Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File:                     GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier:          HLHrd4OZS/GLPluE6AoCqjjNESq4RGGJTsA+8GniyWE=
Subject key identifier:   ED:E4:F7:B7:FC:92:C7:60:A8:E6:9B:4F:4C:D0:33:19:DD:56:5C:CC
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer:       /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number:          0134
Signing time:             Wed 23 Sep 2026 05:22:49 +0000
Manifest this update:     Wed 23 Sep 2026 05:22:49 +0000
Manifest next update:     Wed 30 Sep 2026 05:22:49 +0000
Files and hashes:         1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: qPZ4LQSFJVdoEIrSMO9cmsmMbhqOY2a1WGCgN6Zi5J8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
                          rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:22:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
        Validity
            Not Before: Sep 23 05:22:49 2026 GMT
            Not After : Sep 30 05:22:49 2026 GMT
        Subject: CN=6ab36229-dc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:73:d7:64:17:3d:08:33:7b:7e:eb:82:84:
                    8c:4a:e0:23:64:a4:f1:fd:1e:ed:c4:09:f3:1d:15:
                    c9:9e:5f:ad:74:04:4b:fb:dc:37:05:a5:9b:3a:b8:
                    f8:49:ef:e7:64:fb:c7:2d:00:33:23:fa:07:5d:52:
                    09:5a:cc:33:4c:f3:e2:cc:d3:49:31:ab:72:b3:58:
                    6a:bb:80:86:11:6f:25:66:12:da:a8:96:ea:d3:8a:
                    3a:9e:b7:99:6d:39:af:2f:6b:d9:6e:7b:96:79:27:
                    bd:b1:86:35:fd:ba:d2:c6:64:a5:70:58:5a:9a:2d:
                    3f:42:73:41:b6:8d:9c:52:a8:d3:44:c5:f8:dd:d3:
                    b9:fa:fa:ae:d8:b1:da:49:91:28:1b:d9:e9:d4:09:
                    cf:27:ca:f3:d1:7e:f3:2f:d4:ef:9e:83:57:ae:05:
                    87:fc:a5:b3:b4:1b:53:31:6f:38:13:44:4d:f4:3e:
                    20:b0:3f:22:20:d9:56:bc:38:05:39:22:8c:30:6a:
                    4e:b7:13:93:92:78:74:68:a0:d8:da:ff:96:20:2a:
                    49:c2:5e:81:79:c2:60:1f:81:84:d9:eb:94:5b:a4:
                    9f:ad:ff:76:68:c1:eb:cf:ad:b0:57:50:54:94:36:
                    84:80:96:84:22:74:82:f0:80:af:88:ee:f3:79:7d:
                    7b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:F7:B7:FC:92:C7:60:A8:E6:9B:4F:4C:D0:33:19:DD:56:5C:CC
            X509v3 Authority Key Identifier:
                keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:dc:38:b2:d2:42:0f:7f:e6:0d:fd:5c:a3:ab:75:e4:1f:
         19:9d:14:bb:fb:ee:e1:20:7d:1f:56:c4:66:84:70:f8:28:02:
         70:dd:26:63:73:40:09:6a:a1:37:ad:7d:1f:79:39:b3:16:bd:
         27:32:94:8d:88:2d:7f:52:f8:32:18:12:af:96:3c:54:a2:58:
         69:b8:af:28:f7:c6:e7:31:90:08:ec:0e:4d:fc:1e:63:9b:fa:
         f5:f5:46:5a:df:7a:69:0b:c9:16:2d:1c:67:bc:1f:15:6e:38:
         1e:27:85:1e:a3:4e:44:2e:01:20:b8:08:80:60:0a:df:1f:33:
         8a:10:04:7a:e5:58:8a:2f:fd:b9:25:5a:79:eb:77:e0:80:2d:
         bd:2b:4f:3e:0f:73:70:f7:83:46:9c:ac:70:c7:90:21:f5:a0:
         75:89:66:c6:50:28:25:fc:18:98:fb:56:8b:41:68:a0:dc:bf:
         c6:68:42:d2:ef:54:6a:44:9a:f5:67:82:57:f8:33:f3:c9:90:
         6d:15:a2:82:5b:64:b8:22:c0:95:13:af:6c:5c:56:b9:1a:fa:
         1f:54:70:ed:e6:e2:45:49:fb:89:c9:d3:90:33:05:64:6b:46:
         46:3b:b1:de:9e:d3:7c:e7:4d:e1:af:a7:2d:fd:fa:a4:1b:1a:
         9b:fe:eb:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDE4MEEzNTIyRTIwNTBDNUYxRTA4NzM1MzlCMTJENkQy
MzEyQTIwMUEwHhcNMjYwOTIzMDUyMjQ5WhcNMjYwOTMwMDUyMjQ5WjAYMRYwFAYD
VQQDEw02YWIzNjIyOS1kYzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurxz12QXPQgze37rgoSMSuAjZKTx/R7txAnzHRXJnl+tdARL+9w3BaWbOrj4
Se/nZPvHLQAzI/oHXVIJWswzTPPizNNJMatys1hqu4CGEW8lZhLaqJbq04o6nreZ
bTmvL2vZbnuWeSe9sYY1/brSxmSlcFhami0/QnNBto2cUqjTRMX43dO5+vqu2LHa
SZEoG9np1AnPJ8rz0X7zL9TvnoNXrgWH/KWztBtTMW84E0RN9D4gsD8iINlWvDgF
OSKMMGpOtxOTknh0aKDY2v+WICpJwl6BecJgH4GE2euUW6Sfrf92aMHrz62wV1BU
lDaEgJaEInSC8ICviO7zeX17PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3k97f8
ksdgqOabT0zQMxndVlzMMB8GA1UdIwQYMBaAFBgKNSLiBQxfHghzU5sS1tIxKiAa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xREE1Q0M1NkRG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRGOGVDSE5UbXhMVzBqRXFJ
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBbzFJdUlGREY4ZUNITlRteExXMGpFcUlCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xREE1Q0M1NkRGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRG
OGVDSE5UbXhMVzBqRXFJQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO7LcOLLSQg9/5g39XKOrdeQfGZ0Uu/vu4SB9H1bEZoRw+CgCcN0mY3NACWqh
N619H3k5sxa9JzKUjYgtf1L4MhgSr5Y8VKJYabivKPfG5zGQCOwOTfweY5v69fVG
Wt96aQvJFi0cZ7wfFW44HieFHqNORC4BILgIgGAK3x8zihAEeuVYii/9uSVaeet3
4IAtvStPPg9zcPeDRpyscMeQIfWgdYlmxlAoJfwYmPtWi0FooNy/xmhC0u9UakSa
9WeCV/gz88mQbRWigltkuCLAlROvbFxWuRr6H1Rw7ebiRUn7icnTkDMFZGtGRjux
3p7TfOdN4a+nLf36pBsam/7rWA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:21:17 2026 by rpki-client