Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
File:                     Gm63WytHE2DtWpJcNRzEDBlBaCc.mft (raw, json)
Hash identifier:          BynqtWvVyBlHcfL5w/zwFVtSWOwiVRtEBLWmV0xeocI=
Subject key identifier:   6F:4B:FA:84:72:1F:A0:B8:8F:CF:D1:41:13:2B:A5:98:5F:50:95:44
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Certificate issuer:       /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
Manifest number:          015C
Signing time:             Tue 27 Oct 2026 05:33:22 +0000
Manifest this update:     Tue 27 Oct 2026 05:33:21 +0000
Manifest next update:     Tue 03 Nov 2026 05:33:21 +0000
Files and hashes:         1: Gm63WytHE2DtWpJcNRzEDBlBaCc.crl (hash: O20InAWc1Ig4jxB9fJH0Vh/0p8DItMvZIZg8tuWE01g=)
                          2: 6156245AD26F11EFB6D7116EC4F9AE02.roa (hash: wJAftg5ZzVLal7S6mz0iDBoMoLtgeIdIo6mgoo0U/U0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 05:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
        Validity
            Not Before: Oct 27 05:33:21 2026 GMT
            Not After : Nov  3 05:33:21 2026 GMT
        Subject: CN=6ae037a1-a540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:40:5c:3c:80:35:4a:7c:cf:79:e6:8e:50:
                    d2:03:d6:91:2b:07:a1:9f:77:84:a2:a7:39:7b:df:
                    6c:1f:b8:0f:bf:bb:fa:2e:89:7f:04:18:df:ae:7d:
                    ff:59:66:e6:c1:96:a2:83:dc:29:b9:72:a6:e3:1e:
                    a0:89:fc:4f:1f:6e:f1:f0:5e:ea:d4:af:a2:54:c8:
                    5d:af:02:53:68:57:4b:7e:a9:24:df:db:68:fa:70:
                    8c:8d:56:ca:1b:e5:b7:1b:16:e9:be:0b:13:2d:3a:
                    f4:61:39:32:7a:85:92:34:46:a7:32:1b:00:6d:1f:
                    86:ea:af:ad:51:eb:7c:fd:4c:af:77:32:c1:95:5b:
                    24:aa:5e:bd:28:88:b5:a1:4e:83:03:14:62:87:06:
                    b0:f4:47:47:de:92:03:ff:71:b6:f1:8c:d1:f3:a9:
                    aa:73:d6:61:ba:11:5f:43:51:be:a7:16:95:dd:c0:
                    85:f5:aa:4a:24:f6:31:2f:94:23:a1:77:33:7f:0a:
                    d4:3f:d9:73:34:b8:9a:05:21:06:7e:48:17:45:92:
                    25:4b:ff:ef:18:d9:c7:78:1e:c5:9d:bf:53:91:0d:
                    59:ae:53:ee:9b:a4:d8:93:f2:87:85:27:8d:4e:81:
                    4e:c0:a7:b7:72:5c:0f:9f:a3:48:18:24:17:14:a0:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4B:FA:84:72:1F:A0:B8:8F:CF:D1:41:13:2B:A5:98:5F:50:95:44
            X509v3 Authority Key Identifier:
                keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:91:1d:12:67:a5:4c:36:f3:3a:8b:b9:44:2e:f9:1c:97:9a:
         d2:b9:b0:b0:cb:d3:12:79:ad:a6:45:b1:cc:0a:33:7b:25:31:
         79:c2:4e:1c:4b:b7:97:da:74:98:f5:75:6d:d1:d0:8b:4c:90:
         1b:0a:6d:35:bd:52:e6:cc:d4:e3:c8:f8:e3:87:ea:ed:fe:ab:
         3e:af:1b:39:8f:2c:a0:09:0e:e8:2a:c8:58:2f:f1:bc:3b:a0:
         44:7a:ca:f4:0f:3f:81:53:ae:a7:7d:6b:02:92:2b:be:8e:30:
         c9:d8:ab:3a:56:93:bf:8d:14:32:bc:51:04:e2:cc:00:8a:f5:
         91:fc:55:22:68:69:77:12:09:5e:99:96:41:a1:e9:e8:49:57:
         0d:50:0f:12:da:0f:bd:b8:7e:9b:af:16:68:b6:c5:3c:9c:71:
         67:00:c4:a0:27:d0:7e:05:6e:08:86:b6:0e:15:ec:b8:69:93:
         d7:d5:b5:b2:0c:ee:cd:84:db:8d:b9:17:78:64:47:be:49:db:
         d9:79:7d:5a:4f:ef:d9:d8:c2:d8:25:19:9e:85:53:ed:ff:da:
         4c:15:46:4b:7c:b3:16:5c:0e:0c:b4:b4:2b:13:03:09:23:d8:
         ed:00:c8:78:6a:ea:77:51:da:be:b1:0f:b7:99:5a:99:49:26:
         17:1d:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:19 2026 by rpki-client