Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
File:                     gunGO3wseQh9WrEOid0oovfEnD4.mft (raw, json)
Hash identifier:          6dNtZj8OY7LEJsYr5VxJsYu6870S74IK3vPYVN6hZWs=
Subject key identifier:   53:C7:28:EA:12:18:EA:20:BB:86:5F:15:02:CE:47:5C:1E:02:1D:16
Authority key identifier: 82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E
Certificate issuer:       /CN=A915308F/serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
Manifest number:          01CD
Signing time:             Fri 11 Sep 2026 03:51:16 +0000
Manifest this update:     Fri 11 Sep 2026 03:51:15 +0000
Manifest next update:     Fri 18 Sep 2026 03:51:15 +0000
Files and hashes:         1: gunGO3wseQh9WrEOid0oovfEnD4.crl (hash: fMsBeEmjUUiZXXugJUSULzceUO4L8Ksc9qkCxeL8TBU=)
                          2: 467A8D16FC7F11F09D3A3E06566F56BC.roa (hash: UJrdrvd0e9R/7l3Br1YXlcFZ4BRP81CtonG80emdj4U=)
                          3: 8FE6F162FC7D11F0978FBBEA556F56BC.roa (hash: c0UMq2jAybOaSEqXirvba5VNbOTW/tb7X9m7RPsJoZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl
                          rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 03:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915308F, serialNumber=82E9C63B7C2C79087D5AB10E89DD28A2F7C49C3E
        Validity
            Not Before: Sep 11 03:51:15 2026 GMT
            Not After : Sep 18 03:51:15 2026 GMT
        Subject: CN=6aa37ab4-d20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:7a:5c:1e:69:34:f7:2b:e5:19:25:96:4a:
                    39:f7:97:93:b7:29:08:74:b9:08:81:7a:e5:60:35:
                    5f:92:db:07:f3:06:a2:3d:2a:58:76:6e:31:c0:87:
                    34:cb:25:68:57:2a:a4:d8:56:f6:f3:f9:b4:67:e5:
                    a5:be:49:a3:e5:bc:45:57:c8:59:03:c7:39:c4:68:
                    85:91:33:ea:7d:43:d8:7d:62:d2:07:f5:e6:83:83:
                    fa:75:39:c7:89:08:8c:e0:f2:f8:5c:c1:d2:12:74:
                    98:df:ec:73:8e:51:ed:b6:d3:5f:5d:b4:e3:ad:09:
                    9e:88:16:a3:e1:68:61:ec:60:4d:b1:ae:1b:0f:03:
                    88:29:fd:35:25:a3:ce:00:b6:82:10:fd:7b:01:84:
                    b9:28:c9:9e:60:0d:ec:b2:3e:67:8a:e2:c8:5f:0a:
                    6e:04:d2:42:0c:58:5e:f4:1d:34:cb:80:f2:59:24:
                    68:6f:4c:dd:93:bc:52:74:74:d8:7d:52:a2:a5:d2:
                    9a:09:f7:2e:65:a3:d5:43:00:7c:62:e3:d6:e4:bd:
                    26:d4:8b:61:fd:4a:60:92:dd:be:2b:eb:c1:d9:c3:
                    26:fc:94:b1:69:1d:fb:52:b4:16:89:a6:e6:1f:5a:
                    0d:93:9b:95:b9:a4:1d:e7:b4:8d:41:47:14:54:be:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C7:28:EA:12:18:EA:20:BB:86:5F:15:02:CE:47:5C:1E:02:1D:16
            X509v3 Authority Key Identifier:
