Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
File:                     GlXbYnoqLksmZy7g4ddRL4ZBToM.mft (raw, json)
Hash identifier:          7/P/8uiWPhjsdmfjY6ESkCCj8JGrrW0R5+bIlyQzNkM=
Subject key identifier:   31:73:03:CB:A2:21:FE:D4:1F:7C:27:59:89:3E:35:50:EF:A7:BB:A4
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Certificate issuer:       /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial:       35BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
Manifest number:          359E
Signing time:             Sun 20 Sep 2026 14:35:39 +0000
Manifest this update:     Sun 20 Sep 2026 14:35:38 +0000
Manifest next update:     Sun 27 Sep 2026 14:35:38 +0000
Files and hashes:         1: GlXbYnoqLksmZy7g4ddRL4ZBToM.crl (hash: 06/705mOC/Q7nR/1h8o5ecuvseA0w7a9vEX4Dgt71LY=)
                          2: AB9A0D320D6011EDA50DFA25C4F9AE02.roa (hash: 1Cdkvj8Zmrz288tTtARmoTNJLlC3XzpmCC67kc6iQwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl
                          rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13755 (0x35bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA898, serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
        Validity
            Not Before: Sep 20 14:35:38 2026 GMT
            Not After : Sep 27 14:35:38 2026 GMT
        Subject: CN=6aafef3b-f426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:da:98:b9:5c:98:42:ad:39:f1:48:63:3f:
                    c7:33:27:2d:1f:17:e9:fd:e3:68:3d:97:16:53:7b:
                    39:11:d4:ad:25:a1:52:ae:3f:7c:12:be:37:2d:0d:
                    84:fe:70:29:bc:02:5d:37:59:ad:09:2a:f3:9b:73:
                    3f:11:2c:e7:28:f1:f6:01:e4:49:4b:d7:dd:6d:87:
                    e5:18:33:5b:8c:4b:19:bf:e2:1d:3f:a7:af:ef:81:
                    27:5e:5e:da:b4:a1:e8:9d:a8:53:7a:36:42:5a:6c:
                    eb:cc:e3:7b:8a:32:51:59:b5:fc:5f:ab:d0:e3:a1:
                    a1:9f:69:b5:f6:2c:de:24:ff:ab:6e:47:1c:c5:c4:
                    f2:11:50:a1:d6:c9:03:91:9d:52:8b:62:88:ea:8b:
                    f0:8e:9b:ab:d8:7f:b6:5f:e2:b0:6d:7a:33:b5:f8:
                    96:a8:99:e0:0f:c5:13:6d:1d:4d:b8:8e:16:ef:b3:
                    27:00:dd:2a:1d:e7:6f:33:7d:3c:33:43:b5:63:02:
                    4c:cb:70:80:4a:37:5b:d5:2c:cc:bb:d3:f6:ed:cc:
                    4d:b4:ee:08:48:5e:10:65:3c:33:5f:5a:50:bf:38:
                    4c:40:ff:50:5b:e1:40:be:b9:46:9d:13:ca:73:80:
                    98:d7:ac:8a:95:e4:74:11:24:bf:06:f1:78:71:b9:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:03:CB:A2:21:FE:D4:1F:7C:27:59:89:3E:35:50:EF:A7:BB:A4
            X509v3 Authority Key Identifier:
                keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:2b:dc:0a:e1:34:f1:de:1d:3c:fb:f5:00:94:6f:0f:ad:
         1d:48:a2:6e:6d:21:f7:be:34:27:be:20:7d:d5:82:dd:1b:54:
         05:cd:dd:61:d3:bf:95:ee:a7:0f:c9:59:5b:36:39:36:0c:6b:
         3b:f4:ca:cd:19:cc:74:e4:35:55:2f:2b:35:99:7d:8b:c5:1b:
         a0:63:df:73:8d:06:81:df:d6:69:df:39:e3:d4:66:99:ea:5a:
         46:91:31:70:92:aa:48:ec:2a:ab:e9:d8:4b:75:ea:3c:d2:94:
         6c:c0:a5:c1:11:ca:46:69:68:f1:96:72:0a:8b:df:7c:31:a8:
         15:23:46:e3:ca:8b:a8:36:5b:7a:2e:3e:fd:a2:57:eb:a5:8e:
         18:f7:4d:d4:1c:8a:24:86:af:2f:31:c1:75:fa:03:0e:88:b7:
         a9:55:bd:cc:aa:68:9a:78:92:d2:23:3b:03:52:5b:04:5f:51:
         e0:02:3e:75:fc:e2:da:ea:34:9d:e5:42:b4:51:43:ca:6b:ae:
         eb:33:72:9f:07:71:4a:78:64:9d:c0:ee:c7:77:6e:c1:43:34:
         ce:7c:dd:76:57:69:1a:2e:24:a0:c6:14:e0:7d:3f:e4:61:37:
         51:8a:69:4b:4c:41:e2:c9:1a:89:4b:6d:f5:32:5f:e5:1d:72:
         81:6c:ce:7b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG
ODY0MTRFODMwHhcNMjYwOTIwMTQzNTM4WhcNMjYwOTI3MTQzNTM4WjAYMRYwFAYD
VQQDEw02YWFmZWYzYi1mNDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvwPamLlcmEKtOfFIYz/HMyctHxfp/eNoPZcWU3s5EdStJaFSrj98Er43LQ2E
/nApvAJdN1mtCSrzm3M/ESznKPH2AeRJS9fdbYflGDNbjEsZv+IdP6ev74EnXl7a
tKHonahTejZCWmzrzON7ijJRWbX8X6vQ46Ghn2m19izeJP+rbkccxcTyEVCh1skD
kZ1Si2KI6ovwjpur2H+2X+KwbXoztfiWqJngD8UTbR1NuI4W77MnAN0qHedvM308
M0O1YwJMy3CASjdb1SzMu9P27cxNtO4ISF4QZTwzX1pQvzhMQP9QW+FAvrlGnRPK
c4CY16yKleR0ESS/BvF4cbl84wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFzA8ui
If7UH3wnWYk+NVDvp7ukMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE
OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QTg5OC82OUFEQzE5RTFEOEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxr
c21aeTdnNGRkUkw0WkJUb00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQeMr3ArhNPHeHTz79QCUbw+tHUiibm0h9740J74gfdWC3RtUBc3dYdO/le6n
D8lZWzY5NgxrO/TKzRnMdOQ1VS8rNZl9i8UboGPfc40Ggd/Wad8549RmmepaRpEx
cJKqSOwqq+nYS3XqPNKUbMClwRHKRmlo8ZZyCovffDGoFSNG48qLqDZbei4+/aJX
66WOGPdN1ByKJIavLzHBdfoDDoi3qVW9zKpomniS0iM7A1JbBF9R4AI+dfzi2uo0
neVCtFFDymuu6zNynwdxSnhkncDux3duwUM0znzddldpGi4koMYU4H0/5GE3UYpp
S0xB4skaiUtt9TJf5R1ygWzOew==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:28:17 2026 by rpki-client