Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
File:                     GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json)
Hash identifier:          nxf/TdwR7hq6XAuS0WQbRRGsUR+4VgEhLGc3x8raVis=
Subject key identifier:   F1:98:E3:BF:55:B6:88:94:63:17:73:66:60:28:2C:D4:2B:0E:D8:F6
Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
Certificate issuer:       /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Certificate serial:       0936
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
Manifest number:          092D
Signing time:             Sun 20 Sep 2026 20:07:42 +0000
Manifest this update:     Sun 20 Sep 2026 20:07:42 +0000
Manifest next update:     Sun 27 Sep 2026 20:07:42 +0000
Files and hashes:         1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: 2z6JPOSkzvrAXbvVNdb205Ep/l5PdyJv9R8weIuXGyA=)
                          2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: k0slGk6THhklii8X86eyYXN7YTIBN/mn56HfkDFdmb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
                          rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358 (0x936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
        Validity
            Not Before: Sep 20 20:07:42 2026 GMT
            Not After : Sep 27 20:07:42 2026 GMT
        Subject: CN=6ab03d0e-e275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a2:7e:98:4d:3b:88:69:31:9a:48:38:da:42:
                    4c:a0:27:c5:63:5f:ed:91:44:6e:ef:ad:74:73:e8:
                    e0:ef:02:e5:c1:14:14:f3:f4:4c:03:ca:ea:d2:d3:
                    44:b6:9b:68:0e:ff:93:a5:a2:de:95:bd:3a:c5:41:
                    3b:43:d1:a4:43:20:01:1c:31:55:08:55:a9:25:60:
                    b8:25:7f:a6:6b:f0:38:09:84:de:77:d5:1a:ee:a4:
                    a1:22:2e:e4:f0:20:c7:90:3b:3e:78:f0:55:a3:03:
                    31:cf:e4:69:c7:f6:5c:80:92:3a:a0:f4:ba:d1:18:
                    a4:75:c1:22:7f:68:5f:c6:64:03:1f:f4:7f:07:60:
                    d1:f9:fa:f4:a7:06:a0:3a:51:76:22:17:12:7b:6f:
                    1c:6e:40:dd:27:63:bb:48:e7:93:1b:3c:03:8e:f5:
                    46:3d:03:77:06:64:a6:35:c9:62:24:5e:07:d9:4b:
                    90:35:36:e7:55:f1:9b:cf:8b:30:69:ad:ed:0c:df:
                    9d:17:87:2f:b7:70:f0:37:2b:0f:ef:e0:1b:d0:75:
                    4e:37:cf:06:ec:b4:c6:81:9f:b8:73:b3:55:4e:8b:
                    cd:e5:cf:c0:98:39:c8:2a:6c:db:c4:2a:52:2e:2e:
                    19:1e:78:7d:7c:95:c7:46:6d:ae:c2:dd:ca:43:0a:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:98:E3:BF:55:B6:88:94:63:17:73:66:60:28:2C:D4:2B:0E:D8:F6
            X509v3 Authority Key Identifier:
                keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:95:6b:d0:ad:9a:68:10:76:03:9a:ff:65:93:1c:ca:8d:c8:
         46:1d:43:6d:19:25:93:25:d3:6d:0a:5c:a8:6c:f6:e2:cd:d5:
         df:54:1f:32:9d:56:d3:5c:b9:45:32:c6:60:16:73:fd:36:8a:
         c8:b9:16:4a:e1:62:22:30:53:67:69:d8:6b:33:c8:56:07:3b:
         8f:1f:b0:5a:3d:a5:84:23:e8:2a:62:f0:77:19:c2:b7:68:b9:
         de:eb:b3:7d:f9:dd:7c:2e:b1:df:79:c8:c4:a4:e1:04:63:96:
         c1:48:a2:d5:69:06:fc:84:df:51:90:6d:52:b9:52:f6:02:40:
         18:f4:bd:be:f7:20:e0:53:6e:50:64:3f:20:15:09:65:bf:de:
         03:22:7d:ee:bb:42:b5:77:cc:70:30:5c:eb:d1:59:c6:51:91:
         27:fd:a9:8b:bc:7b:a6:1b:09:b4:f0:ab:36:75:c6:0f:62:bb:
         d1:42:7d:01:9a:fe:ca:fd:50:80:57:4a:96:e3:9f:5f:96:0d:
         46:6a:b2:2c:2d:c7:86:04:01:40:8f:76:df:51:9e:40:c6:b8:
         42:70:67:6d:d2:e6:e8:d1:89:d1:1b:33:d4:da:0d:b8:5e:db:
         9e:43:7d:21:37:bf:8a:73:cc:80:87:d5:ff:9d:98:f2:37:85:
         e5:ca:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:00:17 2026 by rpki-client