Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
File:                     gyiT0KdSAaIToGRFUyA9Aac8-v8.mft (raw, json)
Hash identifier:          oYuaSdl03iyJPvvENcI6eCthimUmiLUQ/8F37sFmJgU=
Subject key identifier:   76:89:44:03:5C:9C:9D:3E:39:61:C9:72:69:BC:99:2A:85:51:ED:78
Authority key identifier: 83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF
Certificate issuer:       /CN=A9176632/serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
Manifest number:          E6
Signing time:             Tue 29 Sep 2026 07:00:05 +0000
Manifest this update:     Tue 29 Sep 2026 07:00:04 +0000
Manifest next update:     Tue 06 Oct 2026 07:00:04 +0000
Files and hashes:         1: gyiT0KdSAaIToGRFUyA9Aac8-v8.crl (hash: tiCVWw0Lh/EMd6XzNTeNsG/Lc0jNjQHdk/8GWsbIx8s=)
                          2: 9DB90EE05E0F11F09722E15EC4F9AE02.roa (hash: zzsfmTI30Ft4gYlmfvNo3b1GkFos6CSbL7X4CYt+tGQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 07:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=832893D0A75201A213A0644553203D01A73CFAFF
        Validity
            Not Before: Sep 29 07:00:04 2026 GMT
            Not After : Oct  6 07:00:04 2026 GMT
        Subject: CN=6abb61f4-447b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:bd:89:ee:a4:49:1c:63:36:e9:27:5c:b0:
                    0b:aa:b4:ea:0b:c8:3d:16:a3:2f:62:8d:da:11:72:
                    a9:c7:07:31:d7:ee:e3:16:94:43:1c:ed:76:6a:20:
                    38:44:b9:ce:31:0c:44:1b:3b:54:b1:e4:e1:6f:d9:
                    ad:9d:ed:c1:7e:32:c1:8e:0d:84:6d:9b:5a:be:47:
                    6b:82:17:d4:ce:0b:b6:18:49:ff:a5:07:3a:88:6d:
                    e3:8a:10:a9:5d:5d:17:18:df:9f:92:d7:53:92:09:
                    81:2f:84:d7:23:6d:90:08:4d:57:da:f5:39:62:d2:
                    6a:2a:08:f0:a5:67:99:0f:16:4b:25:95:9f:9d:ab:
                    ee:a4:9a:76:82:ba:79:c6:4e:17:86:49:57:b2:ca:
                    66:9b:06:61:ed:6f:c0:3c:09:66:42:6e:de:c6:ae:
                    fd:9e:52:10:79:c5:5a:62:f4:6b:a6:e5:fb:e5:87:
                    57:8e:3a:78:ef:84:5f:49:69:c1:31:28:c7:a1:28:
                    a4:c2:f7:45:38:70:63:ed:d0:57:55:55:9e:2e:85:
                    e7:b6:ef:3b:cb:d4:99:e6:99:ec:0a:64:78:2f:a0:
                    da:2f:d2:9d:49:f0:59:4e:ee:c0:98:e9:f7:78:9f:
                    79:61:5b:75:0d:56:fc:48:9a:63:06:b6:bc:a6:52:
                    bb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:89:44:03:5C:9C:9D:3E:39:61:C9:72:69:BC:99:2A:85:51:ED:78
            X509v3 Authority Key Identifier:
                keyid:83:28:93:D0:A7:52:01:A2:13:A0:64:45:53:20:3D:01:A7:3C:FA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gyiT0KdSAaIToGRFUyA9Aac8-v8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/A25439FE5E0D11F094762F13C4F9AE02/gyiT0KdSAaIToGRFUyA9Aac8-v8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:39:4e:6f:ce:2e:ee:1e:0d:48:19:4a:a2:b6:d9:9b:c2:
         62:94:d3:f1:6b:e2:56:c8:8e:a5:56:71:50:f2:af:5d:22:b4:
         ac:49:f4:84:d5:16:be:04:5b:97:e6:11:d6:6b:75:89:e9:8a:
         2e:d9:de:8d:cf:04:46:a7:98:d3:b1:59:2b:65:8d:18:3a:0b:
         e9:09:64:8e:a7:69:b9:e4:cd:25:a5:7c:f3:45:2f:34:7a:2a:
         53:83:ee:c9:73:08:79:8d:55:aa:a4:32:77:34:f5:92:78:9c:
         63:5f:0c:98:cd:a5:9b:d1:f1:58:eb:61:01:d1:5e:7d:97:15:
         07:97:70:3d:3d:7e:36:25:bc:19:a7:05:76:88:5d:37:d9:42:
         5f:e9:a7:a6:e2:0c:3f:86:16:6c:cb:76:21:8c:82:55:a5:6d:
         e4:25:05:4f:f9:7f:56:8b:5b:f0:58:50:f4:95:02:92:95:29:
         b8:ca:48:60:b4:db:94:1c:fd:3b:a2:85:c8:29:45:17:77:e6:
         0b:d3:fe:8b:c8:70:0f:7e:85:c9:12:2c:31:65:d1:94:b3:b5:
         4a:16:e9:4d:28:aa:2d:78:c8:ec:37:a7:8b:6b:3f:03:d2:ee:
         26:59:8a:87:42:63:b1:24:fb:0d:b0:e4:c2:b4:63:91:98:c0:
         50:58:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:39:14 2026 by rpki-client