Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
File:                     GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json)
Hash identifier:          K67H2AdQfmvcQm+EKh8lqPtHqMJGOhPtBEi5T79cAT8=
Subject key identifier:   A2:F4:0C:6F:BF:FC:7C:77:4C:53:27:C0:CF:20:CB:F5:27:F9:B2:54
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Certificate issuer:       /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial:       05D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
Manifest number:          05D0
Signing time:             Sun 04 Oct 2026 23:03:46 +0000
Manifest this update:     Sun 04 Oct 2026 23:03:45 +0000
Manifest next update:     Sun 11 Oct 2026 23:03:45 +0000
Files and hashes:         1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: EzPSKxfgTFeQCNLQA6M4Ik3Ik0a2G3VCWxrocLoe6to=)
                          2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: v2hZ59ja2UU2McZ0+iZGCOqhJExzjUDbBoc152csioY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
                          rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 23:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
        Validity
            Not Before: Oct  4 23:03:45 2026 GMT
            Not After : Oct 11 23:03:45 2026 GMT
        Subject: CN=6ac2db52-ec32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:30:c6:81:ad:3d:8b:68:a3:87:ae:7b:ed:
                    f0:3b:51:4d:09:62:5d:f0:c6:e6:ae:b7:25:f1:cc:
                    df:1d:eb:36:00:ba:a4:c1:12:8f:79:02:15:c9:21:
                    df:cf:0c:17:49:2d:8e:d5:93:c5:d7:8e:ea:08:7c:
                    52:fd:e9:b0:e8:e5:a0:c5:fe:2e:1f:05:92:41:cd:
                    c6:23:44:bd:20:1c:1a:41:9d:41:9c:c8:1c:a4:e6:
                    cf:10:b1:4e:03:29:02:9b:65:a8:60:5d:a8:23:0c:
                    76:13:ca:db:71:67:01:07:60:cb:bf:80:d2:65:f8:
                    63:05:6b:2a:33:37:d3:9e:c1:ab:38:75:7d:43:8d:
                    6e:a3:55:24:85:d3:08:a1:18:62:c9:44:fa:f4:76:
                    24:fc:07:10:74:03:3c:a8:47:cb:7a:74:9a:f5:8a:
                    e0:d8:e2:b7:8e:e4:f2:13:33:75:e2:0a:e3:85:5b:
                    f6:78:4f:ac:92:fa:1f:3b:fb:61:66:19:5c:8d:a8:
                    f2:af:5c:93:51:3d:83:f2:21:ad:f5:75:ad:04:f1:
                    77:da:15:b4:cc:7c:bb:b9:b1:ba:a6:ae:59:4f:e1:
                    9d:3e:78:e7:44:eb:09:b1:80:99:cb:bc:ca:7d:cb:
                    82:aa:ff:ab:33:f1:7e:a7:4e:32:15:ce:de:90:42:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F4:0C:6F:BF:FC:7C:77:4C:53:27:C0:CF:20:CB:F5:27:F9:B2:54
            X509v3 Authority Key Identifier:
                keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:b7:16:27:3f:1b:06:7e:8f:ce:37:dc:8b:44:16:d4:30:
         cc:b5:56:56:8b:fd:03:51:4f:62:e8:06:27:a4:3a:13:fa:6c:
         66:f6:3f:e7:ea:ca:0d:64:7c:72:6c:d5:00:57:58:db:45:82:
         fe:49:80:92:85:33:06:2a:06:13:0f:c2:41:bb:31:cc:e8:18:
         22:06:bb:f6:0c:42:e0:c2:27:1f:45:7f:37:1e:19:bf:f5:62:
         9f:6f:17:bb:29:b8:32:8f:60:45:de:a3:e0:af:68:1d:ba:de:
         34:a1:eb:4d:37:32:9b:a0:df:fe:23:ad:bc:4d:17:35:50:01:
         80:14:0d:bd:ab:37:90:8c:a3:f2:08:cb:85:63:eb:21:75:07:
         3e:ea:ee:16:0b:14:8c:67:63:55:99:35:6f:7f:1c:8f:be:f2:
         a6:ca:d7:d1:60:0d:69:f0:23:12:12:8b:55:d4:88:81:df:22:
         2c:e7:6e:de:ec:2d:d8:07:4e:ea:f7:9b:ad:f7:fa:29:0c:41:
         b2:c9:1a:eb:ac:cf:ce:92:97:4e:37:c5:ba:9f:66:ef:28:f0:
         80:e0:32:65:51:fa:0f:f5:eb:06:1c:a4:5c:f7:36:d6:ff:f5:
         51:32:10:5a:a5:7b:07:9d:49:3b:45:f7:74:1e:8f:f0:d6:30:
         eb:46:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:54:03 2026 by rpki-client