Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
File:                     GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json)
Hash identifier:          ka42DLf7OOe+0pxFgZueO+B0QD9BSEDINE+pOWzIdj8=
Subject key identifier:   35:39:8C:9C:25:AF:B4:1E:32:F1:07:C2:A4:CE:8B:52:70:63:6F:F6
Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
Certificate issuer:       /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Certificate serial:       05BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
Manifest number:          05B7
Signing time:             Sun 04 Oct 2026 23:07:36 +0000
Manifest this update:     Sun 04 Oct 2026 23:07:35 +0000
Manifest next update:     Sun 11 Oct 2026 23:07:35 +0000
Files and hashes:         1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: 3SnMRLaiH13aKYUXQoWjcsd81DqTqN+ubiZGFAPiv94=)
                          2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: AvgU/x0IyYviikbfwDijwjzZaLShsqOZi+8zbsvAZKA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl
                          rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:07:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156
        Validity
            Not Before: Oct  4 23:07:35 2026 GMT
            Not After : Oct 11 23:07:35 2026 GMT
        Subject: CN=6ac2dc37-14e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:91:e0:df:5f:cc:96:bc:4b:82:eb:1f:02:
                    5b:f7:68:e8:d7:c9:05:54:83:f2:3e:b8:b2:2f:2e:
                    22:d9:6a:53:cd:e2:1f:b6:f0:0f:cc:82:c0:92:62:
                    52:92:1d:17:fb:8d:a7:c1:2a:21:69:7b:c4:9a:51:
                    d4:17:66:ca:b0:70:03:2d:bf:c0:6b:a4:6f:53:cb:
                    3c:3e:60:e0:5a:42:8b:1a:62:e0:ff:c9:9d:e2:e2:
                    6f:c1:c9:0a:ef:61:9c:d7:4e:ff:74:83:2b:ab:81:
                    94:35:f8:33:92:40:66:69:3f:1a:86:6a:c7:f6:22:
                    df:90:1e:30:f1:a4:95:4d:7b:31:cf:5d:a0:c7:df:
                    6f:34:73:94:b5:0e:b5:2e:29:6d:92:a0:89:a0:5c:
                    c8:f5:11:6a:ba:a8:2d:10:81:9c:34:08:c7:ab:62:
                    ff:30:5b:79:d6:88:77:ff:bd:d3:57:b1:6a:54:6a:
                    50:bc:ff:d7:ba:c4:99:64:0f:b2:c7:1a:81:94:3d:
                    46:ed:2c:cf:3b:e3:e8:19:18:cf:d6:f5:2a:49:ed:
                    67:7c:27:70:d4:56:2d:68:29:d1:2f:b1:01:73:b0:
                    53:cc:7b:95:18:72:89:6a:d8:9b:57:61:9a:81:5e:
                    f7:28:34:d8:6e:39:4a:3a:f9:eb:f4:e2:b8:00:22:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:39:8C:9C:25:AF:B4:1E:32:F1:07:C2:A4:CE:8B:52:70:63:6F:F6
            X509v3 Authority Key Identifier:
                keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:2f:04:74:7f:f8:7a:9b:c1:f6:93:78:d0:b3:ee:6a:fa:
         81:dd:b9:79:77:f5:13:49:ec:a6:a3:2c:05:f2:67:43:69:23:
         2c:9d:c7:c9:be:6a:ad:48:d8:fc:17:15:1d:49:c7:4a:f5:ae:
         eb:0d:87:3e:0a:36:98:65:dc:ab:fe:07:f6:92:c0:df:2f:62:
         6a:78:37:d3:25:00:71:0e:52:4c:4b:3c:b6:8b:1e:a9:8d:9a:
         64:1e:ac:9a:3b:7c:5b:66:d6:b6:fa:8a:c9:29:30:76:21:e6:
         75:65:c1:14:2b:c8:7f:20:20:43:ed:72:67:53:2b:a2:5e:71:
         46:06:98:5e:f6:95:8f:d0:12:ea:b5:ad:da:87:ee:98:6e:e5:
         e1:55:3c:fc:3b:c9:da:ff:2f:8b:85:15:15:43:ad:fd:6a:68:
         1a:35:bd:e0:01:2e:54:5f:db:2f:ca:2c:a0:2c:1c:91:94:ad:
         2a:39:c8:cb:cc:cf:5f:68:23:55:9b:84:e1:cf:9a:8e:d0:3f:
         a2:35:cc:7a:c6:9c:89:38:ae:bb:70:b7:38:28:21:60:3c:fa:
         9c:85:cb:f2:a0:c8:7b:25:cd:3a:a5:58:2e:c8:68:2a:4d:ed:
         23:8d:3a:bd:2b:79:56:03:08:29:34:52:e5:ed:89:8c:84:36:
         d7:4b:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:47 2026 by rpki-client