Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          wij1Iz90HT/GQMz98qF4xeshq+0pWmRGrqZgnQbCPfA=
Subject key identifier:   1D:85:DB:3A:B0:67:95:41:2B:52:B7:F2:F3:56:45:61:E0:BB:FF:BF
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          016C
Signing time:             Thu 01 Oct 2026 06:05:27 +0000
Manifest this update:     Thu 01 Oct 2026 06:05:27 +0000
Manifest next update:     Thu 08 Oct 2026 06:05:27 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: wRvsb3390sDbeKcvQLvvcMijKYFXYjv8A/pPa8KBxZE=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 06:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Oct  1 06:05:27 2026 GMT
            Not After : Oct  8 06:05:27 2026 GMT
        Subject: CN=6abdf827-3915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:90:84:4b:fc:8a:d0:84:b7:00:fd:61:06:
                    02:72:97:8d:e7:bb:74:41:fd:83:6b:a9:31:69:7d:
                    dc:15:43:c3:6b:ae:e4:b2:2f:22:1c:f9:fe:1e:34:
                    23:ec:3b:fe:08:c9:52:fa:61:39:67:3a:3c:93:02:
                    31:69:91:46:18:3d:24:1a:5b:9e:9f:dc:48:06:c4:
                    a5:28:c7:3c:9d:67:7d:80:a1:3b:d5:c7:35:b3:d3:
                    b1:21:5f:38:7f:9f:87:8e:ca:ae:a2:26:81:bb:60:
                    02:90:6b:5f:87:2b:03:67:0f:9a:4e:e5:40:bd:9b:
                    27:c3:93:79:cc:a5:24:5a:51:5b:b3:4a:ea:47:1c:
                    cf:b4:de:bc:a1:f1:08:60:6c:24:33:35:70:c1:94:
                    42:b7:63:04:fc:24:d7:72:8b:ea:c5:e8:f4:be:cf:
                    98:91:b9:4d:14:ba:5d:20:97:b8:5d:bf:d5:47:a7:
                    63:8d:3b:35:d6:54:fd:f9:b3:b2:9a:a8:b9:94:2c:
                    2d:46:1f:18:dd:85:19:7b:fb:8d:45:79:90:51:d9:
                    bd:ae:7f:93:66:70:61:57:1e:62:44:ec:7c:77:3a:
                    7a:2b:e8:bd:59:9c:35:52:28:da:25:67:a5:83:2c:
                    3c:5e:a4:df:b0:c8:4f:fc:cc:43:48:f3:5b:b2:d8:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:DB:3A:B0:67:95:41:2B:52:B7:F2:F3:56:45:61:E0:BB:FF:BF
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2e:10:7c:06:d2:16:67:a8:ff:3a:e7:56:a6:92:e2:79:df:
         8b:4c:59:38:02:f3:bf:a3:7f:e2:5b:74:21:cd:fb:27:4f:3d:
         3a:b0:30:50:64:55:a3:5c:a5:7f:fe:ba:87:d4:75:3a:a3:96:
         a0:fc:cd:cb:3e:50:57:ec:44:ac:3a:29:74:50:88:0c:b4:19:
         d2:08:89:fe:8c:f8:61:08:e1:a3:77:a6:b6:ea:11:40:37:7e:
         2c:12:98:5f:34:3e:d3:f2:8d:96:17:d1:b9:06:6d:88:9a:d8:
         f0:27:7c:e7:b6:1e:61:78:47:49:a0:8f:f2:00:d1:34:1d:18:
         12:a5:cf:cc:df:16:66:c5:68:f2:85:f4:38:9f:d4:27:31:ef:
         81:63:f7:4d:91:55:71:35:5b:bf:75:a1:97:c4:16:e3:52:76:
         9c:96:b7:6c:22:d8:1f:b6:e8:4b:e4:1b:19:8e:89:e3:1d:ee:
         c5:85:33:78:00:64:e2:7b:fa:26:30:3a:5a:ab:84:59:36:12:
         37:8e:89:94:ea:7b:dc:7c:a4:3a:ca:25:b4:ee:38:a6:e7:1a:
         1f:94:a8:98:5c:23:60:d8:4f:98:de:b1:22:02:8b:1b:f8:09:
         a8:ec:26:1a:fb:34:c3:9a:eb:99:f2:9f:ce:e7:1e:a0:46:54:
         d4:2d:03:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy
NDIyRUI2NkYwHhcNMjYxMDAxMDYwNTI3WhcNMjYxMDA4MDYwNTI3WjAYMRYwFAYD
VQQDEw02YWJkZjgyNy0zOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZSQhEv8itCEtwD9YQYCcpeN57t0Qf2Da6kxaX3cFUPDa67ksi8iHPn+HjQj
7Dv+CMlS+mE5Zzo8kwIxaZFGGD0kGluen9xIBsSlKMc8nWd9gKE71cc1s9OxIV84
f5+HjsquoiaBu2ACkGtfhysDZw+aTuVAvZsnw5N5zKUkWlFbs0rqRxzPtN68ofEI
YGwkMzVwwZRCt2ME/CTXcovqxej0vs+YkblNFLpdIJe4Xb/VR6djjTs11lT9+bOy
mqi5lCwtRh8Y3YUZe/uNRXmQUdm9rn+TZnBhVx5iROx8dzp6K+i9WZw1UijaJWel
gyw8XqTfsMhP/MxDSPNbstj+4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2F2zqw
Z5VBK1K38vNWRWHgu/+/MB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1
NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51
VVpETWVoZldyM0lrSXV0bTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVy4QfAbSFmeo/zrnVqaS4nnfi0xZOALzv6N/4lt0Ic37J089OrAwUGRVo1yl
f/66h9R1OqOWoPzNyz5QV+xErDopdFCIDLQZ0giJ/oz4YQjho3emtuoRQDd+LBKY
XzQ+0/KNlhfRuQZtiJrY8Cd857YeYXhHSaCP8gDRNB0YEqXPzN8WZsVo8oX0OJ/U
JzHvgWP3TZFVcTVbv3Whl8QW41J2nJa3bCLYH7boS+QbGY6J4x3uxYUzeABk4nv6
JjA6WquEWTYSN46JlOp73HykOsoltO44pucaH5SomFwjYNhPmN6xIgKLG/gJqOwm
Gvs0w5rrmfKfzuceoEZU1C0DiQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:25:39 2026 by rpki-client