Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
File:                     gmSrKAremT89Ii-8hk3uIoa6kGU.mft (raw, json)
Hash identifier:          kEs0xkpfz01W9A/vjdTrkPqD1bEGtKHwXSlxoPO6VFs=
Subject key identifier:   A4:91:6B:0B:50:E2:B8:B4:68:CA:A8:4E:A1:3A:7D:3E:8F:55:4A:49
Authority key identifier: 82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65
Certificate issuer:       /CN=A911DED4/serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
Certificate serial:       02F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
Manifest number:          02EC
Signing time:             Wed 07 Oct 2026 01:20:10 +0000
Manifest this update:     Wed 07 Oct 2026 01:20:09 +0000
Manifest next update:     Wed 14 Oct 2026 01:20:09 +0000
Files and hashes:         1: gmSrKAremT89Ii-8hk3uIoa6kGU.crl (hash: vUgemcit9sZqMMzhnSpiixKvZXTh6lJOAyIT5Txg9gc=)
                          2: 7416299C4B0C11EDB8430084C4F9AE02.roa (hash: loCBTvWpGD1C6U/+URd049N5Gd0OXiABeDkGUcb8Scg=)
                          3: 503A946E030411F1912A5FB1133D8C67.roa (hash: zni6NerU19G+gLFtWsdvzGSnTk2IDoC96N1SYgc6DQQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl
                          rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:20:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DED4, serialNumber=8264AB280ADE993F3D222FBC864DEE2286BA9065
        Validity
            Not Before: Oct  7 01:20:09 2026 GMT
            Not After : Oct 14 01:20:09 2026 GMT
        Subject: CN=6ac59e49-f5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:d4:ea:84:24:d7:1b:d9:04:22:6d:c9:1e:
                    a3:13:bd:24:fd:bc:54:4c:8a:e3:33:41:fb:28:3c:
                    13:66:3c:86:25:aa:9d:7b:dd:29:2b:b3:c3:32:4e:
                    4e:50:12:a3:fb:d9:f1:cd:7f:a9:13:77:16:07:7e:
                    01:4a:1c:82:64:29:0b:68:00:bc:f0:5f:97:43:32:
                    46:33:8e:44:86:bf:fd:16:35:53:65:b3:0d:da:89:
                    31:bb:03:13:27:e3:62:da:d9:a6:6b:50:ec:0c:4e:
                    57:84:b1:03:2c:f7:a3:b2:a9:03:01:83:cb:c6:ad:
                    bb:e6:0e:03:ed:f1:47:b6:9a:2b:8a:03:15:d1:0e:
                    24:e3:0f:af:e2:37:bd:35:75:6c:fd:b0:97:88:ae:
                    97:52:cd:7e:be:4b:1b:ec:fc:2b:48:4f:73:4a:24:
                    bc:38:0e:b3:d4:88:ef:87:bf:bd:e3:56:c4:3e:39:
                    f1:4e:f5:47:40:22:23:60:d1:6a:b2:38:1a:9a:81:
                    cd:71:a1:cc:a7:6c:f1:8a:26:a2:e9:eb:4d:a5:d6:
                    67:61:15:a0:46:2e:39:bf:56:b7:7e:b2:3e:c2:9f:
                    ef:dd:15:c2:a3:77:4a:d6:40:a5:e9:d9:b8:1c:7b:
                    bd:b3:c2:68:f5:3f:9d:c4:c5:13:6c:3c:d8:11:f7:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:6B:0B:50:E2:B8:B4:68:CA:A8:4E:A1:3A:7D:3E:8F:55:4A:49
            X509v3 Authority Key Identifier:
                keyid:82:64:AB:28:0A:DE:99:3F:3D:22:2F:BC:86:4D:EE:22:86:BA:90:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmSrKAremT89Ii-8hk3uIoa6kGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DED4/E4FB2BE44B0711ED8EC33947C4F9AE02/gmSrKAremT89Ii-8hk3uIoa6kGU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:19:27:03:cf:31:df:31:d8:2a:1c:ab:6f:f9:d6:c4:2b:a5:
         40:07:3d:03:bd:01:fb:84:5a:99:ce:eb:30:c0:e5:7d:59:73:
         a5:92:31:01:5d:3f:8f:94:13:d0:e5:98:ee:a5:93:78:c1:18:
         bb:f9:19:11:22:3f:7c:32:a7:a6:45:bb:82:54:f6:2b:8f:1c:
         5c:05:27:2d:d2:32:ab:85:fd:04:0c:c8:de:06:7c:ec:89:73:
         39:e7:bf:d7:3f:a4:cc:85:30:14:a6:a9:b2:3a:05:59:96:93:
         0b:ab:68:76:dd:98:7f:ba:2b:02:ad:58:c0:eb:8d:9a:49:37:
         58:6f:bd:06:ca:6f:f1:89:5a:03:b4:41:4a:d2:f2:db:75:c6:
         72:f9:d7:28:e3:8c:3e:3a:97:c1:6b:3b:54:14:7f:65:ec:5e:
         2b:ae:04:69:6d:e7:34:56:4c:cb:10:75:5f:3b:b1:58:b3:a0:
         00:bc:da:d0:e7:20:0c:fa:04:27:7d:5b:2d:f5:4c:d1:85:ab:
         28:48:8a:16:8a:e4:55:98:64:1a:98:7c:ec:f5:1b:2a:34:df:
         aa:8d:f7:1a:c8:da:1a:7d:47:4b:0d:92:44:38:53:7a:92:0b:
         11:40:53:65:26:d2:1b:a6:f1:5b:8e:20:e7:14:6b:c2:b6:60:
         62:20:5b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:04 2026 by rpki-client