Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
File:                     GKIzbZyhDwibn8urmxszkqIdId4.mft (raw, json)
Hash identifier:          XwMUjTbnX6tCrwxyW+hZkIDrm/XLif51BUPX/5Qavzg=
Subject key identifier:   1F:8E:BD:4D:34:71:06:2F:6D:B1:F2:7D:38:0E:CC:BB:95:D9:40:A0
Authority key identifier: 18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE
Certificate issuer:       /CN=A9199885/serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
Certificate serial:       3581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
Manifest number:          5731
Signing time:             Mon 12 Oct 2026 14:53:50 +0000
Manifest this update:     Mon 12 Oct 2026 14:53:49 +0000
Manifest next update:     Mon 19 Oct 2026 14:53:49 +0000
Files and hashes:         1: GKIzbZyhDwibn8urmxszkqIdId4.crl (hash: 87DORVNYgdYxcgPNlCS1oGiL486fvCGvvS5KEhUQz4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl
                          rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13697 (0x3581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199885, serialNumber=18A2336D9CA10F089B9FCBAB9B1B3392A21D21DE
        Validity
            Not Before: Oct 12 14:53:49 2026 GMT
            Not After : Oct 19 14:53:49 2026 GMT
        Subject: CN=6accf47d-d569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:76:16:69:7f:43:87:52:6e:bf:6a:85:4b:
                    7a:30:d8:39:ff:49:98:b2:d2:0f:69:db:9b:66:5d:
                    24:5c:31:b3:6f:4b:53:79:50:e3:cc:ab:8e:c1:c0:
                    2a:95:a0:47:92:96:90:31:a1:dc:8c:b3:db:ab:67:
                    85:40:19:ce:56:89:90:f0:75:42:65:6e:62:16:f3:
                    0f:ef:fc:b5:52:de:e3:80:7a:41:b6:cd:c4:12:b8:
                    3a:77:59:a4:fb:b4:3b:36:ae:10:73:a5:d0:56:0e:
                    c1:ce:41:24:dd:fd:17:f7:a4:df:ac:c8:b8:d6:38:
                    d2:a5:dc:1f:73:1f:10:4b:b4:ec:b4:39:9b:a9:47:
                    d4:ae:1a:ef:e8:b4:8e:83:0a:77:31:77:7f:15:3c:
                    1f:a4:f4:d7:e4:71:17:77:ad:05:74:94:34:c8:80:
                    05:52:a8:62:99:2e:7a:cf:26:86:7c:e6:e9:7f:ea:
                    8f:d2:21:05:b1:3b:26:03:67:57:64:e5:d9:48:9d:
                    06:78:5a:b1:d5:98:d7:30:15:bc:68:46:d4:51:7e:
                    81:78:bf:cb:e7:3e:c2:8b:b4:d0:f6:9f:8b:45:2d:
                    fa:3e:ce:8d:18:45:61:8b:2a:99:f3:db:bb:58:44:
                    3c:ce:56:ed:b4:43:17:9f:40:8b:ce:8a:d9:a3:19:
                    33:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8E:BD:4D:34:71:06:2F:6D:B1:F2:7D:38:0E:CC:BB:95:D9:40:A0
            X509v3 Authority Key Identifier:
                keyid:18:A2:33:6D:9C:A1:0F:08:9B:9F:CB:AB:9B:1B:33:92:A2:1D:21:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GKIzbZyhDwibn8urmxszkqIdId4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/GKIzbZyhDwibn8urmxszkqIdId4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:29:42:b7:b1:e7:7f:13:9c:71:f6:02:32:7a:41:0d:b5:21:
         75:0e:0c:03:a0:86:65:da:68:cd:35:43:30:39:82:1c:1c:64:
         6f:5f:19:3b:37:68:6e:ca:a7:ff:a5:57:68:41:e7:22:a3:99:
         ac:12:72:02:a8:dc:fb:eb:b0:f4:52:7c:da:3f:88:a3:17:dd:
         77:4b:49:53:82:1e:26:35:ce:1c:74:d2:cf:1c:5d:fc:d9:02:
         cf:dc:b7:95:cb:0c:ef:7b:de:6b:94:fa:01:a4:bc:43:94:78:
         5b:80:21:be:1f:3a:f1:7b:90:84:23:44:89:c6:a9:82:d7:71:
         b4:b1:cf:db:c0:61:ba:d0:f3:df:a4:ae:84:72:10:27:48:0f:
         b7:ae:36:cb:ed:b3:f9:f5:f6:c9:de:85:42:5d:81:4e:25:53:
         61:09:65:1c:1d:cc:2b:52:87:47:7f:2f:8a:87:29:ac:f0:d7:
         39:d7:1e:03:d1:8b:0a:98:a7:2b:7a:db:15:cb:19:48:5d:e4:
         da:1e:d3:3c:4f:5f:8a:fd:6d:a8:0f:09:6e:1e:d5:63:66:2c:
         67:21:b3:26:45:d9:17:b8:f7:ab:3d:a4:31:13:82:1a:b2:88:
         1d:75:fb:31:09:34:b4:38:77:d6:4c:51:5b:78:33:0b:b1:5f:
         5f:07:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:15:01 2026 by rpki-client