Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
File:                     GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json)
Hash identifier:          FOKdzP0nAGm3oGoaKJn9ztYvBmw1wA4I2JMQu+vU84g=
Subject key identifier:   B1:FB:7D:BB:D5:3B:FA:84:02:C8:91:67:0B:43:D4:72:62:CB:29:1C
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Certificate issuer:       /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
Manifest number:          90
Signing time:             Mon 21 Sep 2026 07:35:24 +0000
Manifest this update:     Mon 21 Sep 2026 07:35:23 +0000
Manifest next update:     Mon 28 Sep 2026 07:35:23 +0000
Files and hashes:         1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: SPKYWtkyiuMDdgc83f64+qeDEQAtRlq0SrFFDhX3lgc=)
                          2: 18EB15B84C6C11F1A78F0F88C2833773.roa (hash: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=)
                          3: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
        Validity
            Not Before: Sep 21 07:35:23 2026 GMT
            Not After : Sep 28 07:35:23 2026 GMT
        Subject: CN=6ab0de3b-5ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:0a:c4:b8:40:dc:6a:a6:1d:76:c0:f8:50:
                    c5:98:fa:1d:57:a3:43:4f:b1:07:14:56:91:8d:91:
                    81:b0:27:1f:06:37:34:d9:47:68:bd:d8:64:e4:20:
                    cf:a8:d3:5c:82:16:63:21:54:90:36:3b:e6:33:77:
                    d7:3c:26:8a:99:f0:2a:e8:c5:f9:99:be:36:cd:f4:
                    10:1f:06:fc:4d:7e:67:b6:56:5b:c2:f2:37:6c:d3:
                    c5:a5:19:47:56:89:c5:81:34:2f:47:2b:7f:9a:9a:
                    43:89:2f:63:85:29:64:6b:6a:82:9a:33:c2:56:12:
                    7d:a9:83:cb:0f:9c:2a:4e:10:dc:5a:d1:31:c5:97:
                    6e:0d:62:64:70:f9:81:60:07:34:01:f3:d8:20:8d:
                    f7:4d:6b:83:e6:a2:7f:94:75:00:80:3d:04:e7:82:
                    03:37:b2:70:1c:cf:fa:44:d2:07:1f:ef:97:dd:a6:
                    d3:f3:6a:7f:27:3e:6d:8a:54:22:52:a5:76:f8:f7:
                    9f:ff:07:27:30:34:0b:73:21:fd:ce:0d:4e:aa:7d:
                    97:57:20:e4:66:6a:99:d2:18:c1:14:c7:2d:9a:c6:
                    ea:94:fd:32:6a:82:6c:4a:5b:86:5a:ba:36:fc:e6:
                    24:f1:60:d2:63:75:5d:31:51:07:36:6a:b9:98:97:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:7D:BB:D5:3B:FA:84:02:C8:91:67:0B:43:D4:72:62:CB:29:1C
            X509v3 Authority Key Identifier:
                keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:18:21:54:c4:be:36:0d:6b:78:46:24:6d:5a:9b:cb:b4:6d:
         34:2a:29:28:03:cb:8d:5f:08:27:a9:90:bd:e5:0c:51:e8:34:
         55:b5:13:59:9d:aa:f1:bf:ba:4b:43:18:7a:83:01:bb:32:fe:
         f0:86:da:d2:0a:a1:25:ea:4d:68:ee:e2:b5:df:77:fb:d9:07:
         a4:d2:d8:e8:b1:08:29:5b:1b:45:9e:22:d6:6d:37:d1:df:17:
         b8:cb:b6:fe:0a:46:b8:3d:81:7c:51:c2:5d:03:e6:be:6c:37:
         14:a1:fc:39:17:ed:4d:0f:6c:0b:a1:cf:9c:a8:12:ad:2e:e8:
         52:3b:8d:82:0f:b2:11:8d:40:1d:9f:22:6f:73:57:ac:33:7e:
         76:a8:40:1b:2e:62:78:fd:c9:7e:20:45:26:c0:b0:45:95:8b:
         b4:ea:49:18:95:82:09:f8:54:a9:71:10:5a:de:30:47:b6:21:
         9b:ed:29:76:ea:bf:75:d5:95:68:29:be:dc:18:38:d3:09:30:
         44:b6:8f:a9:bf:72:b2:f1:f7:48:4b:71:84:5b:4e:ed:72:b5:
         6e:6c:af:09:31:8e:20:5c:50:21:67:81:34:7a:2f:2c:8a:07:
         93:75:c0:7a:d7:99:df:8f:d2:09:c3:71:e0:45:ef:6a:74:f8:
         15:17:b2:b2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJDQkExMTAvBgNVBAUTKDE5QzlBMEMyMTkzMEMxNkVBNDE2OUFDMkVCRURDN0U2
QzlEN0I1MkYwHhcNMjYwOTIxMDczNTIzWhcNMjYwOTI4MDczNTIzWjAYMRYwFAYD
VQQDEw02YWIwZGUzYi01ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzt8KxLhA3GqmHXbA+FDFmPodV6NDT7EHFFaRjZGBsCcfBjc02Udovdhk5CDP
qNNcghZjIVSQNjvmM3fXPCaKmfAq6MX5mb42zfQQHwb8TX5ntlZbwvI3bNPFpRlH
VonFgTQvRyt/mppDiS9jhSlka2qCmjPCVhJ9qYPLD5wqThDcWtExxZduDWJkcPmB
YAc0AfPYII33TWuD5qJ/lHUAgD0E54IDN7JwHM/6RNIHH++X3abT82p/Jz5tilQi
UqV2+Pef/wcnMDQLcyH9zg1Oqn2XVyDkZmqZ0hjBFMctmsbqlP0yaoJsSluGWro2
/OYk8WDSY3VdMVEHNmq5mJdARwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLH7fbvV
O/qEAsiRZwtD1HJiyykcMB8GA1UdIwQYMBaAFBnJoMIZMMFupBaawuvtx+bJ17Uv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNCQS8zNDAwQzcxOEU2
MkMxMUYwOTc2QTk1RkI2RjZGNTZCQy9HY21nd2hrd3dXNmtGcHJDNi0zSDVzblh0
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0djbWd3aGt3d1c2a0ZwckM2LTNINXNuWHRTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkNCQS8zNDAwQzcxOEU2MkMxMUYwOTc2QTk1RkI2RjZGNTZCQy9HY21nd2hrd3dX
NmtGcHJDNi0zSDVzblh0UzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGRghVMS+Ng1reEYkbVqby7RtNCopKAPLjV8IJ6mQveUMUeg0VbUTWZ2q8b+6
S0MYeoMBuzL+8Iba0gqhJepNaO7itd93+9kHpNLY6LEIKVsbRZ4i1m030d8XuMu2
/gpGuD2BfFHCXQPmvmw3FKH8ORftTQ9sC6HPnKgSrS7oUjuNgg+yEY1AHZ8ib3NX
rDN+dqhAGy5ieP3JfiBFJsCwRZWLtOpJGJWCCfhUqXEQWt4wR7Yhm+0pduq/ddWV
aCm+3Bg40wkwRLaPqb9ysvH3SEtxhFtO7XK1bmyvCTGOIFxQIWeBNHovLIoHk3XA
eteZ34/SCcNx4EXvanT4FReysg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:10:03 2026 by rpki-client