Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File:                     GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier:          ZpYIW6yYEDHEwzJeWyGuOe7dXBMS+s8aGCbtXqlTEbQ=
Subject key identifier:   AC:A6:21:17:81:CD:61:76:CB:31:C9:76:D4:4C:FA:ED:3E:C2:0E:F3
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer:       /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number:          B2
Signing time:             Sun 27 Sep 2026 07:48:37 +0000
Manifest this update:     Sun 27 Sep 2026 07:48:36 +0000
Manifest next update:     Sun 04 Oct 2026 07:48:36 +0000
Files and hashes:         1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: u6LpJjGg6Jc2cGA4aHkTZNut5uz94/9hhk5wL7/JR1k=)
                          2: B53453C2961211F1A0325584A1EE528E.roa (hash: xJqVTb/PoXlS9Nw4K65VtvKl9hX152JntnAXbbPw/xs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
        Validity
            Not Before: Sep 27 07:48:36 2026 GMT
            Not After : Oct  4 07:48:36 2026 GMT
        Subject: CN=6ab8ca55-e3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:cf:59:43:fd:e9:f7:11:18:0d:72:68:b2:
                    20:6b:87:f9:96:e5:2d:ed:ad:37:b5:c8:2a:01:d6:
                    10:d4:17:f5:2f:18:59:4c:34:b6:61:d9:47:f0:9d:
                    97:bd:67:a1:ef:aa:0b:04:3d:15:37:47:d0:25:1f:
                    2f:36:45:ec:05:a8:2d:35:6b:f7:b2:dd:ed:a4:c0:
                    cf:65:a5:89:36:07:af:d8:0f:19:da:06:3f:e8:e6:
                    cc:1f:56:5a:6b:ac:da:94:c0:9c:6a:ea:14:17:18:
                    12:57:9f:c9:bf:37:ac:db:90:33:12:dc:d0:3f:fc:
                    5d:39:fb:b0:67:2c:77:6b:57:15:1e:f9:61:8c:35:
                    67:67:bc:85:de:81:9d:77:4b:26:19:94:fa:a8:ae:
                    a4:4e:66:c8:fc:e3:2a:03:5b:e8:89:ec:9e:12:2c:
                    32:04:f9:3d:86:1a:b6:e0:29:02:90:ed:bf:42:5b:
                    64:43:25:f9:35:6f:d5:6c:9c:5d:f0:05:be:86:4e:
                    88:3c:b5:57:ad:f9:0c:37:66:22:a4:89:e2:0b:4e:
                    3f:25:ab:66:38:03:5b:e5:ee:88:63:10:79:ca:61:
                    a3:68:2a:11:77:ee:0d:4d:03:56:d3:78:43:6b:42:
                    9b:16:01:0d:34:bd:ec:71:1d:32:34:72:0a:70:c0:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:21:17:81:CD:61:76:CB:31:C9:76:D4:4C:FA:ED:3E:C2:0E:F3
            X509v3 Authority Key Identifier:
                keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:50:d7:ee:73:74:97:bd:43:d6:61:ba:38:40:39:a8:70:78:
         4f:cb:2a:f6:4b:0c:79:94:ca:cb:0c:03:e3:50:6a:16:28:04:
         ac:5e:33:7a:15:c0:93:6c:5d:a9:19:c2:35:bf:77:37:39:fb:
         21:fe:78:f3:f5:ed:93:ac:d3:62:4d:33:41:4d:e2:a1:6a:fd:
         73:47:b1:57:56:2c:dd:5d:aa:5d:58:01:09:e4:58:2b:62:ed:
         4e:9a:74:c3:ba:7f:d1:9b:5c:75:f9:a7:46:5f:66:56:58:bb:
         10:63:d1:d7:b3:1c:77:c6:3b:5c:37:b3:5d:a2:e5:05:53:f6:
         0e:00:4d:21:be:09:81:93:f6:99:c2:c6:cc:25:c9:68:05:91:
         02:3f:c1:90:02:dd:75:9a:2b:27:0a:d3:a7:8d:04:d7:04:e4:
         42:ea:95:61:b5:fd:86:e9:7a:74:78:de:6d:b6:16:a7:2f:48:
         29:a3:8b:73:ec:56:1a:b3:29:f8:99:69:8c:8d:df:fa:02:4c:
         84:1c:ec:33:5f:f5:96:9c:2f:c9:1c:68:b1:d1:4f:e4:c8:ed:
         06:31:cc:a6:99:b3:ea:56:09:46:a5:c2:62:3d:80:34:13:3a:
         25:fc:65:89:4a:8c:8f:07:77:f6:6f:b4:c1:f8:c0:cd:24:ee:
         96:94:99:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:13:00 2026 by rpki-client