Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
File:                     Gq0AphpkkECrUmoUK1173uWgHL8.mft (raw, json)
Hash identifier:          1igDKsIHizGiB3glsEeXVlQBMt5qoAtM4Jc07RJnC+c=
Subject key identifier:   97:E0:4E:82:9E:D0:CF:FE:6B:C7:7F:CA:13:74:3E:AB:C2:10:A5:FA
Authority key identifier: 1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF
Certificate issuer:       /CN=A91CCE54/serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
Certificate serial:       06AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
Manifest number:          0685
Signing time:             Sat 26 Sep 2026 22:35:04 +0000
Manifest this update:     Sat 26 Sep 2026 22:35:03 +0000
Manifest next update:     Sat 03 Oct 2026 22:35:03 +0000
Files and hashes:         1: Gq0AphpkkECrUmoUK1173uWgHL8.crl (hash: yTu7uyP80i7YcJpOhEGT0wkKe/wANVsfWADpgUujs2U=)
                          2: 9659D3F6D81111EB8C3ACC5DC4F9AE02.roa (hash: /lzYlyTLMVfaGt+Jef9OOqRfUsRdfvmKL6qV7+rtCAM=)
                          3: B62A6E82D7F511EB82D62F73C4F9AE02.roa (hash: MOXNPP0Z5FDw+7dHenMPVPHPJqhtHn3B3TzOutXmyJQ=)
                          4: B3394AE0D7F511EB82D62F73C4F9AE02.roa (hash: +b28DC3M8noSBj1HATRUiJdTviNU2GCdVTBihwET6Yg=)
                          5: 956B1C7AD81111EB8C3ACC5DC4F9AE02.roa (hash: G6iya46vlEQxXzbvqDbW4DK4nSfKAqlJ0GQSPlu04mw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl
                          rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCE54, serialNumber=1AAD00A61A649040AB526A142B5D7BDEE5A01CBF
        Validity
            Not Before: Sep 26 22:35:03 2026 GMT
            Not After : Oct  3 22:35:03 2026 GMT
        Subject: CN=6ab84898-23cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:9a:b1:b2:ff:9f:94:c2:83:95:b2:f3:36:
                    07:c6:58:9e:ee:4c:67:98:97:4c:47:4f:70:32:20:
                    c6:8f:38:8a:e6:9e:4c:ef:3a:9a:82:b4:fe:aa:38:
                    c2:6e:ea:e6:53:e0:0d:12:b8:ab:9e:db:72:3b:38:
                    19:05:07:b5:cf:4a:43:a7:33:d5:2e:5f:e4:d2:2e:
                    e2:08:97:b2:63:df:af:1b:47:27:f3:4a:60:2e:81:
                    8d:90:5c:a9:66:59:33:36:9c:66:1e:6b:62:88:24:
                    0d:3f:a6:e8:12:3d:3c:9c:a1:17:f8:92:04:30:1c:
                    4f:5c:69:a8:9f:4e:8d:7f:cc:c0:e1:98:b5:3b:7b:
                    8e:50:5b:ea:1a:e4:34:fa:37:6e:1e:27:b2:24:42:
                    83:60:9a:d0:5e:eb:f5:34:94:b4:82:73:42:98:a1:
                    94:d3:f1:dd:0b:30:65:26:ab:96:9e:cf:c3:ab:58:
                    fe:8c:e2:33:df:c3:f0:60:e7:69:34:c2:b3:40:b9:
                    96:05:b6:8c:62:50:06:e8:5b:1f:c9:d5:bd:ef:91:
                    48:e0:ac:7a:5e:20:56:4f:52:78:eb:d1:8b:6c:4f:
                    7f:2d:8a:db:52:64:fc:f2:e5:14:b7:a1:87:82:5d:
                    d2:6a:a9:3d:f3:27:ba:fd:a8:87:c6:9f:e3:3a:ef:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E0:4E:82:9E:D0:CF:FE:6B:C7:7F:CA:13:74:3E:AB:C2:10:A5:FA
