Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          uF9rpWTXcrRjeJLyD17Zf1SS7h0RLZXcS2/OvK7R6Tk=
Subject key identifier:   D3:A7:E4:F5:C1:46:C8:09:46:C0:79:DB:55:0A:12:5E:65:07:A9:60
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          019A
Signing time:             Tue 13 Oct 2026 04:54:19 +0000
Manifest this update:     Tue 13 Oct 2026 04:54:19 +0000
Manifest next update:     Tue 20 Oct 2026 04:54:19 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: tcEvDaCZkVGbUhS6ZU+MJBEG6K5N9cevcjiphPZ6z9I=)
                          2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: 0/zUGUggZuOuHhSO/RhqXCHzt2FyzS+mBpPChTmDqUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 04:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Oct 13 04:54:19 2026 GMT
            Not After : Oct 20 04:54:19 2026 GMT
        Subject: CN=6acdb97b-f800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:c8:b7:51:d2:9f:c7:68:0e:e3:9f:76:2f:
                    22:58:ab:fe:ec:37:aa:8f:ca:8f:8a:21:77:c5:87:
                    ea:c3:64:0c:20:53:16:2b:cb:db:3f:01:dc:60:75:
                    43:ba:a6:ca:1a:a6:e9:0d:71:cf:90:ed:a2:b3:84:
                    a9:0a:d7:2c:fb:56:d8:78:53:6a:28:be:93:b5:cc:
                    e3:c2:c6:8f:c7:45:f8:25:a5:56:b9:48:ce:ea:a7:
                    4e:77:c4:9d:58:54:d1:2f:df:5f:4a:77:0b:9d:5a:
                    18:3d:70:f4:c7:d6:00:ef:29:55:81:99:83:61:3e:
                    42:be:26:a3:ee:9a:56:3a:7b:1d:fe:5c:fc:9b:09:
                    3f:42:9a:c6:46:cb:b7:4f:93:bd:d8:d5:a9:84:a6:
                    30:00:21:06:4a:46:b0:08:2d:ca:dc:3e:7e:d1:97:
                    9f:09:b6:d0:86:19:e1:50:bd:d0:04:a9:68:1a:77:
                    79:ea:5e:52:13:08:de:3a:b7:b9:1f:7e:da:fa:2c:
                    55:c2:b7:31:de:5f:d2:fa:5c:fd:5f:7b:91:df:69:
                    27:c0:f7:a7:15:12:0e:26:f2:52:c0:44:49:a3:74:
                    fc:4f:5e:95:ac:10:bb:ee:bd:c6:6a:fe:a9:e8:4d:
                    d2:a8:2e:46:31:47:d4:18:b2:d6:6d:e6:09:90:8b:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A7:E4:F5:C1:46:C8:09:46:C0:79:DB:55:0A:12:5E:65:07:A9:60
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:c5:36:64:fa:e2:ba:6d:ad:27:34:bf:a2:43:19:e1:b8:ee:
         5c:7b:53:98:d1:54:90:8f:48:07:28:8b:4d:fc:56:51:10:b7:
         eb:d1:a2:ff:f3:a6:e5:21:d9:69:2e:1e:bf:10:a6:a5:aa:45:
         a1:55:cb:5d:67:2b:da:b6:35:e1:00:b6:1a:81:12:21:0d:33:
         f8:56:38:3b:30:b0:c8:ea:06:1e:f9:8e:8d:1e:30:58:52:26:
         69:d4:69:49:8c:65:12:e0:f2:a9:f0:6c:d2:9a:cf:a3:2c:10:
         45:1e:70:83:27:b5:3c:ce:5d:d9:cf:36:ad:38:c7:b8:43:29:
         8f:54:a9:5d:3e:4a:2a:93:44:97:1f:34:8a:7b:41:0d:26:33:
         db:f0:02:c5:85:3d:0f:40:ab:e9:c2:90:0e:ff:39:9f:ec:2b:
         c3:f8:ad:59:eb:49:42:2c:14:27:ca:c2:b1:db:8e:06:e9:06:
         5c:02:8f:11:3d:4b:c5:88:8d:a2:2a:b8:e5:04:39:2f:50:ed:
         4e:5e:3e:e5:ef:2c:b0:d8:d6:f0:e8:3c:ba:07:bf:a8:a0:3e:
         ae:33:97:e8:05:3e:00:5e:18:cb:02:8b:56:72:72:6a:b4:12:
         25:8b:76:3d:4b:22:23:48:f2:59:50:5a:59:4f:ea:56:c0:5e:
         51:70:5a:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx
N0Y3Q0U5OUEwHhcNMjYxMDEzMDQ1NDE5WhcNMjYxMDIwMDQ1NDE5WjAYMRYwFAYD
VQQDEw02YWNkYjk3Yi1mODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bfIt1HSn8doDuOfdi8iWKv+7Deqj8qPiiF3xYfqw2QMIFMWK8vbPwHcYHVD
uqbKGqbpDXHPkO2is4SpCtcs+1bYeFNqKL6TtczjwsaPx0X4JaVWuUjO6qdOd8Sd
WFTRL99fSncLnVoYPXD0x9YA7ylVgZmDYT5Cviaj7ppWOnsd/lz8mwk/QprGRsu3
T5O92NWphKYwACEGSkawCC3K3D5+0ZefCbbQhhnhUL3QBKloGnd56l5SEwjeOre5
H37a+ixVwrcx3l/S+lz9X3uR32knwPenFRIOJvJSwERJo3T8T16VrBC77r3Gav6p
6E3SqC5GMUfUGLLWbeYJkIsp4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOn5PXB
RsgJRsB521UKEl5lB6lgMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC
MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2
QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWcU2ZPrium2tJzS/okMZ4bjuXHtTmNFUkI9IByiLTfxWURC369Gi//Om5SHZ
aS4evxCmpapFoVXLXWcr2rY14QC2GoESIQ0z+FY4OzCwyOoGHvmOjR4wWFImadRp
SYxlEuDyqfBs0prPoywQRR5wgye1PM5d2c82rTjHuEMpj1SpXT5KKpNElx80intB
DSYz2/ACxYU9D0Cr6cKQDv85n+wrw/itWetJQiwUJ8rCsduOBukGXAKPET1LxYiN
oiq45QQ5L1DtTl4+5e8ssNjW8Og8uge/qKA+rjOX6AU+AF4YywKLVnJyarQSJYt2
PUsiI0jyWVBaWU/qVsBeUXBa/Q==
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:43:19 2026 by rpki-client