Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          IqY1RJU6JsT37oRJ+2EABAxA2GlB42AphsqAHhQ1aVI=
Subject key identifier:   93:DF:07:2A:E7:63:6B:4E:F3:38:56:60:AA:9B:FE:A6:EC:3C:98:AC
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0D37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          1646
Signing time:             Sat 10 Oct 2026 18:20:30 +0000
Manifest this update:     Sat 10 Oct 2026 18:20:29 +0000
Manifest next update:     Sat 17 Oct 2026 18:20:29 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: 5u+80XzbkH30Vn+gW2STNWWntR5fNoTKRMy2qi6xevk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:20:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3383 (0xd37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Oct 10 18:20:29 2026 GMT
            Not After : Oct 17 18:20:29 2026 GMT
        Subject: CN=6aca81ee-9974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:8e:e8:83:63:b5:a4:e8:88:a4:cf:11:06:
                    8a:11:21:71:b7:10:97:8a:1c:b8:5e:1f:2a:2e:e6:
                    50:2d:eb:36:93:5f:f2:56:f8:f9:0c:74:99:f9:0d:
                    a1:75:30:be:74:69:a3:2c:b2:79:53:87:35:f5:a1:
                    23:db:d8:ff:e5:6d:f4:7a:4b:c0:56:ef:98:01:2e:
                    88:12:42:9b:69:fa:96:2d:0c:d2:c8:48:60:14:82:
                    79:f3:68:1c:90:98:43:a8:84:5b:a7:ef:00:70:b0:
                    f0:9f:51:0c:da:63:32:05:ad:bd:13:66:ae:41:15:
                    e1:f1:2f:ca:25:be:2b:c9:49:9c:df:a4:97:e9:74:
                    69:8c:e6:bb:93:f3:82:55:6e:9e:a8:11:d0:81:d4:
                    36:45:31:e2:de:2b:25:71:9c:16:99:13:99:2a:89:
                    e5:8c:b8:1e:49:8e:c1:bc:02:5c:a5:54:ba:6d:3f:
                    e2:15:03:66:e5:08:fb:83:7d:f4:59:23:90:22:bd:
                    b2:96:ff:6f:41:76:0a:36:9f:cb:44:a9:ca:b4:a3:
                    9f:90:f6:a6:8b:46:57:50:fc:2e:f3:67:ab:0b:c8:
                    54:6f:bc:18:5f:68:9c:95:e7:d8:e4:59:55:ee:ef:
                    75:31:b2:a5:ca:d2:cb:e1:82:51:00:d2:a3:cb:6e:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:07:2A:E7:63:6B:4E:F3:38:56:60:AA:9B:FE:A6:EC:3C:98:AC
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:11:52:a0:a1:be:e2:63:0a:54:30:24:1e:20:69:55:0a:69:
         8f:40:a8:05:11:b6:ac:1c:df:61:44:3e:08:90:ce:20:29:ac:
         79:c6:33:2c:c0:41:f8:e4:34:01:fd:2e:96:42:83:c1:dc:c7:
         35:0a:10:96:a4:dd:5c:db:18:46:55:10:4a:1c:03:85:d5:54:
         3d:f8:e5:14:8d:76:85:12:c5:1e:f2:95:21:4c:f4:1a:4a:ee:
         f1:ee:7f:61:0d:63:bc:5d:d1:7c:c0:ef:6e:79:6f:1b:f2:59:
         5d:9d:53:82:b7:70:ec:4c:6b:6a:c7:10:e4:f4:9c:99:5a:2f:
         81:f6:bf:e4:8d:f3:39:e9:63:15:13:b6:9f:ec:2e:78:0f:07:
         69:77:e1:c4:86:18:0a:58:4a:18:33:7e:48:73:0a:8f:09:af:
         14:bc:6b:01:e1:35:27:d5:8f:bf:56:42:0c:5e:d4:68:2a:b6:
         bb:9c:98:5c:0b:e2:bf:88:0e:5c:6c:b5:bb:51:cd:a2:11:c4:
         ce:c3:b5:53:c0:41:f4:b0:0c:21:26:94:1a:74:b2:3a:75:c4:
         8f:66:22:32:f7:99:f0:29:3c:7c:93:d3:1a:57:5c:56:1c:de:
         b0:72:28:a2:24:ee:78:65:7a:34:4f:94:c4:51:0a:52:df:0b:
         70:04:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:57:36 2026 by rpki-client