            X509v3 Authority Key Identifier:
                keyid:1A:AD:00:A6:1A:64:90:40:AB:52:6A:14:2B:5D:7B:DE:E5:A0:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gq0AphpkkECrUmoUK1173uWgHL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCE54/BF9FCAF0D7ED11EB8B56D71AC4F9AE02/Gq0AphpkkECrUmoUK1173uWgHL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:20:05:37:98:09:f4:fa:0c:a2:aa:b7:a9:42:e3:51:c8:92:
         1a:8e:ca:13:a8:7d:63:8a:42:24:3e:16:29:fe:ff:f2:95:25:
         cd:b6:6e:25:cb:e7:6a:d6:07:cb:2e:c1:94:00:81:f4:18:4e:
         65:af:04:5f:72:7d:00:07:3b:9e:e8:3a:a0:51:3c:10:46:28:
         6a:48:8e:47:e3:e3:68:f6:03:a4:98:ac:a6:7a:72:af:09:ff:
         f4:b5:02:51:f5:da:a3:5f:c2:09:71:fa:c6:31:bf:9c:39:5a:
         fb:0d:ae:91:cf:07:c9:4e:91:9e:b5:2a:84:90:7a:95:24:54:
         a5:8d:42:35:68:0f:f1:7b:73:37:f8:e9:59:27:5c:eb:a7:22:
         75:73:cc:d4:ee:7f:48:d4:13:79:7b:d7:4c:16:b6:92:0e:a2:
         fe:54:59:f6:3c:62:1e:10:ea:b7:46:76:71:ef:1f:d4:ee:40:
         79:b9:5a:8d:0e:de:67:da:f2:84:14:cb:66:f6:2c:e9:2e:95:
         b3:de:4a:cf:aa:a8:da:7c:69:c2:7d:15:7e:c6:43:82:6d:c5:
         b3:b0:94:de:aa:69:f5:83:89:4c:ed:5f:70:c0:58:30:ad:fb:
         7a:b5:f2:0f:59:21:89:69:23:01:2a:34:77:b1:41:4a:a7:fd:
         02:58:d9:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NFNTQxMTAvBgNVBAUTKDFBQUQwMEE2MUE2NDkwNDBBQjUyNkExNDJCNUQ3QkRF
RTVBMDFDQkYwHhcNMjYwOTI2MjIzNTAzWhcNMjYxMDAzMjIzNTAzWjAYMRYwFAYD
VQQDEw02YWI4NDg5OC0yM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoPOasbL/n5TCg5Wy8zYHxlie7kxnmJdMR09wMiDGjziK5p5M7zqagrT+qjjC
burmU+ANErirnttyOzgZBQe1z0pDpzPVLl/k0i7iCJeyY9+vG0cn80pgLoGNkFyp
ZlkzNpxmHmtiiCQNP6boEj08nKEX+JIEMBxPXGmon06Nf8zA4Zi1O3uOUFvqGuQ0
+jduHieyJEKDYJrQXuv1NJS0gnNCmKGU0/HdCzBlJquWns/Dq1j+jOIz38PwYOdp
NMKzQLmWBbaMYlAG6FsfydW975FI4Kx6XiBWT1J469GLbE9/LYrbUmT88uUUt6GH
gl3Saqk98ye6/aiHxp/jOu8YmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfgToKe
0M/+a8d/yhN0PqvCEKX6MB8GA1UdIwQYMBaAFBqtAKYaZJBAq1JqFCtde97loBy/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0U1NC9CRjlGQ0FGMEQ3
RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tFQ3JVbW9VSzExNzN1V2dI
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dxMEFwaHBra0VDclVtb1VLMTE3M3VXZ0hMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0U1NC9CRjlGQ0FGMEQ3RUQxMUVCOEI1NkQ3MUFDNEY5QUUwMi9HcTBBcGhwa2tF
Q3JVbW9VSzExNzN1V2dITDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJSAFN5gJ9PoMoqq3qULjUciSGo7KE6h9Y4pCJD4WKf7/8pUlzbZuJcvnatYH
yy7BlACB9BhOZa8EX3J9AAc7nug6oFE8EEYoakiOR+PjaPYDpJispnpyrwn/9LUC
UfXao1/CCXH6xjG/nDla+w2ukc8HyU6RnrUqhJB6lSRUpY1CNWgP8XtzN/jpWSdc
66cidXPM1O5/SNQTeXvXTBa2kg6i/lRZ9jxiHhDqt0Z2ce8f1O5AeblajQ7eZ9ry
hBTLZvYs6S6Vs95Kz6qo2nxpwn0VfsZDgm3Fs7CU3qpp9YOJTO1fcMBYMK37erXy
D1khiWkjASo0d7FBSqf9AljZDA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 20:44:29 2026 by rpki-client