Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
File:                     GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft (raw, json)
Hash identifier:          eoTRIxO8hb6bNZkug1Ou3xzpdTFTFpm2Hkc7uYCLFUM=
Subject key identifier:   B4:CF:74:20:1B:EB:61:44:6E:09:49:50:48:3C:3C:6B:C8:E5:6F:83
Authority key identifier: 1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84
Certificate issuer:       /CN=A9187F7E/serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
Certificate serial:       03A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
Manifest number:          0387
Signing time:             Wed 07 Oct 2026 00:59:01 +0000
Manifest this update:     Wed 07 Oct 2026 00:59:01 +0000
Manifest next update:     Wed 14 Oct 2026 00:59:01 +0000
Files and hashes:         1: GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl (hash: mAqnz1E+eN36mE7B74vk9sceRnf99YJt06395xhTKd4=)
                          2: B8470B32494A11F190BF742ABC833773.roa (hash: xGW+lU1U6feA1xyqJoS3aKykySARnN0LcTb8GgYiDRo=)
                          3: B3BDA1CCC00811F192919AB56B11F970.roa (hash: NjBnOlHDvQZQLT5BSp9wMZd/bMJ/wSjBjGZhIGa+4Cc=)
                          4: 95A5DF2ABFEE11F19E8234DE6311F970.roa (hash: lR977ZCRP/gbtamwESiNzA6cfvZ7PAqEYraD8rMN2vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 00:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929 (0x3a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187F7E, serialNumber=1A682941F8789C4CEA3CC33B6373E4947630BC84
        Validity
            Not Before: Oct  7 00:59:01 2026 GMT
            Not After : Oct 14 00:59:01 2026 GMT
        Subject: CN=6ac59955-7020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:0d:2b:77:c0:33:0b:54:02:cd:33:81:73:
                    7a:b8:8b:3c:ef:03:0c:c2:be:81:ed:cf:a7:b1:57:
                    26:fb:12:09:2e:11:a9:3f:83:16:c0:63:c8:5e:9b:
                    cb:81:01:93:f9:0e:8e:4a:3c:49:a2:3b:ec:ca:11:
                    cf:e8:3b:8e:96:59:94:81:4f:31:a3:31:ac:c6:c1:
                    c5:75:c0:8e:a3:d0:74:60:d2:c2:f4:9e:1a:7b:11:
                    a9:8e:40:04:70:2f:29:84:12:ab:67:69:e1:94:60:
                    c5:51:67:aa:3c:64:a9:e0:25:e1:de:46:25:93:47:
                    e3:50:49:0a:f1:f6:b7:7c:1d:50:0a:21:3c:51:92:
                    85:13:c1:c5:8b:f3:ca:83:7f:c3:82:95:51:6f:d4:
                    54:42:50:ba:43:1a:00:68:fa:21:83:7b:71:75:0c:
                    1c:79:df:10:5a:d4:82:c6:18:54:7b:fa:79:5b:62:
                    9b:67:39:cc:82:d8:75:ed:a4:3c:b9:8b:94:f3:e0:
                    21:db:3c:c8:ff:b6:28:ac:3d:e8:c8:35:d8:d3:9e:
                    fb:a7:dd:57:d8:85:ba:11:20:54:0e:c3:ff:48:5c:
                    ea:6b:25:b5:aa:f9:7d:af:55:c9:b7:77:1c:b0:63:
                    ae:f0:78:6d:d9:5b:64:2d:99:34:a6:cf:ba:cb:88:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CF:74:20:1B:EB:61:44:6E:09:49:50:48:3C:3C:6B:C8:E5:6F:83
            X509v3 Authority Key Identifier:
                keyid:1A:68:29:41:F8:78:9C:4C:EA:3C:C3:3B:63:73:E4:94:76:30:BC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187F7E/C763B5E010E911ED85CCEA37C4F9AE02/GmgpQfh4nEzqPMM7Y3PklHYwvIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:3e:16:2e:d7:0a:b7:20:17:68:47:19:71:99:28:ba:45:
         99:48:ad:d5:04:ce:8d:8b:ff:07:44:e1:98:ff:95:42:17:b3:
         30:df:cf:12:33:00:54:c3:94:03:2a:5d:18:a8:cf:0e:f1:85:
         3d:b5:af:3b:db:13:ed:09:b3:4e:b6:2d:d6:46:af:07:3a:fa:
         f8:e7:72:99:07:b8:f4:78:15:5e:32:df:64:ff:6b:09:b9:db:
         43:ce:5c:35:e0:bc:a4:90:44:3c:08:ca:7c:bb:96:a6:5c:2d:
         4e:f0:a0:f7:dd:41:e1:46:e1:e0:03:76:94:a9:26:79:d0:6d:
         ef:90:13:ac:60:65:ca:fd:8a:da:00:ef:80:c0:29:ec:8a:97:
         bf:8e:47:78:c1:88:b0:30:05:b8:fc:a2:84:d3:6a:ca:56:fd:
         cd:72:c3:69:2e:09:f8:fa:6b:82:88:e4:e0:7b:fb:01:ea:d7:
         4a:ff:04:2f:67:67:4b:c2:a5:a9:b0:23:25:89:ad:5e:01:7d:
         0b:71:58:b2:00:2a:f8:10:9d:9c:18:ff:ef:99:48:d2:76:87:
         d1:7e:34:41:d3:8d:ad:94:e1:cc:33:12:7b:a1:4b:77:78:b1:
         e0:66:23:e4:ae:cd:27:31:93:c5:2e:6e:dc:ec:99:78:22:d0:
         8f:6a:17:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:46:46 2026 by rpki-client