Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File:                     GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier:          3ryDH84daI9Gcc2ysRuiMyZdQlgwh93SdPFQLRmqcjM=
Subject key identifier:   D9:01:CA:01:2A:42:DC:81:C2:AF:65:E9:00:EE:9E:7D:36:85:2C:9B
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer:       /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number:          C0
Signing time:             Wed 07 Oct 2026 07:22:11 +0000
Manifest this update:     Wed 07 Oct 2026 07:22:10 +0000
Manifest next update:     Wed 14 Oct 2026 07:22:10 +0000
Files and hashes:         1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: +pNpv3Vb3wEPsOxftCrHSIAHMj0U9V70lwPQz+sYNAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 07:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
        Validity
            Not Before: Oct  7 07:22:10 2026 GMT
            Not After : Oct 14 07:22:10 2026 GMT
        Subject: CN=6ac5f323-d7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:5f:3b:fe:d9:50:b2:f2:e2:b9:d6:69:b8:
                    5b:2a:83:26:a4:8c:40:f1:ae:42:a2:3d:3b:96:98:
                    20:16:b2:0e:3b:47:61:02:12:41:43:25:dc:45:40:
                    86:32:16:fc:49:bd:8a:e3:b9:1d:28:d1:7b:37:56:
                    fc:fa:34:be:32:4f:f1:fd:92:cc:55:56:b7:d2:2c:
                    1a:20:cd:d4:66:5a:c5:ac:b7:fe:ab:e2:da:92:44:
                    ed:97:f4:75:d6:c4:df:34:7e:65:cf:df:fd:e8:21:
                    25:b1:e8:83:0c:a5:2e:ed:c5:00:cc:ad:77:73:b6:
                    21:d2:c5:4c:14:06:1a:5a:a6:f3:e8:09:d5:ce:32:
                    4e:51:82:2f:0d:f5:fc:2d:0b:08:a4:fe:9c:a5:be:
                    9a:54:c3:33:a4:a7:c3:59:b2:ad:78:71:2e:0a:c7:
                    65:1b:a5:ea:71:2f:83:e5:83:8e:32:b0:76:63:c0:
                    80:d1:b5:7d:37:85:43:99:1c:03:27:e8:71:66:8a:
                    fc:1b:48:e7:ad:5c:0d:00:38:6a:b2:1b:ac:4b:12:
                    62:18:d7:6d:91:ff:32:a7:0e:19:9d:31:a7:88:35:
                    57:be:4c:64:f9:48:9f:4b:fd:45:b8:73:60:30:b4:
                    4e:6d:93:e3:0a:03:eb:3e:34:a2:8c:7d:9d:80:04:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:01:CA:01:2A:42:DC:81:C2:AF:65:E9:00:EE:9E:7D:36:85:2C:9B
            X509v3 Authority Key Identifier:
                keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:78:e0:31:06:3b:9d:b8:2c:1d:c4:18:e3:0b:e2:3a:c1:
         f6:19:5f:99:f9:c3:e8:70:84:82:ad:c7:a3:bb:98:5e:68:38:
         87:5b:e8:f3:10:60:a3:5e:d1:d8:2f:fb:42:1b:63:dd:86:f1:
         f0:13:33:a8:07:49:f6:5d:ce:96:42:60:54:16:83:90:3a:71:
         fd:93:64:b4:9e:02:6f:56:d9:fc:3f:7b:74:66:a4:7c:f0:68:
         50:fe:63:f8:91:2e:c7:5f:82:47:74:e2:fe:73:dd:e3:5b:88:
         8f:af:24:db:4a:2f:1e:c4:f3:93:b7:77:57:9f:69:11:02:09:
         ff:9f:b0:5c:dc:43:d0:55:58:fd:51:9d:29:94:c6:10:fb:11:
         8b:be:98:3a:06:2e:21:21:0c:a6:fc:f6:a5:60:61:2b:1d:a5:
         36:b0:ce:6b:38:f3:36:18:8d:d3:bc:76:5c:43:81:e0:02:d7:
         e5:37:11:6b:02:bf:3b:fe:3b:13:49:8e:c1:20:dd:38:28:44:
         4a:97:72:d0:00:f7:63:7e:05:a9:cf:da:50:ce:67:1a:cb:9a:
         c5:20:eb:47:68:b7:e4:b9:7d:2a:96:6d:46:2b:0d:d8:cc:69:
         84:93:1c:47:2b:13:ca:58:24:f9:89:f0:a2:38:5a:4c:2b:b9:
         dd:3d:72:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:04:03 2026 by rpki-client