Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
File:                     GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json)
Hash identifier:          Ekr27xondikv0MVxIebyIZpYxSluIZxqtWoNd1ykmRI=
Subject key identifier:   BC:E2:90:4C:94:A2:8E:B9:26:6B:B4:02:67:81:C3:71:68:BD:67:41
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
Manifest number:          070A
Signing time:             Tue 22 Sep 2026 21:51:59 +0000
Manifest this update:     Tue 22 Sep 2026 21:51:59 +0000
Manifest next update:     Tue 29 Sep 2026 21:51:59 +0000
Files and hashes:         1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: mpAlzsXe179ieQvwk13426iBuocIawKdandA6VkKdCc=)
                          2: F70D5712B01B11F1AF4372F03411F970.roa (hash: hUcrrrUBVLByI2vT36TB+CJnPow9opUMWOBIoChZd9M=)
                          3: 0CE34AD8B01C11F1B3442E0A3511F970.roa (hash: 4zNbGlSpnycmXS01NEXPnPLnETGuusbWqpfRyeTEdLo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:51:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: Sep 22 21:51:59 2026 GMT
            Not After : Sep 29 21:51:59 2026 GMT
        Subject: CN=6ab2f87f-056a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3d:95:1b:d4:34:3c:c8:d3:e6:1a:a2:c0:e9:
                    22:f1:78:78:dc:ae:44:0b:aa:56:46:3a:25:56:55:
                    86:00:ac:3f:be:2a:c0:5f:94:04:e0:17:80:10:ce:
                    ff:28:09:0c:55:f8:36:d1:ac:c1:c9:1b:74:db:07:
                    e0:82:a2:8b:15:8b:a2:53:aa:92:93:33:c0:74:73:
                    6c:ab:a0:5d:91:47:7b:c9:4b:f0:1d:c7:74:14:29:
                    5e:b0:96:d7:0b:10:da:e3:15:ff:c1:1f:80:87:4a:
                    86:a8:53:e4:6e:b9:5f:ae:f3:4e:d3:88:f9:0e:b3:
                    67:23:98:e7:eb:f0:1f:4c:4c:7c:3e:f5:2b:71:c7:
                    26:de:8d:79:41:62:5a:ed:68:81:34:4a:59:5f:ed:
                    4c:ef:29:76:f5:31:9b:8d:f9:32:5a:e3:5b:30:8a:
                    ea:4a:1e:f2:0f:3c:c8:e5:1e:70:0a:c5:43:4b:88:
                    02:45:b6:7f:c7:64:74:48:2d:11:f4:94:3f:3f:5f:
                    fa:f9:e4:86:b0:7f:1e:cc:a0:dc:d1:08:08:a1:86:
                    77:b2:c8:e7:7e:59:97:29:19:6e:f0:aa:b0:39:5b:
                    32:ee:1b:41:f9:6f:e1:e7:bc:30:3d:9f:97:21:f9:
                    e6:f3:43:ce:22:89:20:77:b8:28:db:87:18:23:40:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:90:4C:94:A2:8E:B9:26:6B:B4:02:67:81:C3:71:68:BD:67:41
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:12:8e:0a:72:23:32:a9:ec:91:53:92:0b:3e:4e:b6:c5:41:
         95:79:d1:8a:b6:88:c6:41:9d:2e:37:ee:f2:db:ba:9d:b5:f2:
         dd:d4:b4:01:6a:35:03:58:4e:1d:f9:fb:b9:02:3c:dc:4d:23:
         8d:54:b0:4b:ba:1b:1f:09:1d:80:72:18:6f:d7:07:89:79:56:
         d6:65:76:44:d1:94:9a:e7:1c:38:c2:ff:95:53:e4:d7:bd:a1:
         00:60:88:f8:63:55:f6:8a:5b:c5:49:74:5c:2d:54:7c:a2:b4:
         dd:c5:d2:81:a1:28:69:9e:27:17:06:8b:f3:cf:19:a9:d9:f0:
         a7:be:5c:f0:48:4b:c1:10:f8:c6:cc:6d:f5:b5:63:0b:1a:d8:
         45:98:b4:29:61:4a:4c:f4:f9:9d:68:22:12:c0:45:31:0a:8a:
         31:57:c2:29:b3:59:69:63:4b:3f:41:84:38:3b:57:e7:6a:54:
         67:cf:c8:66:6c:82:b0:7b:19:c3:f8:c7:f2:a0:54:b8:d1:65:
         25:89:99:b8:d9:1a:0c:4f:7e:95:4f:01:ba:a0:2f:77:37:3a:
         9c:d6:3b:be:fc:5f:dc:16:3b:07:f0:fa:18:36:72:43:c3:d6:
         1a:3d:5c:3c:7f:76:5f:d3:95:10:77:5b:a7:57:c3:e5:9a:1a:
         1d:df:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:22:22 2026 by rpki-client