Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
File:                     GkAQC15dw00ay1htJzOQptUXff8.mft (raw, json)
Hash identifier:          6fEJGHzpQs6jCegOQ9suISGc5ovFoCof+y4/qwjb+ms=
Subject key identifier:   96:9F:DE:A2:A8:48:0C:81:4C:86:3C:35:ED:C9:01:D2:77:7F:1D:00
Authority key identifier: 1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF
Certificate issuer:       /CN=A9194C99/serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
Manifest number:          04B3
Signing time:             Thu 10 Sep 2026 23:47:38 +0000
Manifest this update:     Thu 10 Sep 2026 23:47:37 +0000
Manifest next update:     Thu 17 Sep 2026 23:47:37 +0000
Files and hashes:         1: GkAQC15dw00ay1htJzOQptUXff8.crl (hash: HD27xa4CuOcO3pGjyOMxNiS/zUcj/8IPlgjs3rUmeE4=)
                          2: F1F4D35A43AF11F1A5D478AA97833773.roa (hash: VI3eeJQdt+jfEigHcau2uDPGNXCcOfzwKNM66WXgDf4=)
                          3: 6DB9F0B0491911F1BE7DCD8A9C833773.roa (hash: g70kqKcQRF45XZyZmEG2xqQR/Ut/QH4FJUMA3s0GCEE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl
                          rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:47:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C99, serialNumber=1A40100B5E5DC34D1ACB586D273390A6D5177DFF
        Validity
            Not Before: Sep 10 23:47:37 2026 GMT
            Not After : Sep 17 23:47:37 2026 GMT
        Subject: CN=6aa3419a-c5c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:77:da:4e:f8:fb:ac:15:e9:91:36:69:1d:78:
                    e5:d1:b5:58:f1:a6:6c:6e:64:7f:40:33:63:75:bd:
                    92:4b:a4:ac:26:09:33:f8:7b:93:fa:e4:6c:8b:c0:
                    de:db:10:ba:bd:3c:72:e9:93:4c:31:57:3f:c2:b7:
                    f7:fd:50:6c:42:37:cf:37:45:5d:e4:2c:83:86:66:
                    1f:73:58:4b:a3:60:ea:2e:b2:5d:ea:d7:ab:39:5d:
                    b4:b7:27:5c:05:1b:16:a3:90:40:de:60:fa:8a:dc:
                    70:f8:a4:c6:1e:e8:53:75:7e:c9:62:3b:da:e9:33:
                    3d:bb:a7:b3:5f:4f:d2:ec:36:f1:aa:a7:53:01:fd:
                    a7:b9:d9:45:53:00:19:14:bc:bb:32:5c:c4:4a:49:
                    3b:69:07:bf:71:83:d0:06:cd:10:cc:56:be:81:e2:
                    cd:f7:a4:f9:8d:de:a4:08:20:62:b2:2f:2b:45:2c:
                    25:9a:8b:47:9c:3b:94:4b:0d:70:99:64:1b:d4:9c:
                    90:6d:03:0a:19:6b:cc:bd:95:10:39:8b:1a:a1:1b:
                    c9:50:3e:5a:1c:d8:51:2d:91:5c:5f:a9:b3:c7:1d:
                    69:1c:fc:db:dd:27:5d:b6:cc:33:cb:9d:e1:a7:23:
                    6c:f2:e3:42:61:8e:f7:d6:46:9d:e4:e7:ce:5e:e0:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:DE:A2:A8:48:0C:81:4C:86:3C:35:ED:C9:01:D2:77:7F:1D:00
            X509v3 Authority Key Identifier:
                keyid:1A:40:10:0B:5E:5D:C3:4D:1A:CB:58:6D:27:33:90:A6:D5:17:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkAQC15dw00ay1htJzOQptUXff8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C99/25152E5C94A411ECBBA7A552C4F9AE02/GkAQC15dw00ay1htJzOQptUXff8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:fc:bf:b5:7c:86:d6:68:55:a0:13:63:35:0e:83:fd:72:
         37:c6:bb:38:31:e8:8e:67:bd:f7:9a:d5:95:fb:f4:22:d6:12:
         da:f7:37:44:78:74:0e:60:50:ed:8d:6b:7d:09:c8:68:f7:e7:
         87:c0:62:9b:b2:23:70:1c:a1:98:01:fa:ca:0b:ef:63:b5:19:
         98:43:93:54:a4:48:59:4e:52:89:b5:4e:18:91:9f:ab:70:20:
         b9:01:55:c0:c1:d2:c3:82:c3:5a:5a:25:c1:69:c6:09:39:24:
         a3:c7:5e:e3:71:19:c0:1e:fb:bc:d5:d4:9a:b5:b5:9c:fe:85:
         cf:48:28:31:4b:67:fc:d2:64:35:9d:e9:6b:fe:7a:8b:f7:f4:
         36:cf:f9:5f:9b:55:23:e3:13:0f:cc:a3:59:d2:00:63:a9:3f:
         d7:ae:fd:b6:fc:ba:9a:a8:72:67:83:8e:0b:b6:4c:b0:76:49:
         80:5d:99:28:d6:63:76:03:57:6a:20:72:c4:ef:21:53:73:3a:
         f4:67:ef:a9:0f:b3:f7:4d:1f:54:d1:20:30:b4:15:fc:e9:37:
         64:bb:d0:35:71:ea:ef:b2:bf:93:1e:df:63:7e:da:95:a5:8e:
         57:1e:6c:63:e5:a5:ee:26:da:84:4e:5d:17:ea:65:81:d7:bd:
         89:f2:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:36:14 2026 by rpki-client