Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
File:                     GzrH1RWNTKzSxkYfuudARZrT7CU.mft (raw, json)
Hash identifier:          UAxZQfsdrEZqUfes0DaAWbtLIzuSrJkUzR0siF1OwCk=
Subject key identifier:   0A:2C:EC:4A:3D:BE:A2:75:23:2F:1D:00:A7:12:03:A3:75:31:9A:74
Authority key identifier: 1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25
Certificate issuer:       /CN=A9198A90/serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
Manifest number:          2B
Signing time:             Fri 25 Sep 2026 08:54:39 +0000
Manifest this update:     Fri 25 Sep 2026 08:54:38 +0000
Manifest next update:     Fri 02 Oct 2026 08:54:38 +0000
Files and hashes:         1: GzrH1RWNTKzSxkYfuudARZrT7CU.crl (hash: CdgcF/h6+NPddS1oXkO/yc4lFvKeAqWFuNTyqhA2nkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl
                          rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198A90, serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25
        Validity
            Not Before: Sep 25 08:54:38 2026 GMT
            Not After : Oct  2 08:54:38 2026 GMT
        Subject: CN=6ab636cf-5f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:42:7a:4d:16:0e:99:ec:4e:69:68:59:0f:
                    1f:b2:9c:ae:22:7b:ed:85:f2:0c:8b:0f:59:b5:8d:
                    46:18:6f:86:a0:eb:85:92:97:28:a5:6a:44:a0:91:
                    4a:96:42:e1:2c:e8:d4:e5:48:97:61:d0:52:49:86:
                    6d:cb:ac:34:55:aa:01:dc:2f:59:61:1e:c1:5c:50:
                    27:32:43:bf:ce:20:16:08:8e:d9:02:ee:01:3a:db:
                    d1:3c:90:cb:0f:a8:0e:96:44:9d:38:64:27:cf:ce:
                    89:45:7c:af:9e:18:f7:f6:7c:bd:07:f0:f7:8c:4d:
                    1f:f2:af:2f:70:11:70:c2:77:94:f0:7c:20:b8:de:
                    59:04:85:32:6a:bd:d8:eb:e4:4d:65:d7:45:cf:e9:
                    02:79:aa:37:22:0b:d0:b0:29:c0:4c:39:7e:de:a8:
                    11:de:be:97:b7:5f:40:b5:70:f7:ae:70:da:37:9a:
                    f1:ab:8e:e3:d0:21:96:93:33:63:32:65:ba:c3:c0:
                    b9:9e:6d:f5:63:bd:d7:40:0d:22:a9:aa:1e:ba:da:
                    15:cd:dd:bb:9a:08:54:3d:15:38:cb:11:c4:35:66:
                    4c:c5:6f:7f:15:69:4b:9b:76:82:48:4a:95:da:bb:
                    3d:d1:23:cd:d9:8f:9c:b6:70:07:1a:a6:49:c2:2c:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2C:EC:4A:3D:BE:A2:75:23:2F:1D:00:A7:12:03:A3:75:31:9A:74
            X509v3 Authority Key Identifier:
                keyid:1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:50:c6:29:96:04:86:aa:42:77:00:86:1a:6a:0a:71:c9:d4:
         f9:7f:59:47:27:8e:34:74:fe:10:5f:b5:a5:eb:4b:6e:cf:af:
         f0:d4:55:39:bb:13:fc:fa:f7:68:af:8b:07:46:2b:8c:cd:96:
         15:f4:a4:53:64:02:7e:f6:03:7c:c7:19:34:f7:9d:0a:17:2a:
         6e:e8:2f:22:2a:72:36:37:be:6c:6f:69:5a:cc:ba:78:90:7d:
         9e:a5:3e:7f:a7:12:dd:8d:67:3d:8c:36:ce:ee:23:1e:9e:26:
         f5:13:42:d6:5c:26:93:92:fd:0d:3b:94:5f:86:05:3c:b5:1d:
         47:ad:30:e4:e1:af:10:07:da:4a:47:41:47:30:a1:fc:88:ba:
         ad:8f:2a:b5:aa:68:a0:20:d9:88:5b:a0:7f:f6:90:d8:c0:15:
         ca:ba:2c:c3:34:db:49:54:6e:f3:0b:c8:e9:e1:7e:60:8b:a0:
         62:34:99:72:11:cf:11:32:af:cd:bc:3e:b0:3a:bc:6f:36:d2:
         75:1e:1e:93:79:28:7a:8b:9e:43:87:f7:79:19:93:fe:e9:94:
         29:3b:63:f8:c4:47:d6:bf:1f:6c:18:b7:c8:40:61:2b:a3:d7:
         e9:00:a9:84:be:c7:05:54:76:8a:da:cd:3e:63:5c:6a:00:ae:
         27:e7:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:19:33 2026 by rpki-client