:5c:87:0d:3c:df:ca:51:83:
         81:31:a4:c8:4e:8e:4b:98:e9:41:88:8b:5c:ab:8d:0f:80:24:
         1d:94:bb:71:58:66:e2:dc:49:07:bc:f8:1c:1b:ea:78:db:27:
         15:ad:3d:8a:82:9d:9d:c7:38:4a:b4:68:53:d8:2a:d5:69:f6:
         e8:81:1c:ef:fb:37:ae:e4:b0:03:9c:74:44:b1:3f:19:f5:50:
         dc:68:59:9c:60:f4:22:fe:5a:23:23:15:bb:83:0c:39:43:ae:
         01:4e:31:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJ+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFDOUQxMTAvBgNVBAUTKEZDNjU1QTIxNTQzRUNGNTdCRkEzRUJERjc5NDZBOTk1
NjFFQzUyRjUwHhcNMjYwOTIwMTUzNjA2WhcNMjYwOTI3MTUzNjA2WjAYMRYwFAYD
VQQDEw02YWFmZmQ2Ny1iMDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkN7JYIlFYTX/f/IC2iidjbMKMvoujsDjj5w9YaWzbT+CrcMHkGkfh6xGJ7nZ
fei+EMZiipsa5t3UX+bkg/bHj5O5Em6I6GWCBm5SY/YnkvcQVNLOPQ2dXwcHOIcS
gOmZYt425bnihRNPr3o4/zmFCY26lexVTQynA+YDtr0u7EWa8M8Bto6HsOe8mZ1P
9Y/ygSdYMqdo/qn98jqje4YrBY40ky/PjR4jI0p0QrpcO47isWwLDmHy1DcxRkOz
gwoZHnfH0sPKDxKWsQzGiXYBCVlUV4CAytg43ubfPQ6fsUYM2h1g9YZB0I6dyjfN
DmTWjTskYdG2zRCnM9lopO87hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAfLyQ+K
hR0XU/+MvoBWiMBWWaE8MB8GA1UdIwQYMBaAFPxlWiFUPs9Xv6Pr33lGqZVh7FL1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUM5RC83M0FDQTVFNENG
NDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXoxZV9vLXZmZVVhcGxXSHNV
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19HVmFJVlEtejFlX28tdmZlVWFwbFdIc1V2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUM5RC83M0FDQTVFNENGNDUxMUU0QjZCN0EyMTFDNEY5QUUwMi9fR1ZhSVZRLXox
ZV9vLXZmZVVhcGxXSHNVdlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO+4uBI8nhfQvNWxg3vxA6sGbWeTFpeIDmsY1cIwfHiu/xNAXj99oNkWSYxva
7pVGEnZOp21IdMEnMpV9cCdsvt/VoluRux5sXjMdO74AkuK34isF17MAv1g13Z9q
ZjQSYTtoQcUf6YMH8f03UWjH2cO+/dOVBGB4p6xquxLae1RSOvn3xuMdwBEbiEKY
17N/0VzARtAZW3zMtVyHDTzfylGDgTGkyE6OS5jpQYiLXKuND4AkHZS7cVhm4txJ
B7z4HBvqeNsnFa09ioKdncc4SrRoU9gq1Wn26IEc7/s3ruSwA5x0RLE/GfVQ3GhZ
nGD0Iv5aIyMVu4MMOUOuAU4x3g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:29:20 2026 by rpki-client