Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File:                     GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier:          /0tyTkErt/zVvvikQeHExLSuh4zoYWJaljHsE29fueI=
Subject key identifier:   4F:B0:BA:C9:FE:A9:C7:49:57:5D:D1:88:2E:0A:A7:BE:85:46:1E:5A
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer:       /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number:          E3
Signing time:             Fri 23 Oct 2026 07:08:25 +0000
Manifest this update:     Fri 23 Oct 2026 07:08:24 +0000
Manifest next update:     Fri 30 Oct 2026 07:08:24 +0000
Files and hashes:         1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: kGvX/TH73q+xXzFDeVmCSU8P5Vs+F4mWnEtT3MFjFVo=)
                          2: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=)
                          3: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
                          rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 07:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
        Validity
            Not Before: Oct 23 07:08:24 2026 GMT
            Not After : Oct 30 07:08:24 2026 GMT
        Subject: CN=6adb07e9-98a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:bf:e3:ff:a6:89:d6:19:40:c0:1a:35:a2:
                    24:c2:ec:96:a2:c2:08:64:33:9e:4c:78:46:58:36:
                    ea:24:e7:3a:68:09:a3:22:13:fc:f3:ab:d6:81:d7:
                    89:7f:d4:68:33:43:33:fa:85:ac:a6:7b:cd:83:12:
                    21:29:91:7b:ef:5b:78:55:cc:0e:62:f1:12:25:02:
                    eb:e7:bf:61:89:c8:77:0e:e0:97:8f:5f:df:a1:91:
                    8a:d1:b6:2e:35:5f:e2:0b:a8:29:24:99:a4:9a:7e:
                    e2:81:52:2a:0a:ce:b8:f3:a6:e1:b9:eb:19:94:5a:
                    8f:e3:bb:0f:14:8f:7f:13:4b:a3:cb:aa:81:7b:de:
                    63:76:91:03:bf:82:b9:7f:08:07:52:4d:10:a7:52:
                    54:0f:77:76:71:af:06:1a:de:b1:6d:a8:94:9d:94:
                    8d:2d:d5:fd:e8:8b:d7:89:a5:9d:ce:22:90:9b:56:
                    c9:ef:84:ba:5b:93:c0:1c:11:ec:da:c4:3f:07:53:
                    9b:df:9e:72:4c:89:44:d7:7b:a0:4b:d4:b8:15:5b:
                    b6:62:7c:bf:89:a1:68:78:2f:c6:81:c2:72:ab:d5:
                    c0:5b:18:86:93:47:4a:3e:56:0f:52:da:73:34:8e:
                    30:f8:6d:5c:25:c3:fd:eb:eb:03:ef:70:72:52:fd:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:BA:C9:FE:A9:C7:49:57:5D:D1:88:2E:0A:A7:BE:85:46:1E:5A
            X509v3 Authority Key Identifier:
                keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:5b:9c:c6:f1:80:76:94:32:b5:d9:62:62:d1:eb:9c:e6:
         0e:48:93:6d:58:6d:16:4a:04:13:ad:19:ba:20:9e:8b:a9:d7:
         84:c3:cb:a8:7f:80:0a:70:7f:61:50:f2:c0:ca:68:3a:ea:4c:
         52:dd:88:cd:ea:90:82:f4:a9:e9:32:74:99:7f:39:fd:aa:74:
         7f:80:d1:ef:3b:e1:12:5f:9a:aa:64:4e:6b:c6:ed:8b:08:86:
         f8:50:fd:30:1b:df:a3:9c:93:64:c5:b3:38:96:5b:ec:36:2c:
         9b:fa:74:91:a7:9a:9b:a7:a1:e5:03:01:b3:c6:8f:3b:54:f1:
         20:b8:33:cf:82:d7:0f:58:47:02:2a:55:bc:69:24:07:87:4b:
         a5:63:39:46:19:d5:5f:ae:48:20:dc:25:44:9b:ae:87:78:58:
         31:78:12:25:f3:3a:cb:91:e2:48:74:8c:3e:2b:2c:b9:ad:77:
         95:e9:2f:77:6e:bf:97:af:92:b7:e9:34:1e:f8:7a:3c:df:e9:
         d0:e7:d6:fa:95:1c:e4:ae:73:ea:98:d0:6e:10:e9:11:cd:ca:
         94:cf:2a:30:2f:d1:fb:fa:9e:b8:71:aa:cd:a3:67:63:0d:e9:
         b3:ba:af:46:37:f1:34:0e:02:4a:2f:eb:de:9f:5e:d4:e7:c4:
         8f:b2:f2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 09:38:51 2026 by rpki-client