Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
File:                     gYu-BREIqaYrBvxp5L-jaX5l4w8.mft (raw, json)
Hash identifier:          RFHu8b68F3BSH0z8+GgGzOp9a2TF7wnZOQdJ0qsmqBo=
Subject key identifier:   52:21:CB:DF:DA:82:0A:60:99:52:D7:E9:5E:75:51:A9:80:37:A9:50
Authority key identifier: 81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F
Certificate issuer:       /CN=A91FCF44/serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
Manifest number:          E3
Signing time:             Wed 23 Sep 2026 04:20:45 +0000
Manifest this update:     Wed 23 Sep 2026 04:20:45 +0000
Manifest next update:     Wed 30 Sep 2026 04:20:45 +0000
Files and hashes:         1: gYu-BREIqaYrBvxp5L-jaX5l4w8.crl (hash: hM6WGKRZ0m+f/kb0WSazdXiO3lCbYdLpb7IwT2oTc1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=818BBE051108A9A62B06FC69E4BFA3697E65E30F
        Validity
            Not Before: Sep 23 04:20:45 2026 GMT
            Not After : Sep 30 04:20:45 2026 GMT
        Subject: CN=6ab3539d-9bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:9d:4e:92:8a:48:9f:46:b9:97:20:d4:e1:
                    19:3d:7d:ef:f6:3a:e0:e7:33:bc:0c:c5:93:20:0d:
                    64:47:01:b4:4f:61:d9:90:81:29:17:37:f5:46:99:
                    47:b5:dc:1f:e0:63:fb:eb:4a:15:43:41:ca:fb:c7:
                    e9:88:ee:85:18:5c:9c:e8:3b:41:6b:3d:a2:a3:30:
                    4c:e6:e0:15:89:b4:46:d5:1e:5c:9d:af:8c:21:29:
                    27:f0:57:c0:da:03:71:ca:88:44:e9:d7:85:0b:d5:
                    7c:b4:8d:2e:76:b6:78:0e:c2:1e:52:33:11:89:f0:
                    25:a1:f9:ec:20:1b:f3:70:f5:de:21:11:7a:d6:c0:
                    6c:b7:06:d4:d0:6a:30:b4:56:42:0f:7c:e3:ca:b7:
                    93:f0:a2:09:27:bc:1e:64:66:e0:2b:cb:19:33:6f:
                    5c:16:13:10:41:c5:cb:be:63:3d:d0:ce:f8:7e:4b:
                    fb:bd:64:80:cc:c3:2e:a1:85:3b:f7:47:c8:d3:44:
                    19:e5:d7:f8:26:b8:86:01:f7:37:06:0d:97:ce:a1:
                    09:6b:8b:f9:3b:1e:31:0e:4b:25:ef:e8:90:0a:1f:
                    50:44:8d:aa:df:d0:a8:4b:12:1c:1b:5f:37:f9:b8:
                    71:55:2e:6b:a0:e9:98:6c:68:61:4e:79:cf:24:dd:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:CB:DF:DA:82:0A:60:99:52:D7:E9:5E:75:51:A9:80:37:A9:50
            X509v3 Authority Key Identifier:
                keyid:81:8B:BE:05:11:08:A9:A6:2B:06:FC:69:E4:BF:A3:69:7E:65:E3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gYu-BREIqaYrBvxp5L-jaX5l4w8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/CD6D6C7E5E2011F0ADAA4B6FC4F9AE02/gYu-BREIqaYrBvxp5L-jaX5l4w8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:18:b0:0b:ad:7e:6e:0c:86:65:c5:e4:b3:22:8e:c8:63:a3:
