Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
File:                     GHWJdndWd8NAIPDun97Wlit4ol8.mft (raw, json)
Hash identifier:          piZvEDHew+kCJnidgxOGt0zm6C9rEMjsH+6WXt/9X+o=
Subject key identifier:   74:FD:17:52:FB:6F:12:EE:D8:92:5B:95:AA:AF:6F:BD:2C:DC:8D:9A
Authority key identifier: 18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F
Certificate issuer:       /CN=A91448CB/serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
Manifest number:          08
Signing time:             Mon 31 Aug 2026 09:36:46 +0000
Manifest this update:     Mon 31 Aug 2026 09:36:46 +0000
Manifest next update:     Mon 07 Sep 2026 09:36:46 +0000
Files and hashes:         1: GHWJdndWd8NAIPDun97Wlit4ol8.crl (hash: Jks6hdPM3e2mTVpblJh21pALzKAYK4hrL06ZMG7+v34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.crl
                          rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 09:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91448CB, serialNumber=18758976775677C34020F0EE9FDED6962B78A25F
        Validity
            Not Before: Aug 31 09:36:46 2026 GMT
            Not After : Sep  7 09:36:46 2026 GMT
        Subject: CN=6a954b2e-dd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:7e:38:cd:e4:65:2b:e8:44:09:da:c8:ac:
                    38:d0:81:33:4c:7c:39:22:e1:ba:9e:15:6b:8d:4e:
                    c4:2e:4c:04:1a:4f:45:70:c6:af:32:bb:ee:5a:8a:
                    43:60:8b:5c:70:03:88:33:93:a3:da:01:63:6e:b6:
                    f7:96:a6:38:85:df:65:74:5c:28:dc:36:fb:6a:5d:
                    71:59:23:8d:27:15:53:ed:f6:c6:72:f1:45:03:01:
                    5e:dd:dd:f8:e2:1b:d5:9e:c1:5a:c9:03:a6:6a:39:
                    e2:fe:93:7c:39:35:89:02:67:42:23:86:1c:e3:36:
                    20:33:b8:c5:7f:5b:29:57:82:02:f2:f9:25:70:f0:
                    f6:39:64:a1:b8:43:8b:c9:fb:30:40:43:3d:f9:2c:
                    48:65:0f:f8:8b:9e:e4:ca:90:33:a3:96:9b:ce:d7:
                    56:95:0a:6e:f3:81:46:f4:62:b4:f7:1a:ac:f3:20:
                    35:4f:03:84:11:b9:77:c7:c7:72:1c:93:bb:d0:28:
                    73:2a:ff:62:96:e5:f1:3d:ec:2e:e8:a4:0d:cc:a7:
                    55:b7:64:5e:44:d8:86:97:e3:43:a8:05:4b:45:0b:
                    16:89:b9:73:9c:f8:7c:c1:5a:f7:65:81:71:fe:52:
                    d8:f0:7b:12:c7:ad:0b:f8:b9:89:31:5b:a0:99:a0:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FD:17:52:FB:6F:12:EE:D8:92:5B:95:AA:AF:6F:BD:2C:DC:8D:9A
            X509v3 Authority Key Identifier:
                keyid:18:75:89:76:77:56:77:C3:40:20:F0:EE:9F:DE:D6:96:2B:78:A2:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GHWJdndWd8NAIPDun97Wlit4ol8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91448CB/D31464FA9BC511F18FE0376C5711F970/GHWJdndWd8NAIPDun97Wlit4ol8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c6:91:ad:37:10:5a:bc:c8:42:b0:31:22:4b:27:ae:9f:5e:
         e1:2c:62:fa:db:42:08:f2:89:49:a8:75:c7:19:7b:46:53:41:
         35:a1:12:f1:d8:94:9a:01:89:4a:e9:a0:45:65:f4:cf:0f:a2:
         07:71:46:97:5e:7d:51:ff:a8:12:59:d2:7b:f1:de:50:c4:e6:
         62:d8:ed:c0:a6:86:25:e6:04:2e:1a:05:f9:87:01:8b:31:29:
         b3:88:bd:38:e7:3e:ab:96:1c:11:ef:65:08:9b:33:ac:23:29:
         3d:94:61:35:66:e2:43:b6:7f:45:c7:2d:2e:0e:6d:e6:0a:d4:
         e5:78:aa:89:13:53:d6:5d:67:0c:82:ef:56:a4:0c:e9:0b:16:
         e1:69:77:56:b7:d7:8e:0f:8e:28:c0:ad:50:0f:a6:1a:c5:29:
         3b:c4:41:54:ee:8b:ab:f8:ff:ff:d8:31:c8:6c:ee:b2:52:00:
         ed:b5:40:04:4e:8a:4b:89:90:d7:75:46:df:75:e5:19:61:89:
         31:a1:f6:54:fb:e6:a2:df:b5:7b:8b:58:9d:4b:4b:1b:44:55:
         7e:02:1d:09:19:cd:75:9d:75:c5:55:69:c7:3b:84:f5:62:93:
         44:6a:90:2b:8c:0d:9b:d7:bc:d3:df:9c:fa:11:01:f5:71:5f:
         f5:2d:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:28:06 2026 by rpki-client