Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          3ejBdvb9eoLeuNZyZS5EcjRDeHAEihL3T2A3TmjMt7w=
Subject key identifier:   82:F9:46:35:39:7F:92:05:76:B5:F3:CA:1B:FB:AE:4B:9E:E3:6E:34
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          0171
Signing time:             Sun 11 Oct 2026 05:27:36 +0000
Manifest this update:     Sun 11 Oct 2026 05:27:36 +0000
Manifest next update:     Sun 18 Oct 2026 05:27:36 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: pMTyn8X1pxNki4wa//8gkim/Pj0kP2deKad+g1mYZ54=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 05:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Oct 11 05:27:36 2026 GMT
            Not After : Oct 18 05:27:36 2026 GMT
        Subject: CN=6acb1e48-1457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:f6:66:1b:4a:6a:9c:b5:f3:1e:2c:af:db:
                    fa:24:51:50:0b:cf:6d:83:26:c8:f9:e6:c2:24:d2:
                    20:72:ce:a8:10:c3:fb:b0:60:96:c1:7d:5e:00:93:
                    a7:3f:fe:a8:d7:0b:7c:d4:95:2a:81:d2:15:08:ff:
                    98:52:a0:33:78:83:53:2a:a8:52:96:d6:f0:39:82:
                    a4:a3:62:e5:c8:4f:1a:40:aa:82:f8:e1:65:50:51:
                    d0:e9:7f:6c:7c:50:bb:39:08:4a:17:6a:01:4e:5e:
                    2b:d7:8a:32:0b:27:01:61:41:01:6d:8e:af:3b:57:
                    29:7f:be:32:4f:6f:53:ec:2d:df:cc:60:b2:15:f1:
                    fd:79:d6:14:fd:b6:30:8b:1b:b5:1d:27:58:70:f0:
                    28:45:49:f8:23:c7:ee:0c:f4:9d:f6:bf:92:02:db:
                    24:b3:24:d0:fd:4a:bd:d8:4a:ec:52:f1:3d:7b:82:
                    d1:9a:5c:1a:0e:a3:69:f9:1c:05:af:21:83:89:b1:
                    f2:ac:45:3f:06:ef:51:33:61:8b:ed:99:1f:c5:bd:
                    88:f4:4a:9f:dc:9e:ef:22:77:8f:1b:9a:18:6a:03:
                    ae:b3:f2:50:ab:c7:52:00:e8:10:42:07:35:95:e7:
                    46:d6:32:26:c6:17:f3:9f:7a:5a:9b:0f:91:f6:0b:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F9:46:35:39:7F:92:05:76:B5:F3:CA:1B:FB:AE:4B:9E:E3:6E:34
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:05:40:ad:94:a3:fc:ab:41:01:cf:4e:21:ae:9e:e9:ef:
         ef:ad:62:83:14:5d:13:4c:b3:77:aa:03:a0:7f:66:f3:fc:28:
         70:64:8d:d6:93:75:66:33:b6:c6:96:bc:c2:d2:07:c7:14:36:
         b1:6d:5f:ed:d4:b2:f4:fb:27:63:49:30:ab:27:cb:d8:2b:8b:
         a7:35:9f:3f:23:e0:81:b7:3c:09:04:fd:5e:44:f2:b7:5f:2c:
         3d:d4:96:c3:d8:21:4a:8d:87:87:6e:31:35:b8:d4:cf:b2:fe:
         84:e0:bf:b0:6a:1c:36:22:d6:40:af:b9:0e:eb:de:9d:7a:99:
         68:1e:61:58:0c:7d:f4:35:87:ca:43:86:d9:8f:84:5d:ef:f8:
         72:95:7e:83:3f:17:ef:3b:63:ef:8b:c2:24:1b:ff:c2:43:b9:
         06:37:fc:ad:a7:25:22:ed:d7:2f:57:29:0c:b9:4c:24:eb:7e:
         d1:78:da:13:4d:2c:fb:8a:bc:57:00:ec:b0:ef:36:2d:3e:92:
         c1:bb:c8:aa:92:e6:0a:9e:67:78:4e:87:ac:07:15:36:f8:48:
         b7:e7:30:2a:bb:18:18:02:20:32:3a:05:9f:c0:93:ba:d6:11:
         fc:95:21:42:66:b9:9d:ea:17:d3:d1:d6:de:9b:7e:5f:81:14:
         46:98:2f:47
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy
NDIyRUI2NkYwHhcNMjYxMDExMDUyNzM2WhcNMjYxMDE4MDUyNzM2WjAYMRYwFAYD
VQQDEw02YWNiMWU0OC0xNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3dn2ZhtKapy18x4sr9v6JFFQC89tgybI+ebCJNIgcs6oEMP7sGCWwX1eAJOn
P/6o1wt81JUqgdIVCP+YUqAzeINTKqhSltbwOYKko2LlyE8aQKqC+OFlUFHQ6X9s
fFC7OQhKF2oBTl4r14oyCycBYUEBbY6vO1cpf74yT29T7C3fzGCyFfH9edYU/bYw
ixu1HSdYcPAoRUn4I8fuDPSd9r+SAtsksyTQ/Uq92ErsUvE9e4LRmlwaDqNp+RwF
ryGDibHyrEU/Bu9RM2GL7Zkfxb2I9Eqf3J7vInePG5oYagOus/JQq8dSAOgQQgc1
ledG1jImxhfzn3pamw+R9gsFaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIL5RjU5
f5IFdrXzyhv7rkue4240MB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1
NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51
VVpETWVoZldyM0lrSXV0bTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALaMFQK2Uo/yrQQHPTiGununv761igxRdE0yzd6oDoH9m8/wocGSN1pN1ZjO2
xpa8wtIHxxQ2sW1f7dSy9PsnY0kwqyfL2CuLpzWfPyPggbc8CQT9XkTyt18sPdSW
w9ghSo2Hh24xNbjUz7L+hOC/sGocNiLWQK+5DuvenXqZaB5hWAx99DWHykOG2Y+E
Xe/4cpV+gz8X7ztj74vCJBv/wkO5Bjf8raclIu3XL1cpDLlMJOt+0XjaE00s+4q8
VwDssO82LT6SwbvIqpLmCp5neE6HrAcVNvhIt+cwKrsYGAIgMjoFn8CTutYR/JUh
Qma5neoX09HW3pt+X4EURpgvRw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:13:09 2026 by rpki-client