Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
File:                     GW-SdzKT5JVLTZel03rIIKdFwuA.mft (raw, json)
Hash identifier:          JWDi0zp9hJQiAAo7F1sitKaG6TEA//On1++dfn/g1Iw=
Subject key identifier:   86:63:F8:8E:F0:04:4B:1E:52:AD:DC:92:80:64:05:A5:81:C4:AC:24
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
Manifest number:          0400
Signing time:             Mon 21 Sep 2026 00:23:09 +0000
Manifest this update:     Mon 21 Sep 2026 00:23:09 +0000
Manifest next update:     Mon 28 Sep 2026 00:23:09 +0000
Files and hashes:         1: GW-SdzKT5JVLTZel03rIIKdFwuA.crl (hash: xMa695Ag6WKnYk80rSpJl6EsytvqevZ3t9ecXJVdDJM=)
                          2: 583F47C01EB811F18CD447E9213D8C67.roa (hash: Bjk5uPrLqxecopde9+bNQEC9OOCGDwJYP8K8SH4KKPY=)
                          3: AEF7F896B23511EF99CCD73DC4F9AE02.roa (hash: PC9A/wN78/m5hkQIoyPN7PzUs869VkeVXqkOIXy5YDs=)
                          4: 6318EE6A194711F193E941873C3D8C67.roa (hash: PRZUDRs/MzrgRRpDt3cUNdwUtV0YnP0Yc80Rieef+EU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Sep 21 00:23:09 2026 GMT
            Not After : Sep 28 00:23:09 2026 GMT
        Subject: CN=6ab078ed-363c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:2b:89:b3:56:22:cb:3b:7f:e1:31:c9:dd:
                    d8:0e:d3:d1:5c:1d:59:2d:a4:ff:96:ac:12:41:fd:
                    72:de:bf:b2:85:0a:cf:99:2c:4c:c1:08:c9:5f:58:
                    2f:7c:85:b0:c5:51:d9:ab:50:db:98:05:3c:e3:8d:
                    3c:98:21:4d:57:ee:fb:2b:8a:a0:33:43:01:2b:43:
                    61:aa:79:7c:d7:6c:82:58:c0:6a:27:52:ed:dd:f8:
                    70:2a:5b:0c:7c:ba:04:e5:e1:bf:76:ca:03:6b:72:
                    ed:c7:77:a5:07:36:6e:62:b3:a2:fe:ec:08:bf:cb:
                    27:17:51:5a:fe:8c:7c:1c:fe:d3:a9:d0:ef:69:c0:
                    7a:cf:8f:66:ae:c7:f0:3f:01:a2:0e:c9:30:34:ea:
                    4b:b4:48:57:34:3c:c4:7b:5a:3a:df:14:d2:55:08:
                    1d:3d:bd:64:d2:e3:a3:19:40:d4:f3:97:c5:95:d1:
                    28:97:eb:b5:ed:01:35:3b:09:89:79:92:ea:f3:19:
                    4c:82:96:53:59:1d:5b:13:29:57:ef:e6:6b:c6:bf:
                    44:f5:20:2f:18:8f:f0:6c:28:aa:b7:d9:25:f1:8a:
                    4e:5c:9b:b2:d4:23:1c:46:e4:76:d6:23:07:aa:0a:
                    82:87:08:97:ba:cb:4f:7f:e5:4e:78:fc:bc:ec:1f:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:F8:8E:F0:04:4B:1E:52:AD:DC:92:80:64:05:A5:81:C4:AC:24
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:91:f7:05:32:f9:53:e7:db:9e:6f:37:b6:fb:fd:78:29:f2:
         49:2e:c0:e3:56:8b:0f:fd:21:f6:60:c6:d4:d0:4f:90:14:a5:
         f8:5e:72:73:22:31:40:b0:cd:c7:63:df:71:24:ca:b3:ff:ea:
         42:c4:8e:f0:d0:98:d2:89:c2:b9:86:eb:54:2d:55:07:9b:62:
         2f:fb:d6:a1:49:65:f4:25:e7:61:38:55:a7:b1:44:08:b0:82:
         bc:50:68:c0:aa:02:57:50:cc:a6:09:08:46:01:c2:ec:e8:17:
         d1:93:d1:1c:d3:ec:68:d0:8b:45:f5:fa:17:da:19:db:a9:66:
         b4:2c:97:7d:b3:9d:9c:e6:ee:1f:4c:35:c6:3c:a0:bb:4a:fc:
         9c:7d:dd:a8:ca:09:70:d7:60:6d:73:d0:98:79:7f:a4:7f:6f:
         7d:58:31:e7:94:ac:17:13:c4:1e:ee:61:ce:7c:ee:4d:e6:d1:
         a7:10:04:4a:dc:ea:a9:93:d7:e0:eb:43:f9:d3:0e:65:be:e2:
         a9:de:1d:59:bd:fd:2d:54:28:52:8c:46:fd:6e:2f:62:84:64:
         5b:00:b3:20:43:7a:d8:bf:83:aa:1b:de:20:86:ec:83:d9:65:
         2b:39:b8:42:c5:37:25:63:df:d0:01:dc:79:de:2b:8b:13:9e:
         03:14:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:22:15 2026 by rpki-client