Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
File:                     GFGeK8SmT3vVic2WPfB0saMwXfU.mft (raw, json)
Hash identifier:          bLfGnqcCZ4N/NMM4qlK9ox2Amt8lh7gpZnUhE9jBD3M=
Subject key identifier:   C4:5B:A9:2F:F8:27:4F:B4:32:72:EA:DF:CA:2B:5D:92:E9:6F:08:10
Authority key identifier: 18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5
Certificate issuer:       /CN=A9158635/serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
Certificate serial:       094D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
Manifest number:          0944
Signing time:             Wed 04 Nov 2026 20:22:51 +0000
Manifest this update:     Wed 04 Nov 2026 20:22:51 +0000
Manifest next update:     Wed 11 Nov 2026 20:22:51 +0000
Files and hashes:         1: GFGeK8SmT3vVic2WPfB0saMwXfU.crl (hash: aElYJYPLqBw7qKzBsnVuKteAKiPbqZ47zbPAl4sN6s4=)
                          2: EB96EEB2CFB111EA8E6F7029C4F9AE02.roa (hash: k0slGk6THhklii8X86eyYXN7YTIBN/mn56HfkDFdmb0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl
                          rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 20:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158635, serialNumber=18519E2BC4A64F7BD589CD963DF074B1A3305DF5
        Validity
            Not Before: Nov  4 20:22:51 2026 GMT
            Not After : Nov 11 20:22:51 2026 GMT
        Subject: CN=6aeb941b-ccf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:25:0f:6e:e2:35:15:fb:2a:a1:e0:5b:e2:
                    1d:93:e1:66:be:ba:44:5d:0e:94:2c:ba:4b:fa:f4:
                    e0:79:f9:5c:d0:a6:13:55:7c:fe:29:27:9d:61:56:
                    dc:7d:a5:26:da:01:16:dd:54:cf:96:0f:c6:ac:36:
                    43:80:7d:0e:8c:5d:62:69:67:a2:97:25:a7:41:c3:
                    17:e4:7a:10:55:3b:94:15:92:29:37:08:e9:0f:7d:
                    67:b6:4a:51:00:81:93:05:80:9d:62:b0:b0:7f:30:
                    7e:0b:99:cc:12:55:69:33:58:5c:ad:07:4f:1d:db:
                    26:fd:0f:d1:92:63:e1:46:f4:0d:7f:89:a2:7f:d3:
                    df:fa:f4:55:f2:e8:ff:30:40:a6:54:f2:8a:3e:68:
                    31:51:13:83:1d:35:56:d8:87:ce:c7:2a:93:55:bb:
                    b9:b6:d7:3d:ed:d9:b9:df:47:09:e1:e9:3b:8e:3c:
                    14:1f:35:e7:35:6c:e5:0c:f9:62:50:71:60:ba:27:
                    f4:30:1a:33:76:be:45:70:59:64:20:79:a0:96:f6:
                    d0:87:ab:46:31:78:da:6e:a2:6e:ec:b5:ca:a7:41:
                    84:fa:a4:37:2a:18:8a:0e:f7:96:41:3b:48:74:aa:
                    c0:1a:52:fc:61:f2:a2:3a:1e:c3:7d:f7:eb:3f:4e:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:A9:2F:F8:27:4F:B4:32:72:EA:DF:CA:2B:5D:92:E9:6F:08:10
            X509v3 Authority Key Identifier:
                keyid:18:51:9E:2B:C4:A6:4F:7B:D5:89:CD:96:3D:F0:74:B1:A3:30:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GFGeK8SmT3vVic2WPfB0saMwXfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158635/A9977956CFB011EAA86BEC27C4F9AE02/GFGeK8SmT3vVic2WPfB0saMwXfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a6:39:45:18:c7:20:9b:28:8e:e3:84:76:4d:97:d5:d2:48:
         c3:ed:d5:0a:2a:67:08:e3:d2:d3:f7:5a:b2:f0:dd:a5:dd:66:
         42:45:ad:6c:99:d1:85:77:e1:fe:5e:cb:fb:df:90:0a:1a:7c:
         3b:94:41:a5:e4:32:3f:f4:6a:ad:29:f1:7d:61:9a:7e:cb:91:
         65:fa:3c:76:fa:25:6d:c6:57:25:a0:db:42:60:98:8c:73:f4:
         c4:6b:1d:76:e7:fb:96:cf:07:1a:17:3a:01:5f:dd:9f:e9:04:
         79:92:21:6a:44:4e:d8:cb:24:35:7a:25:a3:3d:f9:d2:5f:95:
         8b:9f:4d:ad:5d:9c:ab:42:66:ae:eb:41:2b:48:82:fc:8a:3a:
         74:02:d7:0b:06:0b:e0:d0:9d:9f:59:8c:6f:c0:60:63:ea:5b:
         47:27:4a:59:11:20:b9:d0:00:d7:e6:07:5d:32:2c:23:8b:da:
         b3:62:00:d9:05:a5:57:70:d6:b4:fc:4c:cf:2b:ac:60:0a:30:
         74:6b:6d:b5:b9:84:8a:74:62:0f:3a:0f:ed:28:c5:63:6c:2e:
         64:0f:52:21:5d:ab:1c:b0:55:3a:60:a9:04:85:49:33:d9:9c:
         7e:ff:5b:62:c7:62:e6:7c:4d:b4:0e:94:c5:1c:a9:86:cd:e6:
         ee:94:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:46:32 2026 by rpki-client