Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
File:                     Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json)
Hash identifier:          P7y+543pG4JGsfn2fTbwHsj77qbxcCYsjPk5j8rRk60=
Subject key identifier:   62:D4:46:C9:8E:A5:19:D7:DC:3D:53:D9:DE:04:64:CF:E6:EF:AB:1B
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Certificate issuer:       /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial:       07DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
Manifest number:          07D6
Signing time:             Sat 26 Sep 2026 21:29:22 +0000
Manifest this update:     Sat 26 Sep 2026 21:29:21 +0000
Manifest next update:     Sat 03 Oct 2026 21:29:21 +0000
Files and hashes:         1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: mo7vAubgdP/1iuVRWOl8ppqTRKxzA6ykLDEQdzfXYAI=)
                          2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: lzR6pyvl0y5+kPNyylXFhv+PwYmB2saEThM6foq0LbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
                          rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
        Validity
            Not Before: Sep 26 21:29:21 2026 GMT
            Not After : Oct  3 21:29:21 2026 GMT
        Subject: CN=6ab83932-62e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:d3:8b:02:08:65:ac:08:64:e3:e2:ac:87:
                    23:d0:1c:02:f7:16:9f:2d:c7:6c:df:e0:69:e2:54:
                    30:38:d4:83:7b:ef:3c:9a:ed:c8:eb:3f:ec:09:62:
                    59:95:9e:02:6c:82:0a:bb:31:c4:77:4e:61:bb:b9:
                    c4:ca:82:69:c4:56:88:2f:f7:8e:e4:5e:c5:d8:cc:
                    ed:0d:2e:97:6f:92:47:59:49:76:91:fe:90:88:2b:
                    6e:62:c7:b4:d6:b6:db:ad:35:79:82:c0:37:cc:ed:
                    56:e0:91:b9:14:14:58:45:25:b3:0e:25:f8:80:0d:
                    51:0f:32:76:26:fe:8a:91:92:62:82:0c:09:1b:42:
                    93:1b:f5:ff:ab:ca:36:1e:e3:10:01:ce:30:d2:b6:
                    1a:7b:69:ef:63:f1:36:ba:30:c6:07:17:5f:99:92:
                    f5:91:e6:ab:ed:6e:1b:27:1b:2d:e8:52:33:8e:58:
                    96:ca:ad:8c:33:17:4d:2c:04:11:22:79:ee:12:19:
                    27:a3:cc:44:7a:a1:f9:3d:7f:ff:4a:23:a3:82:c8:
                    36:dd:77:1e:68:78:31:15:7e:67:2d:7d:7e:80:00:
                    d0:45:af:1a:5e:b9:76:7e:55:05:4a:7e:ba:2c:2b:
                    24:01:6a:b4:a1:66:b3:13:4a:00:22:e7:ed:1f:a3:
                    54:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:46:C9:8E:A5:19:D7:DC:3D:53:D9:DE:04:64:CF:E6:EF:AB:1B
            X509v3 Authority Key Identifier:
                keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cc:f1:70:5a:f7:53:c2:3f:ca:b6:83:1b:ef:10:5e:fd:4d:
         c6:a2:84:59:43:21:58:b9:e9:1e:2a:19:66:8b:78:3b:9e:37:
         8d:87:47:52:ae:9a:df:9d:32:36:44:3b:4a:b3:f5:f2:45:3f:
         bb:ed:39:ac:b3:2c:40:5f:2f:40:4e:92:f6:77:83:b6:5b:42:
         7c:b9:90:50:6f:f5:70:68:24:85:c1:7b:b1:d4:fe:36:8a:71:
         99:e8:a0:92:24:6e:1d:9f:b6:c2:3c:3d:7d:89:d8:2b:1e:5a:
         94:f5:ed:5f:e7:3c:5f:33:2a:6b:d4:5b:69:79:32:d8:92:91:
         b1:26:37:70:66:bf:60:d8:5e:13:8e:4b:27:7f:d4:6f:c6:e4:
         fa:5d:71:ee:a6:63:cd:0a:7f:c3:f8:80:dd:d9:ca:b0:b9:eb:
         29:e1:1c:34:28:e9:ca:08:c0:8a:98:f5:a2:74:33:dd:d0:b1:
         1b:cc:9b:fc:41:a1:75:ad:56:e7:81:9d:a3:cc:67:b7:d8:c2:
         e1:db:46:53:de:fb:29:f7:ba:ab:7d:09:77:07:29:ff:8e:0a:
         04:dc:6a:f3:c0:da:1f:70:72:12:a0:00:de:29:08:48:5a:2e:
         13:9b:52:28:62:eb:7d:36:ce:0e:b7:95:17:f7:d3:7b:37:cd:
         db:0a:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:47:41 2026 by rpki-client