Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
File:                     G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json)
Hash identifier:          u7gME8muuHtcYIyWp5WOgs8xZXC/PXH6DGRSt5puSSo=
Subject key identifier:   EE:DC:E4:22:D4:F2:79:75:DA:03:9A:5F:B2:D7:B6:42:EF:BC:5F:43
Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE
Certificate issuer:       /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
Certificate serial:       0296
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
Manifest number:          0296
Signing time:             Tue 20 Oct 2026 22:48:42 +0000
Manifest this update:     Tue 20 Oct 2026 22:48:41 +0000
Manifest next update:     Tue 27 Oct 2026 22:48:41 +0000
Files and hashes:         1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: bKRfa1ZUCjnVwthmhRGA5b5yKaoitMsiQxyJfPikBbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 22:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE
        Validity
            Not Before: Oct 20 22:48:41 2026 GMT
            Not After : Oct 27 22:48:41 2026 GMT
        Subject: CN=6ad7efca-da15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:b7:ce:97:83:57:67:b4:b8:19:e5:57:40:
                    04:67:a9:6f:a8:73:2b:ee:e0:c0:5d:c3:cb:07:a3:
                    b7:98:e5:4e:11:9f:d2:3c:41:bc:04:e8:41:62:0f:
                    f0:68:4e:c3:b7:2c:c6:f6:39:b2:65:a3:6e:aa:4e:
                    3a:09:fe:93:c4:f7:8f:8a:d7:9b:71:7e:f5:1a:03:
                    09:7f:b9:87:3a:6b:53:a3:16:67:8e:58:90:66:70:
                    8a:71:e9:72:ec:2b:db:fe:77:4a:f9:bf:39:8b:42:
                    25:50:f0:c1:58:0e:8c:5b:5b:ac:15:76:ab:6e:80:
                    25:0d:9f:0a:ad:aa:8e:c7:4a:f7:e8:f4:59:ac:65:
                    5f:8d:e8:49:ba:03:11:70:38:7b:9f:26:05:30:61:
                    e4:4b:7c:4c:28:e2:92:a2:dc:10:6e:1a:41:95:ba:
                    c5:e6:ab:98:90:65:4d:05:d8:05:31:a5:d6:e8:76:
                    23:92:d1:14:37:11:b4:76:a4:b7:90:86:00:82:d8:
                    9d:f9:bc:48:56:3b:72:c7:a4:d1:0b:77:4a:f3:c7:
                    d5:5a:54:6d:77:a6:de:15:16:31:46:6d:ec:6e:b3:
                    ee:15:45:23:20:78:3d:e7:45:0b:2e:e5:85:d5:61:
                    7e:3f:44:38:a1:c9:00:ea:1a:8a:63:25:39:96:7f:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:E4:22:D4:F2:79:75:DA:03:9A:5F:B2:D7:B6:42:EF:BC:5F:43
            X509v3 Authority Key Identifier:
                keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:2b:de:4c:b1:da:8d:52:d4:ab:22:67:cc:fa:0f:9d:b7:
         3d:06:f1:38:56:e0:75:a4:e6:5e:f6:35:38:45:b7:f0:1e:6d:
         fd:6b:40:2f:a0:fa:2f:93:d0:6a:37:af:fa:76:a4:08:e1:1b:
         d3:5b:b1:71:91:e7:69:c6:dc:15:bd:b9:99:aa:e0:4c:86:cd:
         93:15:1a:13:1f:36:ac:5b:d1:29:22:a8:46:b7:af:2c:7d:86:
         df:fd:e3:c1:72:f6:6f:7d:b0:7a:30:b0:0b:4d:48:5a:a2:ed:
         f6:b9:b7:66:91:14:b1:e9:21:6b:cb:86:5e:e3:92:ab:62:31:
         e4:a5:13:bd:0f:c9:0c:3f:17:65:8a:f4:69:ac:03:90:e9:d0:
         c9:41:11:27:08:12:86:66:f0:d4:91:45:73:d6:2a:fe:55:a5:
         de:f9:47:66:fc:6e:dd:ce:c0:a2:b8:ea:30:80:76:9c:c0:14:
         0e:c8:26:8e:08:5d:a8:c2:d6:56:7a:52:b8:eb:e6:b5:58:df:
         c6:ec:09:b8:be:5e:43:2f:8a:f3:4a:73:69:35:8f:41:1b:9f:
         37:f6:c5:73:e8:08:6d:3e:aa:b0:41:79:59:97:0a:c7:51:df:
         74:4e:ea:f5:e8:3a:34:74:51:50:f0:85:b8:a9:c8:db:b3:52:
         2b:f7:a3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:24:55 2026 by rpki-client