Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File:                     GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier:          RzEXQnkP/3dajyunlLQFv/CvTw/aGVnYCp1AKlStv0E=
Subject key identifier:   3C:49:FF:15:19:94:BC:78:4F:B4:24:1D:C2:12:FF:2F:8C:C2:6F:F6
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       0545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number:          053E
Signing time:             Sat 26 Sep 2026 23:33:13 +0000
Manifest this update:     Sat 26 Sep 2026 23:33:13 +0000
Manifest next update:     Sat 03 Oct 2026 23:33:13 +0000
Files and hashes:         1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: Goq+S2IxhPluwbH43D0MB8lgO/Raetwtij/NX4WCpQE=)
                          2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: P0IxtyxoZ+ByuxHLmgujAknhA1FCwYut3K8P07BZLQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1349 (0x545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Sep 26 23:33:13 2026 GMT
            Not After : Oct  3 23:33:13 2026 GMT
        Subject: CN=6ab85639-f82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:b4:34:9a:d0:d5:82:7c:d6:25:31:35:c9:
                    f8:3b:65:17:a6:65:ed:29:3c:4c:f3:b1:b4:43:25:
                    70:bf:66:2b:28:be:8d:f3:e7:96:09:14:35:62:2e:
                    b8:47:cc:6e:30:b5:b1:83:a4:06:65:31:da:f2:3a:
                    0f:5a:a6:72:c9:95:05:d1:c1:97:49:fa:40:82:0f:
                    c9:e0:79:71:06:d4:a6:39:22:70:11:19:1a:bb:b5:
                    b7:d2:15:0d:34:78:86:55:7f:8b:d5:e2:37:4f:6c:
                    c6:ac:d6:dd:5d:5d:1a:af:71:ed:f5:a7:17:ee:6f:
                    ed:30:c4:4c:64:d7:5d:5e:05:18:5b:df:6d:eb:7b:
                    78:02:39:e4:8f:94:c8:a5:ee:61:18:cc:07:0a:5d:
                    82:cc:b2:78:1a:b1:7a:4a:13:09:15:b1:69:4c:04:
                    37:12:71:e8:a5:fd:d6:18:ca:5f:c5:fd:bf:fd:7d:
                    3b:3e:72:01:bf:c8:42:bb:0c:95:88:34:da:04:a6:
                    98:d5:6d:81:89:a1:fd:9f:11:9d:19:4a:3c:4c:23:
                    0e:46:32:68:d4:7f:b8:5f:a4:68:e8:d9:15:46:52:
                    42:6c:92:8f:63:64:3a:b1:ea:df:3e:43:91:f3:d4:
                    d2:48:9f:5e:29:9b:bd:d5:de:de:cf:76:d1:f3:d1:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:49:FF:15:19:94:BC:78:4F:B4:24:1D:C2:12:FF:2F:8C:C2:6F:F6
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:5a:8e:80:91:10:9d:f2:88:9c:8a:d9:ac:0f:6f:64:b0:
         b7:ba:7d:c3:d0:23:d5:88:61:26:9d:5e:63:16:b2:54:6f:d2:
         5f:7f:0c:b4:60:c8:0e:54:b8:f0:59:54:88:00:c4:bc:49:0f:
         69:10:56:68:f9:14:d7:f3:03:49:0b:f2:9e:b0:cd:2f:e2:9c:
         61:e2:f4:03:4c:c0:58:4b:c1:1c:f0:7b:2f:9a:c8:90:0a:89:
         6f:d3:6a:47:2c:4c:d1:95:ae:42:91:57:5a:05:2f:d5:52:b7:
         26:3c:f0:f0:72:b6:d1:a0:11:58:32:1c:f1:f8:1a:e2:5b:48:
         17:58:b1:91:9d:24:1e:79:30:6c:2c:95:28:48:23:61:1f:02:
         3b:06:d9:ce:20:84:30:e5:ab:5b:be:21:8a:30:83:83:c0:bd:
         36:59:05:94:ed:10:75:6a:19:59:74:5c:1f:ba:71:e7:28:d5:
         7f:76:98:f3:ab:27:2a:93:61:75:bd:ea:3b:85:df:03:73:b6:
         41:ce:e8:82:b3:b8:50:d3:09:b8:31:c9:52:4e:b1:4a:2a:50:
         6a:50:94:42:34:a6:bf:4f:d0:4e:f7:7a:f8:cd:1c:2a:c8:43:
         60:d8:ad:dd:7a:f5:88:da:c6:83:b0:d6:21:e0:e9:e3:74:bc:
         af:37:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:56:23 2026 by rpki-client