Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
File:                     gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft (raw, json)
Hash identifier:          KUwWWkCOBRr4kSr/kSvXwvg0TnqWWlCKE9dx7Y4UKY0=
Subject key identifier:   ED:48:18:30:CC:31:74:DA:BE:AF:B0:3A:7B:47:AA:6A:D0:4A:17:1B
Authority key identifier: 83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93
Certificate issuer:       /CN=A915FA57/serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
Manifest number:          54
Signing time:             Sat 03 Oct 2026 08:55:22 +0000
Manifest this update:     Sat 03 Oct 2026 08:55:22 +0000
Manifest next update:     Sat 10 Oct 2026 08:55:22 +0000
Files and hashes:         1: gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl (hash: pf184G3myn9Gwx0WZRP76/XyhFPVWGSGOgPBYiS0yJc=)
                          2: 5A303E7A3D4611F1994807ACA2833773.roa (hash: 75E46ZIZqwC0x2k0YHhHlFPjqIaUQxrI06tnum4Jygk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl
                          rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 08:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA57, serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
        Validity
            Not Before: Oct  3 08:55:22 2026 GMT
            Not After : Oct 10 08:55:22 2026 GMT
        Subject: CN=6ac0c2fa-d4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:6c:38:99:2b:b0:df:04:2e:c0:d4:37:6d:
                    c5:94:99:f3:9a:6b:3d:eb:66:45:9f:8a:26:08:6d:
                    45:03:3a:7b:4a:fb:57:43:22:8a:d4:43:49:43:2c:
                    0e:d1:31:93:ff:7b:16:a7:5f:9d:e9:f9:94:db:67:
                    a3:06:33:4c:a3:23:b4:b5:6f:01:01:e4:ac:da:19:
                    f0:1c:be:ac:3d:0d:e6:5d:35:83:92:bc:73:eb:41:
                    d9:d5:f0:7d:f0:85:f1:9e:69:61:ac:00:f7:0b:f5:
                    ee:c8:80:17:a1:57:58:cd:13:0e:ce:ff:6e:11:b0:
                    ee:4b:3c:10:2f:c0:ba:4b:08:03:e0:11:32:6e:31:
                    b4:3a:d1:2b:cd:be:96:db:5f:c2:d9:02:50:c3:23:
                    e0:8f:c9:06:86:48:86:49:f8:5c:c0:07:18:d6:cc:
                    bd:16:57:92:2a:98:ea:a0:0c:91:91:63:fc:75:7f:
                    d1:bf:04:10:f3:40:6f:c4:86:44:a2:0b:aa:ff:06:
                    1d:e1:2e:f0:e3:a8:e0:e4:b6:69:35:1a:21:d6:a3:
                    4e:40:18:e7:fe:5e:1a:6f:ca:94:03:6b:7e:57:6e:
                    56:ea:4d:cf:ed:2e:cc:ec:ec:aa:27:53:17:91:d7:
                    f1:9b:a0:d3:c0:9b:c1:f2:d2:78:1b:b5:45:b7:1d:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:48:18:30:CC:31:74:DA:BE:AF:B0:3A:7B:47:AA:6A:D0:4A:17:1B
            X509v3 Authority Key Identifier:
                keyid:83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:a0:f7:5a:a1:ad:dc:9f:ed:cb:2d:b9:04:fd:8b:29:e3:
         1f:8f:ba:ab:34:e2:7c:5c:00:8b:94:8c:d7:bb:d5:67:94:9d:
         b7:ac:c8:16:90:83:72:35:70:ec:d2:f3:8f:f9:d3:f3:35:22:
         90:2f:cb:3d:2d:0f:47:fc:30:f4:e6:f8:56:11:9e:42:2f:d8:
         03:35:b9:1c:eb:f1:37:dc:63:24:cc:ef:26:ac:58:e6:26:62:
         83:4d:be:7b:ce:df:fd:3f:d1:9c:26:56:83:4b:09:da:a9:29:
         da:26:c9:f8:5d:37:34:c8:3e:14:7e:22:3c:e3:e0:86:11:11:
         99:14:b5:4e:8b:cb:21:17:48:d1:5e:b2:85:86:5c:9e:99:f4:
         de:99:37:12:55:53:78:f6:74:35:48:72:9a:b5:47:4e:a0:8b:
         13:8c:50:9e:b8:65:f7:6c:7a:5b:3f:7e:bf:c2:ce:18:92:1c:
         1a:28:e7:4b:b1:08:5a:d7:7a:90:ce:70:1f:7e:40:42:cb:36:
         51:80:59:5f:3c:f5:e9:68:dd:1a:fa:b4:b5:e8:11:22:d2:c2:
         e7:83:aa:6a:4e:a6:5a:6e:0f:2a:7d:51:16:ba:e2:37:3c:15:
         09:0d:bb:75:94:e2:76:19:02:2f:cc:67:de:9d:8b:6c:e5:c4:
         dd:54:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:41:08 2026 by rpki-client