Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
File:                     Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json)
Hash identifier:          N6EJ8E1aKUlPCxBBrQhtQxahYgbdVwctz+k7vkj5U5M=
Subject key identifier:   C5:1F:20:9B:A4:BA:5B:D7:E5:2E:4B:0C:B5:31:85:AF:6D:21:D6:53
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Certificate issuer:       /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial:       0450
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
Manifest number:          0437
Signing time:             Mon 05 Oct 2026 00:15:56 +0000
Manifest this update:     Mon 05 Oct 2026 00:15:56 +0000
Manifest next update:     Mon 12 Oct 2026 00:15:56 +0000
Files and hashes:         1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: 6X9XKxn4zQ5BqN42yrwT66O/eHfmbL+3jmzxPdsMshQ=)
                          2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: jJu8AXToVSwmPXjvxRWlorAWWupdkIcDt1NMIoSlpMQ=)
                          3: 6E32028AD48511EF8239D526C4F9AE02.roa (hash: Kn3RxDk3qhm1BoA1PXfblo/JTZSCcatO617eVns4pg0=)
                          4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: 1bYkzomJmZpRc+K7ziy2g69pmgRMlSXIQoUyRXbC0j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
                          rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FC2C, serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
        Validity
            Not Before: Oct  5 00:15:56 2026 GMT
            Not After : Oct 12 00:15:56 2026 GMT
        Subject: CN=6ac2ec3c-2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:69:b2:6e:92:4d:c3:d7:be:a1:b8:28:64:
                    e0:e9:68:83:84:ce:a1:df:75:1e:11:db:04:e5:23:
                    56:ed:5a:64:6e:86:04:e2:4a:1a:ab:70:3a:ad:f1:
                    b8:4c:cf:74:cd:16:9c:55:9a:fb:0b:77:79:f5:3b:
                    ce:bb:ac:82:9a:fc:2f:44:73:8b:99:cc:e9:2d:9b:
                    bc:27:38:7f:42:0c:6f:c9:55:3b:d5:12:22:59:05:
                    83:b4:1d:7e:64:b9:69:f5:0c:ad:b1:a5:b3:21:7e:
                    7a:4b:81:55:34:7c:c7:12:e7:b1:2b:c6:20:87:bf:
                    68:ad:bb:41:26:5d:df:49:f8:66:40:2a:c6:f4:fc:
                    80:b9:6d:86:90:0b:ae:7e:ed:35:20:2e:3c:f4:cf:
                    b9:be:ae:30:46:0b:46:50:0d:bf:61:10:64:56:82:
                    a1:20:f4:de:79:7b:e7:bc:02:ba:41:16:8f:4a:c1:
                    d9:9c:56:1a:34:a7:4d:30:e7:92:e9:33:bb:9b:e8:
                    d3:f9:94:05:43:d3:9f:62:17:40:2c:9f:fd:d7:7c:
                    77:34:a8:ac:9d:00:63:16:01:90:0f:b7:b3:54:8a:
                    84:c1:84:f5:48:5e:b9:37:06:5b:11:be:61:92:84:
                    cd:84:90:15:50:10:5e:b9:62:3f:02:a6:68:b4:36:
                    77:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:20:9B:A4:BA:5B:D7:E5:2E:4B:0C:B5:31:85:AF:6D:21:D6:53
            X509v3 Authority Key Identifier:
                keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:74:2c:47:0c:71:c9:d4:8c:cf:cd:9c:ce:8a:e7:8b:20:
         f6:f6:bb:4d:09:eb:f3:47:ad:ab:c8:51:31:53:b4:ff:9c:e3:
         8a:7e:9a:1a:87:e9:fd:e6:77:bd:dd:62:d6:1e:c5:52:bd:98:
         da:38:fc:86:da:f8:12:22:c5:68:e4:1a:95:60:14:f6:2b:44:
         ff:58:84:39:c6:54:4f:5a:32:63:60:ee:ae:8a:8d:b2:2d:27:
         d0:21:e3:ad:35:5c:0a:fd:85:53:5a:42:6b:18:52:43:c6:eb:
         9b:b5:aa:64:57:62:2f:6d:3e:db:f2:e0:cd:1e:8e:da:02:06:
         87:da:35:3a:3d:dc:e4:de:9b:20:e9:2c:5f:a8:a6:e1:6c:df:
         c8:f6:13:f3:25:80:2a:6f:4b:d6:92:b9:5a:8c:48:96:65:a1:
         e4:44:eb:d3:8d:ef:51:93:8d:75:46:3f:3d:04:10:62:32:c6:
         d6:7e:60:d1:c0:fe:20:9b:50:5e:62:6f:4e:b9:f2:29:ae:91:
         c6:49:a4:74:ba:a8:ce:d0:65:fc:f0:82:41:e9:e1:97:45:7b:
         d2:52:10:35:5c:80:d0:d8:04:e9:8c:11:3a:33:02:f2:db:a7:
         d7:05:ab:be:f0:9b:eb:03:d0:85:f9:dc:e1:2e:29:d3:7f:d5:
         25:17:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:45 2026 by rpki-client