Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
File:                     GAVt61gONXTxSD5mnFqkLlhOzrs.mft (raw, json)
Hash identifier:          dDzc+ZgEoov+A5AtSp3r9CuFZ4dGx8LV3NS7LOHdjBw=
Subject key identifier:   B0:84:95:86:0E:93:29:77:DB:C8:F4:57:07:95:FF:D1:D3:7F:7B:9C
Authority key identifier: 18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB
Certificate issuer:       /CN=A914A0CB/serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
Certificate serial:       2031
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
Manifest number:          2014
Signing time:             Mon 26 Oct 2026 15:57:40 +0000
Manifest this update:     Mon 26 Oct 2026 15:57:40 +0000
Manifest next update:     Mon 02 Nov 2026 15:57:40 +0000
Files and hashes:         1: GAVt61gONXTxSD5mnFqkLlhOzrs.crl (hash: w3TexoXAs47axfFOsRihP1E+94fMz1dNg+hC8MN1+jY=)
                          2: 764D8698EA9111EAA035205FC4F9AE02.roa (hash: TjUnyOqsu+TGI98cAhiebfWHgRGkKezrxeVGqajnrVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl
                          rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8241 (0x2031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A0CB, serialNumber=18056DEB580E3574F1483E669C5AA42E584ECEBB
        Validity
            Not Before: Oct 26 15:57:40 2026 GMT
            Not After : Nov  2 15:57:40 2026 GMT
        Subject: CN=6adf7874-965d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:2e:b1:f3:9a:c7:30:c1:94:82:13:75:4a:
                    bc:a4:80:ff:db:c7:63:af:af:c0:c9:ec:2c:f2:6f:
                    ba:c2:af:42:70:81:63:99:af:ab:38:18:11:7b:e2:
                    5f:31:55:8e:0e:0d:75:f1:69:83:49:b0:0a:b7:af:
                    12:ac:b1:40:52:e3:e0:18:73:79:de:4d:b8:9b:44:
                    6d:0e:be:85:00:f0:1b:18:1b:b3:aa:05:36:60:55:
                    64:88:31:ed:37:e7:0c:28:38:02:10:3e:34:d4:39:
                    25:27:70:75:2d:c7:81:37:11:5c:59:02:c5:4e:62:
                    4f:b6:af:6c:7c:55:03:48:67:b1:7c:4f:33:b6:e6:
                    b9:f3:2e:1c:6e:90:69:79:cf:5d:4a:c3:68:b0:de:
                    93:26:b6:5f:98:5b:2e:66:7b:e2:a0:b7:67:5f:8a:
                    7a:41:3e:50:b9:8a:bf:5f:f2:a1:72:a4:86:b1:0d:
                    16:3f:2a:d0:96:a8:b2:cd:dc:3b:ba:e3:b6:06:68:
                    1e:8f:81:70:30:a0:47:62:9c:cc:0d:3b:a9:4e:c5:
                    f7:7b:43:c5:72:d0:ab:72:e1:b4:3f:e4:fb:f0:64:
                    2f:ce:20:4c:f6:45:96:09:6c:bc:5d:6a:6a:e4:79:
                    23:ff:3f:37:d5:03:2f:79:b9:11:c9:f3:36:f2:80:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:95:86:0E:93:29:77:DB:C8:F4:57:07:95:FF:D1:D3:7F:7B:9C
            X509v3 Authority Key Identifier:
                keyid:18:05:6D:EB:58:0E:35:74:F1:48:3E:66:9C:5A:A4:2E:58:4E:CE:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAVt61gONXTxSD5mnFqkLlhOzrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A0CB/E5C3AE9C5A1911E681B8C10FC4F9AE02/GAVt61gONXTxSD5mnFqkLlhOzrs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:50:6d:a0:37:15:d1:df:f6:5f:1c:a6:ae:f7:b5:37:53:
         c0:30:16:f1:78:aa:4e:20:ac:ad:61:6e:a1:99:35:c5:fe:8f:
         4c:0c:4b:89:da:62:bb:ad:e5:8d:e1:73:54:91:86:5c:d4:d4:
         55:ce:71:be:4e:c3:64:a8:b3:f7:8f:f5:5f:5f:b8:3b:dd:6d:
         ed:6f:e6:52:20:17:8e:18:27:4d:cb:4d:25:e1:35:ac:c8:3e:
         e2:26:08:19:f6:3c:54:e9:f2:7f:8e:8a:67:ba:55:6d:1d:2d:
         dc:c5:01:0f:af:0f:1d:7a:c7:65:0e:41:a8:81:09:ea:40:c7:
         b7:fe:dc:33:c0:df:3a:91:80:fa:44:7d:28:c9:55:d8:58:be:
         7d:73:54:4c:a1:93:20:58:77:5a:df:13:ae:0c:20:1c:1b:47:
         89:76:01:ac:89:c8:c0:bb:34:24:0a:d9:e3:7a:b5:9f:87:5e:
         e6:24:d9:04:33:22:7a:8d:54:c5:c8:33:df:cb:c9:c5:69:b0:
         fd:d6:c6:b3:40:1f:4e:a3:79:f0:9a:35:93:94:45:20:8b:96:
         ef:11:d8:9e:14:76:2c:37:5e:1f:14:05:82:50:13:5f:aa:f4:
         35:23:5e:2d:5f:05:32:2d:17:b2:cf:96:d4:55:e3:77:55:49:
         77:b9:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:16:32 2026 by rpki-client