Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
File:                     GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json)
Hash identifier:          3l+f935uxSkTGNlItyeROPXHIIFeaZ/S/dGRFRO/RCY=
Subject key identifier:   66:66:DE:87:C9:3B:9A:13:1D:62:1F:63:10:47:9E:C7:7F:01:6B:2E
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Certificate issuer:       /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
Manifest number:          94
Signing time:             Tue 29 Sep 2026 08:06:29 +0000
Manifest this update:     Tue 29 Sep 2026 08:06:28 +0000
Manifest next update:     Tue 06 Oct 2026 08:06:28 +0000
Files and hashes:         1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: Rv6oG1gdDq2TgKaenShSqw+NBR2gLWJ9IHYudbrhxK0=)
                          2: 18EB15B84C6C11F1A78F0F88C2833773.roa (hash: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=)
                          3: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
        Validity
            Not Before: Sep 29 08:06:28 2026 GMT
            Not After : Oct  6 08:06:28 2026 GMT
        Subject: CN=6abb7185-44c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e1:51:12:29:d9:23:93:88:d9:60:35:0e:fa:
                    e5:50:a9:16:ac:f7:11:29:0f:13:8e:40:0d:66:21:
                    cd:d1:9b:9a:e8:c0:ce:56:8a:c6:db:3d:72:b5:41:
                    25:63:b5:c2:ad:59:5d:e3:a9:0c:25:3a:3b:a7:43:
                    03:a9:ba:4a:f6:e4:bc:32:47:63:7d:fe:a9:95:7d:
                    1d:49:fc:b9:11:84:cf:5f:8a:43:d0:4b:ed:e4:14:
                    2a:80:06:ae:35:9b:5e:32:d3:b5:a8:7e:2f:a4:45:
                    8e:7d:5d:33:93:bd:fd:23:d2:10:9b:50:04:7f:56:
                    02:ae:a9:ea:61:c0:67:ee:9a:49:f3:58:c5:9a:fc:
                    9d:f3:36:89:a4:c8:8d:dc:4d:9d:2c:02:49:b5:ea:
                    77:6c:38:c8:94:8b:20:05:47:8c:06:d1:75:60:20:
                    72:93:2a:e9:c4:14:7f:39:6a:68:5c:42:af:36:2c:
                    b8:5f:e9:97:a9:79:73:14:6e:d9:3a:7c:27:38:35:
                    f0:89:c1:5d:a9:26:40:0a:6a:87:8c:79:18:e0:4d:
                    b7:02:fd:65:73:5a:7e:53:c7:f7:28:9f:be:1b:96:
                    f8:70:c1:d2:d4:8c:76:9d:47:b0:d5:42:29:49:65:
                    32:32:44:94:d9:b8:8f:22:f4:70:24:f6:5c:bf:c3:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:66:DE:87:C9:3B:9A:13:1D:62:1F:63:10:47:9E:C7:7F:01:6B:2E
            X509v3 Authority Key Identifier:
                keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8a:e6:57:ba:03:43:ef:96:cd:87:6d:30:37:df:96:04:f1:
         03:7c:b5:05:fd:2e:5b:b9:fb:34:08:f0:a1:fa:93:1e:2e:1b:
         3e:bb:8c:51:86:c1:9c:ea:3b:4a:d3:d0:69:6a:6a:18:b5:bb:
         dd:40:a7:e5:48:6a:14:49:dd:a1:f3:ad:84:8d:94:f1:65:21:
         01:f9:87:15:39:64:9f:91:59:a3:a0:72:bf:c9:83:0d:44:9c:
         4c:be:e5:34:b2:20:b8:ec:9c:f5:02:5a:72:fc:62:cc:44:d6:
         46:04:fa:ae:0b:13:04:7e:54:46:59:fa:96:9b:60:56:4f:15:
         38:13:d5:97:6b:9b:db:76:8a:b7:d5:a9:83:01:07:a0:d3:b1:
         cc:5d:b3:50:76:24:f2:98:d5:18:54:ee:99:27:32:12:6f:12:
         11:d0:61:fc:c3:8c:f4:58:d0:cf:8e:c2:bc:15:78:c4:de:f4:
         b9:d6:75:54:82:b4:54:16:09:88:1f:a3:e2:63:e7:46:a9:0b:
         21:13:31:d4:33:67:8e:a7:29:39:dd:ec:df:be:28:2f:8b:9a:
         a2:7e:97:f2:5e:90:79:4d:00:21:84:28:90:09:ae:28:a9:40:
         03:7c:2c:a9:4b:f1:33:a4:d6:ae:44:85:de:65:43:5c:b5:83:
         07:2c:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:24:43 2026 by rpki-client