Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
File:                     A01GK1-vanw40CAcBdHfwtFikHU.mft (raw, json)
Hash identifier:          9q0fqpadb1eQbQVuoz+BjFO91H6dHRQhgfzbexYMeE8=
Subject key identifier:   25:86:87:93:F8:9E:24:81:70:D2:A0:63:43:28:07:23:AF:19:03:5F
Authority key identifier: 03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75
Certificate issuer:       /CN=A91CDFF8/serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
Manifest number:          A3
Signing time:             Mon 27 Jul 2026 09:24:51 +0000
Manifest this update:     Mon 27 Jul 2026 09:24:50 +0000
Manifest next update:     Mon 03 Aug 2026 09:24:50 +0000
Files and hashes:         1: A01GK1-vanw40CAcBdHfwtFikHU.crl (hash: CLFvH+k1tkoNqT4zyeEA2JbEKvhg8V45BWaZTLS5h3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl
                          rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDFF8, serialNumber=034D462B5FAF6A7C38D0201C05D1DFC2D1629075
        Validity
            Not Before: Jul 27 09:24:50 2026 GMT
            Not After : Aug  3 09:24:50 2026 GMT
        Subject: CN=6a6723e2-8f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:c3:6c:7d:f0:c8:6e:a2:87:17:63:49:f1:
                    6b:5b:a1:03:fc:50:84:5a:37:0f:0f:01:ac:1b:ca:
                    92:ef:d9:9a:25:6d:85:8a:bf:a4:0c:4b:9f:f2:f9:
                    dc:55:f5:28:2d:b8:3c:67:42:fb:3d:b2:ce:d5:b3:
                    8b:82:bb:c7:0a:de:23:f9:99:02:e2:14:5c:ad:49:
                    fc:0d:0b:d9:9b:cb:5e:e9:e3:5e:10:07:35:63:29:
                    56:c1:e5:fb:ef:5c:8d:c5:c5:11:0f:0a:03:82:cc:
                    d6:4a:bf:5c:4a:b1:31:4f:cc:01:b7:30:26:9c:8e:
                    1e:f3:0d:cd:92:30:97:98:4e:60:88:20:1e:d8:16:
                    39:32:61:02:8d:a1:81:46:65:31:23:64:9b:a0:a4:
                    a4:cb:7f:6a:20:2c:02:f3:f8:10:f8:e7:0a:1d:ed:
                    53:98:02:fc:1f:b3:62:40:7c:16:52:4a:d4:08:65:
                    c7:1d:e5:f0:a5:1f:6e:88:ce:d1:21:0d:ec:44:65:
                    5b:68:5f:3f:af:71:ba:96:00:0a:32:1e:97:a0:4b:
                    5e:5d:21:5b:b5:03:9c:69:12:4a:d1:aa:31:31:24:
                    54:f2:5f:0b:4d:87:c3:c2:b9:36:24:29:ce:ef:54:
                    ec:d4:17:02:12:2c:7c:7c:4a:72:e4:f9:2d:82:56:
                    09:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:87:93:F8:9E:24:81:70:D2:A0:63:43:28:07:23:AF:19:03:5F
            X509v3 Authority Key Identifier:
                keyid:03:4D:46:2B:5F:AF:6A:7C:38:D0:20:1C:05:D1:DF:C2:D1:62:90:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A01GK1-vanw40CAcBdHfwtFikHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDFF8/D10821D6920911F08A658056C4F9AE02/A01GK1-vanw40CAcBdHfwtFikHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:39:7d:94:86:13:8e:84:f6:fb:c9:b6:5b:2e:32:23:c1:
         b0:b2:0e:a8:07:38:bc:05:7e:48:4f:de:15:8d:8d:9c:8b:28:
         50:13:b2:51:44:5d:21:50:42:d8:13:49:59:b8:4c:bd:a0:1f:
         0a:f2:55:a6:22:c6:29:87:75:dc:f7:e1:24:55:d8:f8:6d:9f:
         e5:73:86:60:65:3c:b6:e1:68:0c:26:30:72:aa:9f:d7:e4:4b:
         0c:6a:75:26:ff:d5:6d:d9:bc:ca:1f:46:1b:7a:79:2b:91:af:
         e1:42:e7:1f:d7:a2:6f:48:d6:0e:b3:a3:c4:ad:98:a9:e7:e3:
         b7:5e:42:95:42:a1:0d:ed:f4:95:87:54:4f:a2:8a:e5:21:69:
         f3:66:15:e8:27:d4:17:6d:96:2f:1f:20:9c:84:e8:e2:a3:da:
         98:ae:97:7f:30:d8:df:cd:28:e2:a7:f2:97:8f:26:84:3f:4c:
         ca:49:52:8a:2e:06:eb:e1:16:d1:a5:a5:7d:92:63:eb:8b:08:
         ec:9f:12:16:80:d7:7a:78:f0:32:19:51:31:cb:08:5a:0e:b7:
         5f:46:59:ae:51:f8:db:1b:1b:c6:db:3d:b2:1d:95:00:9a:ab:
         bb:2f:ee:7d:fe:bc:92:39:49:37:4e:d5:70:39:58:d9:a6:61:
         4b:52:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:22 2026 by rpki-client