Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
File:                     GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json)
Hash identifier:          C5U5XJRtFwRbeo6FRDy4wq44Xz06ySzrJL3GXnQ8uq8=
Subject key identifier:   06:A2:04:AC:C9:1A:E4:7F:08:A6:32:F4:17:FB:31:92:CA:AE:BA:20
Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
Certificate issuer:       /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Certificate serial:       0886
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
Manifest number:          087C
Signing time:             Sat 24 Oct 2026 20:50:15 +0000
Manifest this update:     Sat 24 Oct 2026 20:50:15 +0000
Manifest next update:     Sat 31 Oct 2026 20:50:15 +0000
Files and hashes:         1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: kT2cT3QIQK+nMUB2cVOoeHUf+5TVpAqJTX1fdX7L118=)
                          2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: KF6rAoNA867sjLbZLipqG/MdNU965rwU4PevzNA/flw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
                          rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 20:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
        Validity
            Not Before: Oct 24 20:50:15 2026 GMT
            Not After : Oct 31 20:50:15 2026 GMT
        Subject: CN=6add1a07-5e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:d0:3b:98:f9:73:3b:ea:c3:36:ec:80:88:
                    1a:72:d3:bd:dd:a4:7b:52:e7:8b:ac:b8:c3:b1:14:
                    b2:2e:1f:21:4b:27:d8:bf:9d:a4:81:06:2d:70:0f:
                    04:6c:02:f3:7f:83:ad:99:72:10:53:76:e2:cc:6e:
                    3a:f3:3c:43:d9:68:22:47:9e:ac:94:13:32:be:09:
                    cd:5c:8f:88:f3:8a:83:a5:33:2c:c8:be:e0:ee:b4:
                    9d:6f:87:98:68:8e:76:fc:d2:6e:02:9c:73:38:4d:
                    0e:78:e2:58:7d:26:8f:59:43:b0:f5:5a:7c:e1:2f:
                    fb:2c:ca:11:54:f4:fc:81:63:91:c6:cf:43:cc:f1:
                    4e:e5:97:ad:30:91:40:41:18:a1:1b:cc:2c:19:23:
                    b8:bb:d9:b6:bf:d5:22:cf:4f:be:4a:97:d7:a7:32:
                    51:f0:1f:7e:13:6c:67:1f:90:30:06:cc:24:8e:d8:
                    2b:a0:76:4b:56:e9:fb:66:aa:c0:e5:c7:13:28:e9:
                    54:bf:90:42:d2:47:db:dc:f7:3b:39:1a:dc:5d:11:
                    75:11:dc:66:11:c0:db:0a:b6:7d:cd:5b:09:d9:bc:
                    ff:49:69:7b:fe:4f:c0:83:02:c2:c8:a1:ce:a4:b7:
                    bc:86:74:ab:8f:1e:9b:23:4b:f6:69:15:0c:75:94:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A2:04:AC:C9:1A:E4:7F:08:A6:32:F4:17:FB:31:92:CA:AE:BA:20
            X509v3 Authority Key Identifier:
                keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:5b:3d:75:28:dd:ff:21:1a:7c:14:65:0f:47:c5:ae:bb:f2:
         1a:74:41:7c:8b:b4:c7:14:94:14:81:57:c5:2f:71:d6:8e:85:
         60:1b:c7:6d:43:dc:1f:0f:d2:b3:6d:b1:9b:16:12:4b:b1:97:
         06:5d:e6:4c:30:f8:22:3e:bc:f8:7a:e9:b1:38:9a:86:d7:0a:
         6c:b2:54:24:b0:6f:9b:f1:42:56:27:21:b0:14:d4:25:25:2b:
         6f:6c:ab:d9:ad:d7:1b:8f:90:aa:72:d4:77:96:65:e8:55:d4:
         0e:ca:92:cd:2b:9c:bf:5b:59:36:7c:85:d9:86:43:60:29:30:
         db:0f:af:e7:c6:c3:a6:6f:e1:85:91:c0:61:c3:76:13:fd:cd:
         fa:81:01:9d:a8:3f:f2:30:87:0e:e8:49:d2:dd:32:85:fa:00:
         be:4c:41:72:05:ed:e7:a1:45:68:ca:95:83:e1:7b:b2:47:a1:
         be:5c:37:57:74:95:b7:eb:c6:93:b1:35:5e:54:b7:63:5e:fb:
         a8:8c:ae:59:8f:7a:00:59:d9:11:31:25:c3:97:87:3f:01:f9:
         16:f2:1b:9e:95:c0:07:74:42:a0:df:f5:19:b3:c2:ea:64:45:
         70:7a:3e:a2:df:67:e0:e8:00:18:1c:47:08:7b:6b:d7:ff:07:
         58:cb:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:49 2026 by rpki-client