         3c:b1:ab:79:1c:2f:9a:76:3f:58:a6:bb:11:a4:cc:d9:97:a3:
         c7:0d:a6:56:b1:0f:72:06:2d:7d:1f:80:db:76:4b:9c:ad:f2:
         21:fe:4b:1e:d3:89:64:b3:b1:35:e4:a2:83:36:66:91:f1:0b:
         8a:a5:e8:73:1c:db:4f:30:67:82:4d:fe:11:44:66:4d:18:91:
         d3:3a:69:3c:95:4f:7a:3b:98:ec:82:6c:a4:f0:ed:47:98:d3:
         1d:0e:e0:a7:ab:a2:50:82:aa:e1:7d:d0:a5:02:74:2d:ab:12:
         6d:ef:2b:76:f4:7d:a4:4e:13:d2:44:24:da:76:1b:71:2a:be:
         44:2e:78:e0:7d:f3:8b:8a:60:75:76:a3:f9:c3:66:ac:28:f5:
         a8:39:ec:dd:e4:69:ec:f6:65:dc:5d:b3:d4:97:55:1b:81:23:
         cc:64:24:ab:e5:07:16:a9:ab:8c:3f:67:12:c0:95:7d:3a:20:
         9a:52:98:14:90:be:9a:80:9f:60:cd:51:ac:4a:e1:a4:44:3a:
         6c:45:0d:02:b0:b0:d8:53:48:ce:cc:b3:06:d1:39:9e:e8:bb:
         06:8c:27:5f:10:05:03:96:74:1a:90:c7:dd:22:26:5a:94:97:
         e7:91:ab:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNGNDQxMTAvBgNVBAUTKDgxOEJCRTA1MTEwOEE5QTYyQjA2RkM2OUU0QkZBMzY5
N0U2NUUzMEYwHhcNMjYwOTIzMDQyMDQ1WhcNMjYwOTMwMDQyMDQ1WjAYMRYwFAYD
VQQDEw02YWIzNTM5ZC05YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsqqdTpKKSJ9GuZcg1OEZPX3v9jrg5zO8DMWTIA1kRwG0T2HZkIEpFzf1RplH
tdwf4GP760oVQ0HK+8fpiO6FGFyc6DtBaz2iozBM5uAVibRG1R5cna+MISkn8FfA
2gNxyohE6deFC9V8tI0udrZ4DsIeUjMRifAlofnsIBvzcPXeIRF61sBstwbU0Gow
tFZCD3zjyreT8KIJJ7weZGbgK8sZM29cFhMQQcXLvmM90M74fkv7vWSAzMMuoYU7
90fI00QZ5df4JriGAfc3Bg2XzqEJa4v5Ox4xDksl7+iQCh9QRI2q39CoSxIcG183
+bhxVS5roOmYbGhhTnnPJN3kgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIhy9/a
ggpgmVLX6V51UamAN6lQMB8GA1UdIwQYMBaAFIGLvgURCKmmKwb8aeS/o2l+ZeMP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC9DRDZENkM3RTVF
MjAxMUYwQURBQTRCNkZDNEY5QUUwMi9nWXUtQlJFSXFhWXJCdnhwNUwtamFYNWw0
dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dZdS1CUkVJcWFZckJ2eHA1TC1qYVg1bDR3OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0Y0NC9DRDZENkM3RTVFMjAxMUYwQURBQTRCNkZDNEY5QUUwMi9nWXUtQlJFSXFh
WXJCdnhwNUwtamFYNWw0dzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZBiwC61+bgyGZcXksyKOyGOjPLGreRwvmnY/WKa7EaTM2Zejxw2mVrEPcgYt
fR+A23ZLnK3yIf5LHtOJZLOxNeSigzZmkfELiqXocxzbTzBngk3+EURmTRiR0zpp
PJVPejuY7IJspPDtR5jTHQ7gp6uiUIKq4X3QpQJ0LasSbe8rdvR9pE4T0kQk2nYb
cSq+RC544H3zi4pgdXaj+cNmrCj1qDns3eRp7PZl3F2z1JdVG4EjzGQkq+UHFqmr
jD9nEsCVfTogmlKYFJC+moCfYM1RrErhpEQ6bEUNArCw2FNIzsyzBtE5nui7Bown
XxAFA5Z0GpDH3SImWpSX55GrOw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:25:03 2026 by rpki-client