                keyid:82:E9:C6:3B:7C:2C:79:08:7D:5A:B1:0E:89:DD:28:A2:F7:C4:9C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gunGO3wseQh9WrEOid0oovfEnD4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915308F/2C14EA10F66011EE9C88DD1FC4F9AE02/gunGO3wseQh9WrEOid0oovfEnD4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:ac:d5:b4:1e:f1:8b:9b:e6:76:5e:0d:09:3c:22:f7:9c:
         a0:d2:b4:f3:10:da:98:c7:bb:62:55:39:95:04:a1:5a:d4:a1:
         00:12:be:06:79:6c:6b:f1:f3:ca:c4:81:4d:47:29:8b:b7:f0:
         1d:d5:f8:2e:20:3c:93:47:8c:d9:81:79:c6:67:6f:04:b8:6e:
         91:db:51:04:2b:61:e5:c4:5a:6f:a7:e7:f2:21:5a:b4:71:e6:
         99:74:d1:c8:f5:34:80:76:ed:8a:c7:69:05:93:2a:97:63:1b:
         bc:69:b9:cf:ae:ab:c3:a8:97:01:a2:d6:e3:aa:bc:a7:49:43:
         a4:30:76:b6:e9:be:ba:6b:36:22:78:cd:53:4b:7d:de:f4:66:
         ad:2c:26:0f:7e:93:47:59:63:14:77:8e:c3:ba:7d:6f:70:75:
         21:76:3f:68:f7:80:be:07:72:d6:28:c8:e3:4c:6b:3b:91:ab:
         dd:70:87:25:00:ab:76:4c:c4:4f:13:b8:1d:5a:dd:85:ae:bc:
         17:e6:0f:f9:91:dc:e4:61:39:82:0f:8a:c3:9e:14:ba:33:76:
         bd:21:a3:68:bd:e8:f0:b7:d9:34:a9:fc:7d:2f:c3:ae:0a:75:
         30:09:0e:56:b1:39:38:d7:56:bf:87:74:fe:60:fb:2f:89:f9:
         a2:8a:c1:16
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMwOEYxMTAvBgNVBAUTKDgyRTlDNjNCN0MyQzc5MDg3RDVBQjEwRTg5REQyOEEy
RjdDNDlDM0UwHhcNMjYwOTExMDM1MTE1WhcNMjYwOTE4MDM1MTE1WjAYMRYwFAYD
VQQDEw02YWEzN2FiNC1kMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTd6XB5pNPcr5Rkllko595eTtykIdLkIgXrlYDVfktsH8waiPSpYdm4xwIc0
yyVoVyqk2Fb28/m0Z+Wlvkmj5bxFV8hZA8c5xGiFkTPqfUPYfWLSB/Xmg4P6dTnH
iQiM4PL4XMHSEnSY3+xzjlHtttNfXbTjrQmeiBaj4Whh7GBNsa4bDwOIKf01JaPO
ALaCEP17AYS5KMmeYA3ssj5niuLIXwpuBNJCDFhe9B00y4DyWSRob0zdk7xSdHTY
fVKipdKaCfcuZaPVQwB8YuPW5L0m1Ith/Upgkt2+K+vB2cMm/JSxaR37UrQWiabm
H1oNk5uVuaQd57SNQUcUVL6gqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPHKOoS
GOogu4ZfFQLOR1weAh0WMB8GA1UdIwQYMBaAFILpxjt8LHkIfVqxDondKKL3xJw+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA4Ri8yQzE0RUExMEY2
NjAxMUVFOUM4OEREMUZDNEY5QUUwMi9ndW5HTzN3c2VRaDlXckVPaWQwb292ZkVu
RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d1bkdPM3dzZVFoOVdyRU9pZDBvb3ZmRW5ENC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzA4Ri8yQzE0RUExMEY2NjAxMUVFOUM4OEREMUZDNEY5QUUwMi9ndW5HTzN3c2VR
aDlXckVPaWQwb292ZkVuRDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYaus1bQe8Yub5nZeDQk8IvecoNK08xDamMe7YlU5lQShWtShABK+Bnlsa/Hz
ysSBTUcpi7fwHdX4LiA8k0eM2YF5xmdvBLhukdtRBCth5cRab6fn8iFatHHmmXTR
yPU0gHbtisdpBZMql2MbvGm5z66rw6iXAaLW46q8p0lDpDB2tum+ums2InjNU0t9
3vRmrSwmD36TR1ljFHeOw7p9b3B1IXY/aPeAvgdy1ijI40xrO5Gr3XCHJQCrdkzE
TxO4HVrdha68F+YP+ZHc5GE5gg+Kw54UujN2vSGjaL3o8LfZNKn8fS/Drgp1MAkO
VrE5ONdWv4d0/mD7L4n5oorBFg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 14:30:13 2026 by rpki-client