Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File:                     GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier:          Y5q2Z088iQDTZ0PBvG2xZKgGheuDewQ70GepeiJ08c0=
Subject key identifier:   F2:BE:F3:F5:B7:DB:B3:20:EF:69:19:6C:10:95:4F:F2:9B:21:0F:7D
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       0531
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number:          052A
Signing time:             Tue 18 Aug 2026 23:55:01 +0000
Manifest this update:     Tue 18 Aug 2026 23:55:00 +0000
Manifest next update:     Tue 25 Aug 2026 23:55:00 +0000
Files and hashes:         1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: M1KHgJ2R+tY0ZZm6xMZPmNIy8oOa0rDNQjjcSw9vess=)
                          2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: P0IxtyxoZ+ByuxHLmgujAknhA1FCwYut3K8P07BZLQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Aug 18 23:55:00 2026 GMT
            Not After : Aug 25 23:55:00 2026 GMT
        Subject: CN=6a84f0d4-b315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:f3:c0:d2:e2:d6:c7:84:65:ef:c3:ad:33:
                    0f:cf:78:78:c4:6f:ed:02:1d:18:b2:52:ba:3c:74:
                    da:8d:ff:0c:5d:11:a1:4c:17:b7:03:7c:a7:61:d9:
                    18:08:3e:15:9d:7d:b9:be:b4:0c:ee:78:d5:f0:01:
                    f7:24:1c:a8:93:7d:9c:1a:e1:1a:f6:7e:52:c6:00:
                    46:67:93:38:0c:db:69:35:b4:5c:cc:2a:f1:b9:c1:
                    c1:9b:ac:a1:10:83:7c:f2:26:52:e3:4b:79:13:63:
                    c3:19:7d:37:34:63:4c:68:a0:d0:28:76:27:51:db:
                    8a:47:b4:b1:9a:37:b9:9b:49:0b:f8:72:a2:cc:f3:
                    f9:c2:7e:d5:db:4a:b1:54:40:35:3e:8c:03:32:9a:
                    6e:46:96:0e:ab:fb:06:71:f0:3e:56:ce:59:b0:4b:
                    82:15:77:57:9a:79:e7:24:f5:fd:c7:21:26:db:15:
                    a8:7b:39:9f:84:30:3b:4b:eb:ef:d0:d4:6e:80:b7:
                    56:74:d0:b4:5c:13:71:25:6b:8d:52:3a:8c:f5:3c:
                    53:7e:1c:46:1e:c6:eb:f2:40:fb:ef:bd:a2:ae:9a:
                    2c:f6:57:8c:35:c3:09:06:9f:25:9f:8e:12:ad:2c:
                    3c:1f:55:1d:71:0f:a7:23:7b:09:cd:84:6e:64:59:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BE:F3:F5:B7:DB:B3:20:EF:69:19:6C:10:95:4F:F2:9B:21:0F:7D
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:a1:f6:88:c5:fb:ee:9b:43:4b:d2:3a:fa:fe:06:38:16:
         30:2e:f4:fd:f8:1d:dd:e9:60:73:94:dd:06:0e:05:1f:f2:e3:
         0a:62:99:70:8e:67:2b:c0:61:79:64:8a:3a:55:22:d6:17:54:
         db:65:17:b7:95:3e:3d:1b:33:ac:04:7f:6b:a1:6d:ad:de:32:
         fc:45:2d:fe:08:bc:38:db:e2:d8:7e:a1:37:16:ce:e2:12:2d:
         13:ee:04:a0:fe:45:ad:78:03:70:48:96:48:19:a9:96:14:b7:
         7c:00:b3:a0:ff:c7:0b:45:53:47:c4:b9:e0:39:ae:3f:07:1d:
         3e:8f:75:e5:d9:05:db:da:cd:ab:13:4c:74:00:3b:92:ed:e6:
         00:86:ec:b5:43:2c:08:e8:14:de:6e:37:d6:11:e9:4a:3b:3a:
         a5:47:bf:80:88:75:49:67:5a:af:3e:a0:d5:17:ed:08:10:72:
         48:47:bf:c0:78:c5:3d:e8:fa:48:54:6f:20:f3:84:41:6f:83:
         96:a1:12:99:db:7a:03:a5:15:13:e8:45:bd:02:86:26:33:2f:
         89:00:bb:5f:b2:e1:82:01:e5:0c:7e:e8:fd:24:be:41:fc:91:
         e5:7c:db:c6:66:92:a1:4a:af:db:9b:f6:10:58:53:f4:64:b7:
         58:5a:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:51 2026 by rpki-client