Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
File:                     GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json)
Hash identifier:          M4bIPJPhQxnRIZhZvfG1BF0Ef+h8tcG/R0a52XfI0Ng=
Subject key identifier:   F5:0E:91:71:F9:C5:15:7B:0B:98:5A:FA:8B:98:60:2B:FA:4F:E0:71
Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Certificate issuer:       /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
Manifest number:          01D9
Signing time:             Wed 07 Oct 2026 04:06:52 +0000
Manifest this update:     Wed 07 Oct 2026 04:06:52 +0000
Manifest next update:     Wed 14 Oct 2026 04:06:52 +0000
Files and hashes:         1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: LgNAn8PsIwk/V7M83Gkq2qMRNDgktNQR+qdaC5chV/4=)
                          2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: epSNdxky22TBESs7X/2oDXWpoJovm523A9D1YZGpSUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl
                          rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
        Validity
            Not Before: Oct  7 04:06:52 2026 GMT
            Not After : Oct 14 04:06:52 2026 GMT
        Subject: CN=6ac5c55c-f259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:10:82:89:cd:ba:88:40:f6:bf:60:6e:a7:
                    43:ab:7a:a7:0a:b7:18:04:26:d2:29:05:29:da:c8:
                    ee:6e:5c:28:de:d6:28:b8:a3:a1:cd:f9:84:e7:cd:
                    6f:3e:0a:16:37:b1:a1:b1:bd:dd:e3:97:e8:27:24:
                    7b:28:22:96:27:5f:4a:d8:16:e0:54:75:bd:1d:bc:
                    1b:28:a3:62:b9:f2:5d:ac:4e:01:57:04:68:4b:9a:
                    2c:12:ac:76:ee:7c:d9:c7:fe:56:f3:41:b9:21:7c:
                    e4:a1:15:7e:9b:4c:3b:79:77:7b:14:a1:78:38:92:
                    cc:86:1d:7f:d4:e9:4d:1d:cc:8c:0b:f6:37:bd:f5:
                    d3:3d:a3:ac:1b:18:b3:dc:d5:55:8c:3b:8f:15:a9:
                    92:d9:ba:81:92:b9:d2:e1:a8:61:fd:5e:6c:82:f0:
                    11:18:54:0c:cb:15:e6:f5:2b:8b:24:f1:04:98:54:
                    92:6a:3e:96:61:75:12:c2:31:05:00:66:b9:e6:ac:
                    7e:9b:a5:c2:4a:17:c9:ff:37:c8:7f:89:09:43:dd:
                    82:45:a5:ff:31:64:d9:3c:23:07:aa:14:54:61:97:
                    52:d3:8c:64:64:61:e1:ba:f6:81:33:d0:dd:c5:05:
                    80:59:41:7d:a6:28:2b:f6:bb:c2:28:fb:26:2f:82:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0E:91:71:F9:C5:15:7B:0B:98:5A:FA:8B:98:60:2B:FA:4F:E0:71
            X509v3 Authority Key Identifier:
                keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:c3:ce:02:e0:fb:12:64:aa:af:b5:11:a3:29:28:65:1e:
         f7:6d:69:ec:53:d9:7f:92:d3:fa:ec:4e:5c:b6:e6:2d:78:7a:
         c8:96:cf:ba:66:17:61:5d:21:75:9c:d0:79:ea:ca:c8:45:f5:
         d9:2a:13:66:f1:5e:22:ca:b9:89:0e:dd:8f:bd:96:0e:b9:b0:
         ed:1e:62:7e:6a:30:2f:27:d7:ef:0b:5c:1a:1e:3f:4f:44:e3:
         28:d3:7e:c5:25:52:60:1d:79:43:45:28:40:9a:00:49:73:da:
         86:0d:bb:e2:33:4e:6d:ab:91:2d:8b:6c:6e:7f:27:99:fe:a8:
         85:32:c1:7c:87:7e:b3:c0:a2:ac:4b:7f:f8:ff:df:c4:2c:72:
         c6:00:32:7b:60:fa:40:5a:46:f1:53:f7:76:af:80:f5:40:10:
         7b:91:ae:a5:5d:70:54:0c:4f:e3:8f:3a:a9:f8:0e:5a:cb:81:
         ab:0c:12:85:ad:39:f3:2d:15:11:80:e7:3a:b8:c0:01:8e:2f:
         25:34:d4:c5:ac:84:38:67:c2:fd:26:f8:b1:1e:c8:a5:fe:05:
         b3:db:26:c5:ae:ff:fe:36:4f:eb:4b:91:cf:eb:b7:a9:87:e8:
         6c:59:e1:f4:e6:4e:eb:98:4d:86:1f:2f:4b:e1:df:29:c1:7e:
         e2:91:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:08:36 2026 by rpki-client