Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
File:                     GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json)
Hash identifier:          EXtG+Q1FQk537Pdg81DlGUDl09tHOlNH7rRWK5uns0E=
Subject key identifier:   0B:E0:2D:37:C2:7A:3C:B1:27:B3:E6:18:57:BD:1E:05:A4:C4:85:3F
Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
Certificate issuer:       /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Certificate serial:       086D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
Manifest number:          0863
Signing time:             Fri 04 Sep 2026 20:46:26 +0000
Manifest this update:     Fri 04 Sep 2026 20:46:26 +0000
Manifest next update:     Fri 11 Sep 2026 20:46:26 +0000
Files and hashes:         1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: OsuLanrF4sZJaXMVyRT7KbFypJeCKQcXS543Iq2xsD8=)
                          2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: KF6rAoNA867sjLbZLipqG/MdNU965rwU4PevzNA/flw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
                          rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2157 (0x86d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
        Validity
            Not Before: Sep  4 20:46:26 2026 GMT
            Not After : Sep 11 20:46:26 2026 GMT
        Subject: CN=6a9b2e22-e9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a1:34:3b:47:99:10:0b:c3:87:5f:23:be:fd:
                    7b:87:3e:1b:11:66:0a:6d:5b:e7:c8:81:f3:c6:a4:
                    e5:8c:b3:d1:18:cc:05:17:14:56:cf:77:c7:7e:9d:
                    3d:77:2f:bc:c3:5e:1b:72:dc:ae:9d:1f:2b:6b:b8:
                    cf:98:cc:3a:7d:9c:7b:0e:46:aa:91:70:a5:ef:da:
                    7c:3c:59:f1:d7:f0:5c:ae:37:6f:7a:06:fc:63:44:
                    0c:dc:06:ac:fa:0b:95:05:e7:61:5c:94:e9:bb:c0:
                    63:9e:9b:6f:1c:88:d7:67:69:9b:04:f4:70:dc:c7:
                    3d:18:20:b8:0a:8e:81:79:e2:93:45:63:d4:54:bc:
                    c0:87:e1:52:56:3f:bc:97:15:f3:92:d4:fe:7d:26:
                    4c:ac:5e:24:ed:33:08:88:a0:9b:19:bf:d8:4e:87:
                    b8:d8:84:53:5b:d5:aa:17:b8:4a:02:eb:6d:6f:bb:
                    37:16:f2:4c:75:87:1d:52:d8:08:b9:34:ab:b7:bf:
                    9e:30:f3:fc:4a:bb:48:54:03:7d:b1:64:84:ec:bc:
                    bd:e4:59:ea:71:b5:78:87:1c:c7:ac:81:16:bf:61:
                    b3:c3:4a:76:c4:89:5b:0f:54:18:3f:75:dc:50:f4:
                    e9:f5:51:2a:17:04:0e:40:6f:0f:5e:cc:5c:39:14:
                    06:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E0:2D:37:C2:7A:3C:B1:27:B3:E6:18:57:BD:1E:05:A4:C4:85:3F
            X509v3 Authority Key Identifier:
                keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2d:d9:48:6f:65:39:a0:71:e9:4d:54:7c:36:a7:3e:20:58:
         a5:5f:c0:de:72:3e:33:eb:e0:5c:25:36:e4:5a:a7:ee:5c:cf:
         9d:02:9b:75:f6:9f:87:bb:97:e6:a7:80:e1:5c:f6:22:ef:92:
         b0:bd:b9:63:be:86:8f:ba:22:b1:aa:96:b6:ae:f9:a8:74:9b:
         88:2d:11:f9:7d:f9:64:46:20:aa:9e:9e:51:de:c3:27:18:01:
         cd:28:73:a0:6e:e6:da:8c:39:4f:cb:a4:cb:4b:a6:72:78:e6:
         6f:52:e0:77:75:4b:fc:33:d6:2a:be:31:10:63:23:59:e7:25:
         ac:75:ec:24:b3:ab:56:cc:46:2f:ec:86:b3:b2:88:92:f8:03:
         8f:6d:c7:97:ef:e1:2a:59:05:69:9f:ca:21:fc:2d:fe:2f:e5:
         65:1b:ee:d0:aa:b0:78:4c:8e:dc:dd:61:1c:15:3e:d5:c2:17:
         19:47:4b:8b:ef:99:b4:14:5e:5f:ca:3e:25:bb:a8:a8:26:c2:
         f1:a7:39:ad:aa:6d:33:52:57:78:81:e3:2a:e5:10:dc:e9:f0:
         82:0d:b7:75:a2:6f:2c:10:09:a3:ff:f8:0d:43:86:36:00:4c:
         3b:72:1b:e4:c0:b5:3e:66:4a:22:61:ba:c8:d0:18:f8:f1:70:
         0d:11:b0:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYxN0QxMTAvBgNVBAUTKDE5RUE1QjQ1RjAxRTgwQkUwQTc2RENEQUM5OTI2QjZF
Njc0MkYyMjEwHhcNMjYwOTA0MjA0NjI2WhcNMjYwOTExMjA0NjI2WjAYMRYwFAYD
VQQDEw02YTliMmUyMi1lOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA56E0O0eZEAvDh18jvv17hz4bEWYKbVvnyIHzxqTljLPRGMwFFxRWz3fHfp09
dy+8w14bctyunR8ra7jPmMw6fZx7DkaqkXCl79p8PFnx1/Bcrjdvegb8Y0QM3Aas
+guVBedhXJTpu8BjnptvHIjXZ2mbBPRw3Mc9GCC4Co6BeeKTRWPUVLzAh+FSVj+8
lxXzktT+fSZMrF4k7TMIiKCbGb/YToe42IRTW9WqF7hKAuttb7s3FvJMdYcdUtgI
uTSrt7+eMPP8SrtIVAN9sWSE7Ly95FnqcbV4hxzHrIEWv2Gzw0p2xIlbD1QYP3Xc
UPTp9VEqFwQOQG8PXsxcORQGiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvgLTfC
ejyxJ7PmGFe9HgWkxIU/MB8GA1UdIwQYMBaAFBnqW0XwHoC+Cnbc2smSa25nQvIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RC8xOERDNTc0MjE4
MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdMNEtkdHpheVpKcmJtZEM4
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dlcGJSZkFlZ0w0S2R0emF5WkpyYm1kQzhpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjE3RC8xOERDNTc0MjE4MDgxMUVCQTg1NzMwMTJDNEY5QUUwMi9HZXBiUmZBZWdM
NEtkdHpheVpKcmJtZEM4aUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEi3ZSG9lOaBx6U1UfDanPiBYpV/A3nI+M+vgXCU25Fqn7lzPnQKbdfafh7uX
5qeA4Vz2Iu+SsL25Y76Gj7oisaqWtq75qHSbiC0R+X35ZEYgqp6eUd7DJxgBzShz
oG7m2ow5T8uky0umcnjmb1Lgd3VL/DPWKr4xEGMjWeclrHXsJLOrVsxGL+yGs7KI
kvgDj23Hl+/hKlkFaZ/KIfwt/i/lZRvu0KqweEyO3N1hHBU+1cIXGUdLi++ZtBRe
X8o+JbuoqCbC8ac5raptM1JXeIHjKuUQ3Onwgg23daJvLBAJo//4DUOGNgBMO3Ib
5MC1PmZKImG6yNAY+PFwDRGw1A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:19:32 2026 by rpki-client