Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
File:                     -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json)
Hash identifier:          1VHdvjDWE4u+4uc/HM9QHfQZSmVjc3I0Lc/YXM3dDZk=
Subject key identifier:   3A:EF:5E:59:40:6F:71:1A:2E:3B:12:87:01:A5:38:CD:D9:0B:37:D3
Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E
Certificate issuer:       /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
Certificate serial:       04E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
Manifest number:          04D4
Signing time:             Sat 03 Oct 2026 00:06:02 +0000
Manifest this update:     Sat 03 Oct 2026 00:06:01 +0000
Manifest next update:     Sat 10 Oct 2026 00:06:01 +0000
Files and hashes:         1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: 0BX+5gAWU/7m0Tmp3+RsHTrtiWqpYe8U6fT4cQAocJo=)
                          2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: y9AWX9pr7/40gfTliDeYcrWRNr/D4ngulxUgREVk2K4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl
                          rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1248 (0x4e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E
        Validity
            Not Before: Oct  3 00:06:01 2026 GMT
            Not After : Oct 10 00:06:01 2026 GMT
        Subject: CN=6ac046ea-bd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:11:c9:79:3f:9a:7e:13:a0:00:8b:7c:98:
                    c5:5b:c9:44:a7:3b:96:69:52:16:d9:30:7f:f9:1c:
                    c0:15:be:23:27:b4:5b:74:b2:10:bc:63:87:9e:00:
                    aa:08:2d:90:53:2d:f0:ef:f4:9c:88:8d:0d:66:32:
                    3b:f6:32:8e:79:0d:e6:3d:45:5e:30:02:b9:56:45:
                    1e:85:1d:08:c1:94:70:f0:b1:93:24:10:86:a0:ab:
                    fb:49:38:c3:78:89:20:ad:94:20:40:15:04:15:20:
                    54:d8:d4:f0:fe:28:b1:98:9d:3f:84:32:22:21:7f:
                    8b:05:e1:6f:d7:56:46:9b:4b:70:6e:d0:3d:20:f2:
                    b7:62:83:41:81:f2:58:3f:b8:46:9e:e2:07:47:36:
                    8d:b3:94:55:17:f7:b9:17:0f:34:8f:4b:67:c9:3e:
                    5c:f9:f0:6b:53:72:a2:05:2a:c1:5c:38:df:2c:12:
                    af:57:a7:77:00:e3:56:5f:96:2e:f7:7e:1f:56:3d:
                    95:1e:49:22:a3:45:3e:ca:ed:0d:de:e7:43:b9:bd:
                    26:8f:c0:9a:e5:44:69:0c:8b:0a:e2:78:db:d0:b0:
                    8e:c2:e7:16:79:c0:a4:51:e0:be:64:d8:06:34:6a:
                    9d:eb:02:cf:11:aa:94:5f:82:be:3f:60:c4:97:4c:
                    5c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EF:5E:59:40:6F:71:1A:2E:3B:12:87:01:A5:38:CD:D9:0B:37:D3
            X509v3 Authority Key Identifier:
                keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b7:64:37:0c:b3:3c:4b:ce:55:bd:1d:f6:e1:20:5d:89:6c:
         2a:0d:14:05:17:a6:ec:a7:27:aa:a6:15:6f:38:49:18:b2:26:
         96:26:ca:d5:90:a5:a6:2e:c3:31:09:07:d2:96:60:81:e6:1f:
         8c:31:12:69:86:4d:89:e8:7c:80:16:e6:ab:11:47:db:62:4a:
         3f:7f:a2:f0:c1:1c:fa:23:2d:ec:a6:0a:1d:7d:83:a1:53:e8:
         36:7b:25:e8:e3:b8:00:e3:84:55:e2:11:c4:c0:8a:6a:1a:20:
         da:ce:c7:37:3c:88:e9:bb:69:82:f1:86:35:a8:34:a2:e9:cf:
         d9:3e:0b:d4:1b:6c:32:dc:0b:17:22:46:1c:ff:5b:89:3d:f1:
         65:17:a2:55:62:d5:bb:50:7e:9c:45:ba:32:dd:85:39:40:7e:
         d0:b6:43:99:58:43:51:9a:68:68:c8:f8:10:f6:b8:ea:e8:21:
         d2:b0:d6:fc:6f:9e:50:6b:7d:70:e5:ed:0b:04:5b:05:70:bd:
         11:2f:04:54:2b:34:25:e0:05:4b:33:1f:1e:00:74:18:f6:89:
         dc:15:82:f7:dd:b1:dd:47:6a:f2:a1:19:96:b9:51:9c:fb:b4:
         df:2c:3b:3a:61:23:11:d0:8c:3e:77:ab:cb:f8:c3:4c:d1:9a:
         06:c5:a4:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5
NTU2Mzc2NUUwHhcNMjYxMDAzMDAwNjAxWhcNMjYxMDEwMDAwNjAxWjAYMRYwFAYD
VQQDEw02YWMwNDZlYS1iZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfcRyXk/mn4ToACLfJjFW8lEpzuWaVIW2TB/+RzAFb4jJ7RbdLIQvGOHngCq
CC2QUy3w7/SciI0NZjI79jKOeQ3mPUVeMAK5VkUehR0IwZRw8LGTJBCGoKv7STjD
eIkgrZQgQBUEFSBU2NTw/iixmJ0/hDIiIX+LBeFv11ZGm0twbtA9IPK3YoNBgfJY
P7hGnuIHRzaNs5RVF/e5Fw80j0tnyT5c+fBrU3KiBSrBXDjfLBKvV6d3AONWX5Yu
934fVj2VHkkio0U+yu0N3udDub0mj8Ca5URpDIsK4njb0LCOwucWecCkUeC+ZNgG
NGqd6wLPEaqUX4K+P2DEl0xcbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrvXllA
b3EaLjsShwGlOM3ZCzfTMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1
OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk
bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM
ZEIyQmdKdGZmX09WVmpkbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARLdkNwyzPEvOVb0d9uEgXYlsKg0UBRem7KcnqqYVbzhJGLImlibK1ZClpi7D
MQkH0pZggeYfjDESaYZNieh8gBbmqxFH22JKP3+i8MEc+iMt7KYKHX2DoVPoNnsl
6OO4AOOEVeIRxMCKahog2s7HNzyI6btpgvGGNag0ounP2T4L1BtsMtwLFyJGHP9b
iT3xZReiVWLVu1B+nEW6Mt2FOUB+0LZDmVhDUZpoaMj4EPa46ugh0rDW/G+eUGt9
cOXtCwRbBXC9ES8EVCs0JeAFSzMfHgB0GPaJ3BWC992x3Udq8qEZlrlRnPu03yw7
OmEjEdCMPnery/jDTNGaBsWksQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:25:28 2026 by rpki-client