Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File:                     gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier:          Zwru8r7MdTjg752Li9vpdInTjlQSWQ6bmQG88UWcm98=
Subject key identifier:   A3:A2:F2:99:D5:22:40:72:F1:7E:49:5C:BB:9A:43:36:DF:6B:59:E5
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer:       /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial:       027F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number:          027A
Signing time:             Tue 27 Oct 2026 02:08:35 +0000
Manifest this update:     Tue 27 Oct 2026 02:08:34 +0000
Manifest next update:     Tue 03 Nov 2026 02:08:34 +0000
Files and hashes:         1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: jneNx9yWlUenL0Ysy9ttUv8G8QyCAIw49rPzeBf/l5o=)
                          2: 6A3BE658401B11F080319527C4F9AE02.roa (hash: 0Y3w5bmKBmAC/dSF/eBZlIBMdDv5h0a6260V5B2r/ME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639 (0x27f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
        Validity
            Not Before: Oct 27 02:08:34 2026 GMT
            Not After : Nov  3 02:08:34 2026 GMT
        Subject: CN=6ae007a3-ffe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:4d:82:a5:e8:7c:1e:04:9e:d8:9e:6c:05:
                    e1:91:a5:10:b5:dc:16:95:ce:5f:d6:69:74:8c:cf:
                    3a:38:5e:43:3c:45:1c:d8:cf:7f:c6:68:5d:0a:c4:
                    55:c7:c7:5f:d6:0e:0f:43:84:ae:bb:ea:4d:32:e1:
                    06:28:e7:d9:de:ce:5a:bf:00:9b:3e:a2:9e:3c:42:
                    8e:e1:e4:1d:85:92:08:2e:81:03:ef:3b:58:da:08:
                    da:bc:83:1d:7f:fd:40:ab:98:9a:6b:ed:23:24:26:
                    8a:48:36:c1:7d:76:28:28:7e:cf:97:dc:43:58:6a:
                    bf:71:e7:4f:e2:70:ba:9b:c5:86:a9:74:00:9d:a5:
                    e2:6c:29:39:7e:0c:ef:5d:5d:5f:23:5c:db:e7:6d:
                    62:71:d4:22:3d:a3:5a:9e:41:41:0e:cc:18:b9:60:
                    dc:e9:c3:5a:62:32:c4:c9:9e:cb:52:1c:37:da:f1:
                    84:82:45:eb:28:d1:13:dc:fa:3c:0a:09:3a:90:da:
                    b6:ed:d2:b5:f9:b8:90:38:72:d5:da:2c:e4:aa:bf:
                    79:c0:32:75:48:cb:a9:fe:58:76:12:0a:06:92:c9:
                    35:33:4f:c4:ca:7b:7e:78:01:d4:70:82:92:4c:1a:
                    d8:69:eb:c3:b5:dd:33:04:c3:c2:6b:ef:83:50:9e:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A2:F2:99:D5:22:40:72:F1:7E:49:5C:BB:9A:43:36:DF:6B:59:E5
            X509v3 Authority Key Identifier:
                keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:89:a8:df:68:62:3a:62:5f:16:96:ab:b1:7d:b3:a1:67:49:
         b9:a5:99:d1:30:4f:10:fe:cc:71:f1:31:35:1f:f3:1b:b0:17:
         bf:77:c8:96:f8:35:cd:d8:c6:78:98:b3:50:e7:02:c3:ca:49:
         66:b2:34:65:30:7f:c8:b2:d6:46:16:ba:df:ed:6d:03:d1:af:
         6c:49:38:72:b1:3c:a8:75:47:ae:07:74:8f:9d:6e:99:5f:30:
         78:db:5a:d3:30:05:f4:d2:53:d9:c3:c0:b8:93:e3:09:ad:0a:
         9b:87:69:fd:f3:73:16:a0:c0:e9:3f:a1:f4:c9:48:01:b4:26:
         d7:85:c4:03:f3:86:3d:32:9e:8c:0f:aa:44:f5:bd:6f:bf:96:
         58:95:e9:4f:85:e0:e2:ec:fe:99:df:5f:59:f2:03:d8:72:6a:
         51:7f:43:36:37:ca:69:4b:eb:03:ff:de:30:fc:4d:3a:16:fa:
         20:a9:4a:a0:c7:ef:b4:72:6a:a3:51:35:75:01:67:be:76:05:
         ab:81:0a:dd:ac:40:50:22:bf:6a:45:56:94:24:f5:fc:ab:44:
         b4:04:06:d3:4a:df:43:44:2c:56:ee:49:1e:2e:26:bd:cc:e6:
         4f:51:f8:e0:c9:eb:1d:5b:4c:0a:c4:af:fd:8f:c9:6c:73:22:
         74:5e:36:56
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRUUxMTAvBgNVBAUTKDgyNkUzOEVDNzFGMkE0ODVCNEIyNEVGRUNFODQ2MzI1
MEE4NEEwQkMwHhcNMjYxMDI3MDIwODM0WhcNMjYxMTAzMDIwODM0WjAYMRYwFAYD
VQQDEw02YWUwMDdhMy1mZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy8xNgqXofB4EntiebAXhkaUQtdwWlc5f1ml0jM86OF5DPEUc2M9/xmhdCsRV
x8df1g4PQ4Suu+pNMuEGKOfZ3s5avwCbPqKePEKO4eQdhZIILoED7ztY2gjavIMd
f/1Aq5iaa+0jJCaKSDbBfXYoKH7Pl9xDWGq/cedP4nC6m8WGqXQAnaXibCk5fgzv
XV1fI1zb521icdQiPaNankFBDswYuWDc6cNaYjLEyZ7LUhw32vGEgkXrKNET3Po8
Cgk6kNq27dK1+biQOHLV2izkqr95wDJ1SMup/lh2EgoGksk1M0/Eynt+eAHUcIKS
TBrYaevDtd0zBMPCa++DUJ7LXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKOi8pnV
IkBy8X5JXLuaQzbfa1nlMB8GA1UdIwQYMBaAFIJuOOxx8qSFtLJO/s6EYyUKhKC8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80QkNDNDQ0NDA5
QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9nbTQ0N0hIeXBJVzBzazctem9SakpRcUVv
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dtNDQ3SEh5cElXMHNrNy16b1JqSlFxRW9Mdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBFRS80QkNDNDQ0NDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9nbTQ0N0hIeXBJ
VzBzazctem9SakpRcUVvTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIomo32hiOmJfFparsX2zoWdJuaWZ0TBPEP7McfExNR/zG7AXv3fIlvg1zdjG
eJizUOcCw8pJZrI0ZTB/yLLWRha63+1tA9GvbEk4crE8qHVHrgd0j51umV8weNta
0zAF9NJT2cPAuJPjCa0Km4dp/fNzFqDA6T+h9MlIAbQm14XEA/OGPTKejA+qRPW9
b7+WWJXpT4Xg4uz+md9fWfID2HJqUX9DNjfKaUvrA//eMPxNOhb6IKlKoMfvtHJq
o1E1dQFnvnYFq4EK3axAUCK/akVWlCT1/KtEtAQG00rfQ0QsVu5JHi4mvczmT1H4
4MnrHVtMCsSv/Y/JbHMidF42Vg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:28 2026 by rpki-client