Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
File:                     GpfC9HEfe8gC4misZvEQhivleIg.mft (raw, json)
Hash identifier:          HnHAlAJoxJB4Sdxq1Xtrg2j5RyEbOP8sZOTN3ikSYhU=
Subject key identifier:   18:03:C3:72:43:46:F4:D0:88:5F:B0:A1:DA:7B:17:BE:08:28:7E:44
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Certificate issuer:       /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial:       240E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
Manifest number:          23AD
Signing time:             Thu 24 Sep 2026 15:47:23 +0000
Manifest this update:     Thu 24 Sep 2026 15:47:22 +0000
Manifest next update:     Thu 01 Oct 2026 15:47:22 +0000
Files and hashes:         1: GpfC9HEfe8gC4misZvEQhivleIg.crl (hash: JixF2eAqoUshtMk0E1WvO4BJWvOc9WX+rRSZ8DpDK3E=)
                          2: 13DD1B662D3111F180CCA088BC833773.roa (hash: R7dTMiB8fLcK528K7ntTaoxEftrwMiKxX3YP8FhMfmA=)
                          3: 07412A002D3111F1B77CD687BC833773.roa (hash: m3KakV6D8uqf1vPRe2G0m6SVTDUuzIzt+KLbrHZc+PI=)
                          4: 05596FAEBA1811F080138957C4F9AE02.roa (hash: tyGMd+HN3XNyreUh3joDHlUhGigz8P1uPZWOL8YggfQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
                          rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9230 (0x240e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
        Validity
            Not Before: Sep 24 15:47:22 2026 GMT
            Not After : Oct  1 15:47:22 2026 GMT
        Subject: CN=6ab5460b-e4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:75:f0:af:8a:90:bf:2c:15:76:ce:62:56:
                    67:ef:fc:2e:34:69:59:8b:a3:77:d1:f5:f5:7b:51:
                    5c:17:a5:d8:2a:77:08:8c:3c:b4:4f:e3:83:df:35:
                    80:c2:fb:07:e0:3d:22:0d:17:b4:4b:90:c2:54:18:
                    f5:f9:0b:93:86:79:9e:28:42:e8:52:f4:fa:9f:43:
                    2e:09:1f:9c:07:88:88:58:99:df:18:b4:59:2b:71:
                    3d:4e:f2:85:dd:63:11:e4:b3:18:63:37:93:c7:16:
                    e9:7a:a3:46:65:b6:4e:43:19:16:90:41:4f:3d:53:
                    99:13:e9:40:3d:18:98:d7:6e:d7:4d:dd:bc:0f:50:
                    6b:76:5e:c8:19:b0:58:29:47:59:b7:37:97:53:f6:
                    d1:a9:38:07:de:d0:4e:4f:28:2d:ef:e0:b5:4d:57:
                    88:29:29:dc:f1:5a:a0:ee:11:bc:58:35:ed:26:e5:
                    cb:4a:45:2b:59:ba:e3:88:b2:dc:78:9d:84:56:06:
                    4f:55:d7:c7:e9:68:a5:90:e3:c4:93:28:31:33:cc:
                    97:f4:a1:e9:70:02:13:cd:14:b5:34:d2:9c:dc:45:
                    08:45:26:e0:2a:5c:b2:a5:a0:9b:5d:bb:33:0b:24:
                    1e:52:a4:d2:75:c3:f1:6c:b5:b4:55:03:5b:b9:51:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:03:C3:72:43:46:F4:D0:88:5F:B0:A1:DA:7B:17:BE:08:28:7E:44
            X509v3 Authority Key Identifier:
                keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:24:b9:4e:88:43:55:57:58:e1:d2:f4:fc:b1:89:4d:61:e9:
         07:50:ad:06:bc:aa:f2:0f:8d:0f:7d:79:d3:78:76:c2:8d:6d:
         06:90:bb:d7:c7:96:09:90:dd:7e:da:6b:a1:60:d3:1a:3c:fc:
         41:44:3d:2c:55:8b:a9:04:68:5c:f6:5d:ab:4f:ba:01:fd:6c:
         60:ef:e3:4f:89:a8:49:bc:c3:21:c4:e3:46:b9:a2:a2:03:45:
         ac:db:47:27:0d:cd:49:19:f3:22:8f:eb:e8:e7:87:a6:bd:13:
         3d:4a:35:b9:9b:4a:a0:fd:1d:84:e7:d1:5c:ae:2b:00:33:57:
         29:ed:67:fb:2e:19:cd:a5:cf:95:9a:a5:ba:d2:04:8f:cf:85:
         ef:32:a2:09:2e:c7:e7:c3:b0:fd:c3:60:0d:e8:d3:9b:0c:eb:
         dc:56:d4:01:e1:eb:e2:ff:d8:b2:7d:9b:c9:80:0b:10:33:f9:
         35:db:c0:46:25:65:7b:bd:36:c9:8d:eb:5f:64:c9:27:23:c5:
         00:46:2a:ca:75:65:db:a3:e4:66:cd:a5:48:95:33:f6:8f:dd:
         f7:3b:96:0d:a8:6c:45:19:98:05:e4:21:86:1a:a2:87:b2:cd:
         e0:5b:b0:07:d3:42:d2:23:33:07:88:e5:94:ed:cc:40:6f:5c:
         50:2d:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:53:16 2026 by rpki-client