Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
File:                     GepbRfAegL4KdtzayZJrbmdC8iE.mft (raw, json)
Hash identifier:          3TRHd+AWN/P+CA2BVkxqf9JYQUvOdMHDzerJp8IIJHk=
Subject key identifier:   C8:CB:DF:2B:53:F2:BC:BD:51:03:B5:AD:3F:BB:6B:00:FF:E0:F8:07
Authority key identifier: 19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21
Certificate issuer:       /CN=A915617D/serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
Manifest number:          087D
Signing time:             Mon 26 Oct 2026 20:50:01 +0000
Manifest this update:     Mon 26 Oct 2026 20:50:00 +0000
Manifest next update:     Mon 02 Nov 2026 20:50:00 +0000
Files and hashes:         1: GepbRfAegL4KdtzayZJrbmdC8iE.crl (hash: fkbaGtNZ1bgoLuoR9YWtYKU0VuUQiKD1Mo2Eb1G/P2U=)
                          2: B2356D1A180911EB962CB216C4F9AE02.roa (hash: KF6rAoNA867sjLbZLipqG/MdNU965rwU4PevzNA/flw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl
                          rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 20:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915617D, serialNumber=19EA5B45F01E80BE0A76DCDAC9926B6E6742F221
        Validity
            Not Before: Oct 26 20:50:00 2026 GMT
            Not After : Nov  2 20:50:00 2026 GMT
        Subject: CN=6adfbcf9-a005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:80:3f:a9:a2:b1:af:e0:45:57:25:72:4f:
                    7f:a8:16:c7:eb:f4:be:2d:b0:6c:7b:7e:e7:80:5e:
                    67:4a:a8:2c:58:25:e0:d1:b7:92:ff:c9:45:cb:e4:
                    23:04:e9:ab:ba:d9:8f:f5:a5:ad:35:04:89:7d:48:
                    38:a2:9c:4d:2b:52:bb:1f:d6:fd:4a:4a:da:d7:46:
                    9f:ce:c1:17:29:77:82:95:3b:24:57:6b:03:a6:a8:
                    10:b0:bc:b5:7b:53:5f:07:d4:ca:10:93:1d:47:3e:
                    52:ea:0e:f4:a4:86:b9:32:85:2c:eb:a2:19:6f:6a:
                    67:2b:ae:1a:ea:29:fa:25:4d:6b:85:83:d9:7b:38:
                    31:47:a9:66:7e:d5:96:dc:78:44:13:ea:96:87:11:
                    08:e5:a9:67:8e:81:b3:d0:25:87:9f:5a:0b:58:cd:
                    b6:27:61:70:ec:04:6b:f0:78:6e:db:13:f9:47:99:
                    e0:c0:4d:23:84:a6:01:8a:cc:38:8a:1e:6b:36:e6:
                    8d:c6:f9:a8:01:65:07:0d:35:f1:05:f2:00:94:41:
                    ba:bc:ed:ce:ef:fe:5e:f3:70:b2:76:76:ab:bc:ca:
                    5d:ae:74:82:4b:a3:6b:21:0c:3b:c0:f7:20:6b:18:
                    63:50:f9:ab:8c:40:7c:80:ad:f1:59:5c:63:ce:2e:
                    3b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:DF:2B:53:F2:BC:BD:51:03:B5:AD:3F:BB:6B:00:FF:E0:F8:07
            X509v3 Authority Key Identifier:
                keyid:19:EA:5B:45:F0:1E:80:BE:0A:76:DC:DA:C9:92:6B:6E:67:42:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GepbRfAegL4KdtzayZJrbmdC8iE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617D/18DC5742180811EBA8573012C4F9AE02/GepbRfAegL4KdtzayZJrbmdC8iE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ae:df:52:c0:72:f6:d1:25:53:c3:75:4f:ef:33:4b:0d:89:
         7b:8d:d0:eb:7f:22:c0:ff:25:97:df:73:c8:dc:0e:88:91:3c:
         1f:f6:26:46:7a:a3:8c:bf:f4:ff:9d:7e:41:b0:82:2b:a9:93:
         ca:1d:06:78:9a:40:73:56:b4:56:e7:b2:97:c9:c9:6c:8c:97:
         a0:5f:be:99:7e:ef:a9:63:bd:0f:9d:f0:1a:e0:f0:26:39:de:
         03:70:6c:7d:1d:f2:89:16:e1:bf:50:f0:51:1a:c5:28:c4:74:
         fe:d8:af:60:0e:e9:d3:6e:f4:af:53:40:39:6c:78:31:d3:8e:
         be:15:e6:77:54:57:4d:e2:30:55:2a:a6:34:66:25:8a:29:a2:
         5d:83:8e:f9:4f:15:7e:f6:18:e3:dd:63:f8:e8:dd:73:ca:3d:
         f8:ff:4d:fc:a5:17:90:24:36:93:a0:a7:ca:85:bf:38:6a:d7:
         f5:bf:23:70:3a:c8:c6:92:3d:da:e5:dc:52:f7:28:23:9e:6f:
         67:f7:8f:82:7a:77:d6:19:82:70:7c:99:8b:fb:e8:0f:64:b1:
         39:c4:e2:a1:e8:4c:44:3a:2f:3e:fb:0c:9f:a3:a4:4b:a8:5e:
         33:6c:66:7f:72:97:1d:9b:b8:fe:bc:ba:30:da:5f:e7:f1:52:
         b8:6e:37:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:40:07 2026 by rpki-client