Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
File:                     GvPInPFH8v61HarolX25nThyY7g.mft (raw, json)
Hash identifier:          AWycPt8ax2ZMuq1bjNg7gTdlLpedvV0P+PIDDpDRgeU=
Subject key identifier:   ED:81:80:60:0C:6F:94:A0:37:BA:28:EC:A4:70:F5:3A:24:E5:6B:84
Authority key identifier: 1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8
Certificate issuer:       /CN=A91AD09B/serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
Manifest number:          0249
Signing time:             Mon 05 Oct 2026 02:54:39 +0000
Manifest this update:     Mon 05 Oct 2026 02:54:38 +0000
Manifest next update:     Mon 12 Oct 2026 02:54:38 +0000
Files and hashes:         1: GvPInPFH8v61HarolX25nThyY7g.crl (hash: +sdPOR/oZYfWizOO3VZQCR/r2SStyt4pCXy02dxs5S4=)
                          2: 3763B68C774C11EE81607E76C4F9AE02.roa (hash: qPsXriKEB5wC83ytPb17xjQIdxdwGbh1ecny/G9NWvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl
                          rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD09B, serialNumber=1AF3C89CF147F2FEB51DAAE8957DB99D387263B8
        Validity
            Not Before: Oct  5 02:54:38 2026 GMT
            Not After : Oct 12 02:54:38 2026 GMT
        Subject: CN=6ac3116e-561e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:29:9c:ab:19:78:93:5b:9d:29:23:97:5a:
                    c9:46:75:21:3d:59:a4:6f:3b:08:0a:de:c5:82:e9:
                    58:4c:c3:02:1d:75:67:cc:17:b1:5b:66:da:e6:9d:
                    55:1c:73:fa:95:f2:af:ab:cf:39:12:b2:f0:f8:8c:
                    3a:8d:f0:d0:ea:c6:2c:4c:e8:f0:4a:0b:5c:d4:7b:
                    72:e9:68:5b:1c:da:51:12:f1:35:8d:09:22:c4:02:
                    c9:3d:17:01:7a:c3:ab:ec:41:e6:7a:30:fc:55:7e:
                    cb:10:bb:72:13:44:1c:59:a0:7b:82:e9:d8:a7:46:
                    7e:5d:ef:64:4b:9c:53:67:92:c5:2d:40:3f:a5:ca:
                    33:59:a3:08:57:d7:98:13:72:8a:ea:84:b3:13:d4:
                    66:01:0c:5e:36:a6:63:3a:81:0d:12:ce:35:38:e2:
                    59:ee:d3:b5:47:f4:f8:24:4f:30:b3:40:c6:60:b1:
                    8f:64:e0:25:68:57:d8:cd:92:1d:d3:aa:d3:a8:cc:
                    cc:df:db:13:6e:fe:b9:d3:6a:bf:86:0c:79:a9:e1:
                    98:f3:59:00:78:92:aa:ab:02:6e:9f:e0:a2:e9:26:
                    69:5e:53:1f:0f:e2:24:c2:0a:15:9a:92:1a:85:61:
                    d3:0e:bc:90:64:06:d4:9e:30:a2:4c:0f:91:22:94:
                    83:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:80:60:0C:6F:94:A0:37:BA:28:EC:A4:70:F5:3A:24:E5:6B:84
            X509v3 Authority Key Identifier:
                keyid:1A:F3:C8:9C:F1:47:F2:FE:B5:1D:AA:E8:95:7D:B9:9D:38:72:63:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GvPInPFH8v61HarolX25nThyY7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD09B/1E2FBED45C6411EEA59A821EC4F9AE02/GvPInPFH8v61HarolX25nThyY7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c3:c9:fa:29:2c:ea:53:e6:f4:7b:62:08:b5:d1:9f:8b:9a:
         42:ce:74:9d:c5:fe:a1:44:11:f2:f7:a2:cc:95:99:21:35:f1:
         8b:f7:9d:28:2b:aa:01:d7:db:e0:c9:1b:f7:95:2a:39:c5:02:
         27:cd:9b:df:a6:d6:3a:b9:69:ce:c7:28:63:a6:d4:18:cc:5c:
         0a:e9:3d:84:77:36:fc:d9:c8:61:61:46:8f:e6:39:18:2e:56:
         b6:33:3d:b8:8b:05:b2:e7:a5:43:57:d5:d1:d5:d9:dd:19:11:
         76:f5:7e:59:9c:d4:9b:f5:8a:4f:66:82:e8:dd:