Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
File:                     _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json)
Hash identifier:          mftxm5S4S5NIf9pPosWmassqMMpSoFA+fa9luFFB0yk=
Subject key identifier:   4F:B3:21:2C:09:6A:7C:16:CB:58:60:B7:EA:66:69:5A:9B:46:2F:A9
Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
Certificate issuer:       /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
Certificate serial:       27E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
Manifest number:          27D5
Signing time:             Tue 22 Sep 2026 15:35:29 +0000
Manifest this update:     Tue 22 Sep 2026 15:35:28 +0000
Manifest next update:     Tue 29 Sep 2026 15:35:28 +0000
Files and hashes:         1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: tPsP/4cz623A2v7O9xXp9vPs4mUEhEFh5C9DWcQhDis=)
                          2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: NdTxn+HasKfGOEbIN5yYPJ4JBQuKbqVM6GqJLCJsrzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl
                          rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10214 (0x27e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
        Validity
            Not Before: Sep 22 15:35:28 2026 GMT
            Not After : Sep 29 15:35:28 2026 GMT
        Subject: CN=6ab2a041-8558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:ca:65:80:42:a8:48:f7:21:15:fb:ea:22:
                    b4:c4:03:6c:a1:d7:91:7f:c9:dc:13:ca:72:b9:2a:
                    d8:82:cd:26:61:1b:d7:aa:38:7a:a1:db:0f:93:89:
                    e1:f4:a1:db:5b:02:f8:4a:3b:ba:44:b9:66:a1:60:
                    06:c7:21:44:f1:e4:43:87:83:21:0d:98:da:4f:a6:
                    73:9a:f0:4b:64:88:26:ba:00:da:d4:48:0f:94:13:
                    5e:af:88:dd:5a:9e:42:5c:26:ec:c7:eb:21:11:99:
                    3b:6d:4e:7e:6b:7b:f6:74:c5:21:2f:93:39:a6:a6:
                    03:db:77:3f:8c:b3:81:51:1e:87:9d:53:4a:a7:9a:
                    06:05:d8:06:01:8b:ed:27:2f:07:8d:0c:ec:97:03:
                    79:f2:44:19:e4:15:28:2c:76:6a:cd:40:69:25:02:
                    04:84:af:02:2f:e7:d5:c9:50:f5:a1:83:46:9d:e3:
                    4a:4e:6a:bd:bc:d7:98:3e:fb:05:01:35:52:7d:03:
                    84:99:c4:78:31:d9:50:ca:6d:04:e4:23:0f:23:da:
                    65:94:cc:7c:15:a2:a3:49:e3:f4:d1:c5:83:b2:f0:
                    d4:f2:73:5d:b7:8d:da:a0:a7:4e:b8:fb:b5:c8:48:
                    f0:f1:70:61:31:d3:b4:e6:65:c2:3b:e9:74:05:06:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B3:21:2C:09:6A:7C:16:CB:58:60:B7:EA:66:69:5A:9B:46:2F:A9
            X509v3 Authority Key Identifier:
                keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c4:4b:0c:10:b4:c0:82:b4:fe:62:58:3c:69:4f:b8:36:65:
         bc:33:76:21:31:6c:e8:2f:34:c1:44:b9:c8:27:61:3c:00:26:
         20:ac:42:66:e2:f5:c3:0b:ba:d2:41:be:25:e2:9d:de:1a:8a:
         69:84:23:15:b7:ff:03:06:ee:f1:13:b4:3e:05:ef:01:97:90:
         3e:f9:12:bb:cd:cc:40:c2:dc:d8:0e:e2:bd:fe:81:d8:bd:a6:
         4a:a3:6d:6b:af:6f:94:e8:59:20:a5:fc:e5:f9:c8:f0:51:b6:
         48:4e:12:a7:37:ad:92:7d:a9:b0:71:94:ba:6f:0d:14:d3:46:
         54:cc:32:b7:de:83:ec:fd:bc:3b:dd:4a:72:81:10:6f:ac:b8:
         b5:35:91:88:e6:d9:b4:af:00:f0:c4:60:73:8f:ce:3a:2c:06:
         9e:d5:25:e9:bb:79:b6:82:ef:71:94:d9:97:54:3e:3a:27:fa:
         72:5e:85:85:dc:eb:03:de:7e:39:ed:64:75:5f:05:3d:4f:e9:
         bc:be:4d:30:45:c2:84:de:fb:f5:e0:6a:72:a6:74:01:ec:ef:
         7c:2d:39:a6:70:b6:c5:8e:88:71:fd:83:db:65:d3:16:32:d1:
         bb:78:8f:11:f2:5e:93:8b:3d:37:01:1d:ca:d4:db:16:fb:58:
         dc:49:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:27:22 2026 by rpki-client