Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
File:                     A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json)
Hash identifier:          8BLHbepzcWrc83nDr9L9r97k1zHr7v5LTh6Yt72mBW4=
Subject key identifier:   E4:AB:3A:02:CC:07:1F:27:BE:F1:1A:79:BA:00:26:A0:BA:8F:60:2E
Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75
Certificate issuer:       /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
Manifest number:          8D
Signing time:             Sat 13 Jun 2026 07:35:05 +0000
Manifest this update:     Sat 13 Jun 2026 07:35:04 +0000
Manifest next update:     Sat 20 Jun 2026 07:35:04 +0000
Files and hashes:         1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: /ZXbfP2VTNVa+TZ5mKke5Fsn+t0vE5Id45WqOyA4T0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075
        Validity
            Not Before: Jun 13 07:35:04 2026 GMT
            Not After : Jun 20 07:35:04 2026 GMT
        Subject: CN=6a2d0828-9ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8e:73:ab:b4:6b:e1:a6:81:2b:b3:a3:41:f5:
                    c5:a7:42:fa:10:1b:06:ce:b0:9a:90:80:e6:23:c2:
                    55:7c:1b:25:e9:cc:bc:ef:99:25:d2:89:fa:c4:5b:
                    44:f1:c4:6e:1a:3f:25:30:98:ab:a2:6d:38:4b:7d:
                    ae:20:f2:d6:73:41:04:2a:f4:1f:90:8e:ca:e3:b2:
                    86:99:49:15:56:75:0b:91:bc:25:a3:08:6f:49:4d:
                    1b:48:44:4b:4e:04:33:03:0d:7d:53:44:1e:b1:ba:
                    3d:7c:b8:76:42:28:9e:da:27:26:ff:f5:7d:b8:65:
                    43:e5:88:40:ab:13:08:fa:7e:f2:fc:b2:e2:9b:a7:
                    bb:43:be:d4:57:cd:33:fb:27:23:4c:8a:43:72:4c:
                    be:12:c2:50:72:99:11:23:76:a1:37:e3:2a:4d:0b:
                    a1:54:33:6e:f6:5f:18:c2:99:54:6a:5f:f4:0d:ab:
                    c6:05:da:23:57:bc:11:af:93:59:f8:e0:a2:02:d5:
                    35:ab:3f:5a:82:5a:2c:8c:7f:7f:2b:39:38:86:83:
                    23:5c:91:58:76:ab:20:a0:80:29:3a:70:97:80:0d:
                    03:8e:37:c7:1b:c2:92:77:85:50:7e:fb:26:bd:0c:
                    5b:0c:bb:57:88:89:4b:32:cd:5a:5d:d7:0c:e9:f7:
                    00:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:3A:02:CC:07:1F:27:BE:F1:1A:79:BA:00:26:A0:BA:8F:60:2E
            X509v3 Authority Key Identifier:
                keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:18:bf:aa:92:d9:2f:c0:b0:0a:b3:3d:7c:a4:60:80:7b:
         91:f0:43:1b:26:44:5d:d6:23:5d:33:e2:c3:c5:c6:f4:b6:8f:
         df:9c:59:67:ba:9a:26:09:aa:49:4d:8a:05:95:a0:98:69:1a:
         d4:c7:2c:50:1a:08:e3:d7:35:bc:1f:21:29:5c:a2:a9:24:ef:
         65:8f:f7:f7:1f:e4:bf:c4:67:48:45:5d:7f:58:8c:59:0d:3d:
         5e:42:a2:eb:dc:3d:8a:47:b9:05:12:d5:a4:be:81:4e:d5:ff:
         74:4f:c2:ab:2f:a8:6a:5e:19:ea:8c:79:89:e2:b8:d3:70:3d:
         cb:18:4f:55:ab:5c:47:73:f3:19:08:3d:92:e5:5d:12:56:49:
         2a:b9:91:6f:e6:42:e7:2f:86:66:90:54:9f:be:28:1f:2c:4a:
         c6:6f:0a:f1:72:bd:4d:73:53:fc:e9:be:ca:2a:b5:96:d4:6e:
         0d:67:9b:fd:0e:23:95:30:03:e9:d0:21:5b:73:da:d1:f2:7c:
         40:5d:24:f8:c2:02:8e:b0:90:fb:76:dd:b2:19:f5:d6:f4:1f:
         07:d9:d0:81:2a:e4:4d:60:2a:b0:03:81:dd:c1:13:fb:c6:72:
         6c:3c:56:9a:4e:c4:25:80:e8:71:83:64:9b:9d:c3:0c:99:f8:
         10:da:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:39 2026 by rpki-client