Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
File:                     gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json)
Hash identifier:          m2QnPhGjv/AK++cVmCZa/lXwvQbO0qKblBER/y/hYuo=
Subject key identifier:   02:3F:36:EB:44:90:2E:BB:E4:68:8F:76:BD:40:39:1F:E1:51:7A:56
Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA
Certificate issuer:       /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
Certificate serial:       359F
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
Manifest number:          359F
Signing time:             Fri 18 Sep 2026 14:21:59 +0000
Manifest this update:     Fri 18 Sep 2026 14:21:59 +0000
Manifest next update:     Fri 25 Sep 2026 14:21:59 +0000
Files and hashes:         1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: 8bhrQHjm63T6QSfZNWYrNJ0hTsl/CIOyl0wXZschYdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13727 (0x359f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA
        Validity
            Not Before: Sep 18 14:21:59 2026 GMT
            Not After : Sep 25 14:21:59 2026 GMT
        Subject: CN=6aad4907-ecb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4d:3b:bc:77:d3:d8:bc:43:f6:c5:85:2d:2c:
                    2a:95:0e:b2:03:19:f4:61:23:b9:cb:dc:18:62:71:
                    c2:56:3a:34:70:7f:0d:35:8c:9e:7f:06:a8:9b:12:
                    61:e5:1e:64:75:fe:b5:78:dc:a1:ba:6d:41:e1:67:
                    8c:de:42:ee:69:12:69:e2:26:0c:36:65:81:e7:99:
                    7b:83:34:3c:6f:9b:c7:f6:75:d4:70:e1:b4:8b:5f:
                    13:53:93:b9:e8:69:41:b4:1f:6c:11:d0:5c:7e:53:
                    9d:5d:33:16:07:a2:00:82:13:71:98:11:01:8b:38:
                    d3:e5:7b:25:79:06:fe:a3:1e:d5:d0:4d:64:3d:8f:
                    fd:5a:b3:38:69:b7:6e:40:e9:9a:23:49:7b:9d:9a:
                    56:b8:ff:05:85:3f:12:00:7b:6c:38:31:60:e7:a6:
                    2d:28:5c:45:1e:c4:f7:a4:18:8e:63:d8:60:84:49:
                    07:fa:0d:cb:91:44:32:33:da:17:58:a1:d0:9f:cd:
                    12:15:ab:97:0f:4d:2a:7a:1b:d6:ac:e1:5e:32:9d:
                    e0:e6:f5:de:97:03:0c:68:2e:49:b1:e2:79:54:d9:
                    e1:0c:46:20:2c:b2:87:b0:26:96:95:a0:e3:c0:e6:
                    8c:ef:be:28:38:c6:d7:f1:ed:29:41:89:d9:00:72:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:36:EB:44:90:2E:BB:E4:68:8F:76:BD:40:39:1F:E1:51:7A:56
            X509v3 Authority Key Identifier:
                keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d5:97:9d:80:b9:ea:16:f8:f4:5d:5b:9f:85:bd:4f:ca:2d:
         36:f3:9d:bf:c7:34:d2:06:3e:e7:a6:9e:eb:b1:c6:54:0c:da:
         a3:5b:f5:63:dc:5b:78:29:15:98:24:79:ed:bc:a8:4c:1d:07:
         03:5c:20:1d:5e:a4:23:28:cb:ac:8f:78:f5:19:2d:80:2e:08:
         bd:5c:3d:1d:54:25:99:0c:33:5b:48:cc:8c:3d:5b:c5:75:05:
         77:6c:4b:0b:88:c3:e8:b3:7f:72:ba:ec:f0:23:74:36:2b:9f:
         a4:28:29:52:2e:d8:f7:86:50:e5:d8:27:db:88:dd:05:f9:28:
         38:0d:55:e3:e8:6a:fd:1c:00:67:e8:e0:57:2b:e3:0a:a2:75:
         8b:b1:53:bd:f8:21:50:3a:9a:cc:40:0e:38:85:83:92:0c:cd:
         bd:bc:e7:89:2c:4b:29:a2:68:43:4f:30:89:a7:0b:18:24:6f:
         c4:bd:bd:73:c0:05:ec:1a:3d:83:9b:a0:ea:d5:68:d8:00:26:
         2e:39:34:af:b1:bf:32:60:7d:ba:b6:f9:56:0d:c8:e9:7b:e7:
         e5:36:e4:55:34:d9:18:2d:25:76:23:0a:03:24:41:d2:26:18:
         0b:d6:a5:84:1a:26:0d:a9:fe:1e:3a:70:ad:cc:ea:06:3b:ba:
         4b:c1:74:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:00:08 2026 by rpki-client