Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File:                     Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier:          xPqAcgyiQlZBVdnej/Rx1YlA7Yc/OXnSNmHdvXMYjdU=
Subject key identifier:   E4:10:FB:F3:96:9F:90:84:EB:05:5E:95:05:98:D7:85:3E:A5:3E:1E
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer:       /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial:       0438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number:          041F
Signing time:             Wed 19 Aug 2026 00:41:45 +0000
Manifest this update:     Wed 19 Aug 2026 00:41:45 +0000
Manifest next update:     Wed 26 Aug 2026 00:41:45 +0000
Files and hashes:         1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: /KHTO++ZgDGx+NgfB9+RUOmpf6WXhCL9sFAAZRqIUe8=)
                          2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=)
                          3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=)
                          4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
                          rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
        Validity
            Not Before: Aug 19 00:41:45 2026 GMT
            Not After : Aug 26 00:41:45 2026 GMT
        Subject: CN=6a84fbc9-f785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:17:d7:b7:6c:bd:6f:d5:65:20:f3:bf:bb:
                    24:67:3e:48:59:d6:60:63:15:a2:9d:dd:08:9d:75:
                    b5:88:c1:87:12:7a:3d:99:c1:2f:f8:a6:6c:1a:35:
                    e5:e9:e8:cb:32:9e:ff:97:17:a4:d9:e2:ac:b0:ff:
                    6a:84:60:78:d2:6e:4b:a7:30:4f:2f:1f:36:2a:c1:
                    4b:e6:33:74:e4:a6:2e:b0:a8:5c:fe:e3:75:a0:4e:
                    d2:cc:7a:50:0d:64:a2:5d:a0:90:93:a4:44:07:c0:
                    06:ad:18:91:be:a3:87:46:b7:1e:a7:a5:7d:7e:fc:
                    da:0c:c6:91:84:9e:35:f3:67:dd:73:96:3d:78:6d:
                    6b:60:45:60:c6:31:b8:f8:7a:71:fc:9f:23:59:c5:
                    4f:8b:36:10:6c:27:e1:98:86:71:ad:98:80:e1:11:
                    22:cd:42:a0:08:69:eb:4a:e2:13:8a:6b:ca:9a:06:
                    5b:f5:55:34:61:4b:ea:d6:e6:15:45:9d:8b:97:d7:
                    04:32:1f:b6:3f:d3:b4:98:b3:e0:8d:0b:93:6d:73:
                    5f:a9:3f:c1:9f:d7:7e:fd:be:d2:74:b5:4c:8d:0f:
                    b7:bd:d5:16:15:44:9f:c8:5c:1e:f3:e8:44:ae:8b:
                    0d:7d:c0:01:e0:48:c3:0a:f1:39:9d:10:9b:35:1d:
                    80:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:10:FB:F3:96:9F:90:84:EB:05:5E:95:05:98:D7:85:3E:A5:3E:1E
            X509v3 Authority Key Identifier:
                keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:35:f9:76:85:24:60:0b:bb:f7:ac:fe:57:60:01:ef:6a:
         61:9b:52:7e:9d:cc:86:6d:6d:ea:ba:f0:76:18:c0:8b:cf:46:
         d5:b4:8a:fb:20:e4:8a:ae:07:c7:e1:47:df:c4:41:a2:76:d4:
         36:af:18:52:9b:78:1d:88:98:ab:2c:a3:a5:02:50:d1:b4:f4:
         d1:ba:9a:2f:83:87:f5:c6:f8:45:c3:97:8a:5d:fd:52:33:ba:
         65:02:3e:45:de:f3:f2:86:dc:8c:e0:92:98:84:0d:4f:af:de:
         be:58:90:3a:85:46:25:a9:bd:9e:22:4d:d6:89:39:a2:60:9f:
         0d:4f:c3:71:1e:8a:cf:bf:20:15:f7:f8:01:21:cf:43:43:f3:
         2c:d0:5c:f0:5e:7c:4e:01:4d:b5:e5:ea:1f:40:38:96:1e:7d:
         2b:d7:14:c0:bb:8f:ab:f9:fa:28:b6:50:89:c7:55:13:c1:33:
         e2:f8:43:e4:23:e9:07:be:b5:e6:32:f1:6f:4c:05:9d:8f:ab:
         53:60:8b:a5:e7:d6:26:f7:96:1f:6f:5e:3b:36:2f:07:8a:bd:
         cb:9a:f8:6a:57:c7:7d:6b:22:e8:9c:76:a1:3f:fd:5e:4a:b1:
         74:bc:7f:fe:e0:ac:4a:0f:c8:3a:03:d6:bd:27:6f:24:5f:f4:
         64:aa:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 22:50:56 2026 by rpki-client