Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File:                     Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier:          9Rpd7taM33enZJYrzgf7BieZ98yWoeHTV4oH0iADgSI=
Subject key identifier:   D3:B4:CE:CD:DA:50:3A:47:72:18:5F:03:B5:88:19:B6:7A:85:F6:68
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer:       /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number:          0283
Signing time:             Fri 09 Oct 2026 02:24:03 +0000
Manifest this update:     Fri 09 Oct 2026 02:24:02 +0000
Manifest next update:     Fri 16 Oct 2026 02:24:02 +0000
Files and hashes:         1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: R/eCXz92foGHlzZU9a13c0bVe/QopSUkcmjkeO6iHO0=)
                          2: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=)
                          3: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
                          rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 02:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
        Validity
            Not Before: Oct  9 02:24:02 2026 GMT
            Not After : Oct 16 02:24:02 2026 GMT
        Subject: CN=6ac85043-125b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:47:f9:15:1c:31:4c:10:24:5b:13:c9:81:
                    0d:d0:47:ac:af:80:e7:1b:85:21:42:54:0e:18:07:
                    89:68:6e:08:12:66:d0:28:ab:70:f6:05:f0:ae:f4:
                    c2:dd:e0:52:a7:bb:89:5c:03:8f:12:01:ad:de:cb:
                    2c:92:6d:f6:b2:b5:23:49:e6:4c:cc:60:cb:43:2f:
                    1b:4d:a9:4e:b5:cb:92:8e:60:44:d8:5f:c8:29:e2:
                    09:6b:a3:ac:ba:19:2a:00:ed:a3:70:df:36:cd:46:
                    89:a1:4c:e0:22:a8:47:b6:64:e0:3d:22:9d:2e:f1:
                    b4:c7:4d:48:18:60:d9:1a:12:b5:d0:6f:ed:9f:f6:
                    8c:6c:4f:21:a8:bb:8e:2e:11:b3:6c:b9:d6:97:7f:
                    78:d5:fd:6b:17:ab:6b:3b:ef:8c:43:7b:79:9d:c2:
                    c5:c6:3e:db:2b:64:62:fe:b2:38:ae:d5:ed:26:ab:
                    ff:0a:07:11:e8:99:aa:ad:f8:97:f7:55:4b:4d:b5:
                    f0:38:6e:cd:a1:f9:3c:48:a0:61:db:f9:ad:c6:f8:
                    ad:06:e7:f1:53:57:e3:70:dc:85:22:61:d9:96:d2:
                    30:89:a2:49:90:b2:bf:bf:6e:bc:e8:0d:03:aa:2e:
                    d0:75:b6:e3:ba:2f:35:67:a5:ef:bd:d9:98:dc:7c:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B4:CE:CD:DA:50:3A:47:72:18:5F:03:B5:88:19:B6:7A:85:F6:68
            X509v3 Authority Key Identifier:
                keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cd:46:ad:a4:5a:2b:7a:47:94:85:9c:bd:7b:78:43:37:0a:
         b5:61:72:29:24:ad:53:bf:d8:9a:ff:12:d8:72:de:77:5d:43:
         28:e3:b2:7e:52:a8:a2:75:87:66:ec:76:69:8c:09:17:42:97:
         43:79:64:cc:2f:22:18:df:d0:50:9f:ca:a2:4f:33:80:c1:f0:
         f0:a9:f8:13:c5:bd:2d:d0:52:7b:a9:ab:ce:77:a8:ae:8a:c6:
         8b:17:01:88:99:ce:fe:e6:a2:3d:fa:1e:5a:f4:e9:97:e0:1f:
         84:20:fc:d1:ec:2f:88:8a:ef:47:8a:ae:3c:4e:4c:2d:2d:50:
         32:87:dd:d3:6f:01:a5:5a:97:20:6e:f3:27:cf:eb:e5:97:90:
         50:67:13:e5:98:ab:76:d2:22:55:4e:a5:c7:5a:0d:e7:e0:87:
         74:51:9f:d3:59:34:bf:b0:e0:6a:02:ba:5c:83:04:a1:2f:7f:
         81:53:37:eb:17:e9:3d:29:bb:46:53:16:e0:27:50:a5:d6:6a:
         ee:89:87:ef:85:b2:c9:0c:bc:e3:10:a4:24:49:4c:19:74:01:
         3f:50:01:97:aa:47:e3:12:d3:30:32:71:54:95:ac:c5:4e:6f:
         eb:f3:3f:73:9a:77:8f:88:89:e2:c9:23:58:a2:19:21:fb:d1:
         24:3a:3b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:19:38 2026 by rpki-client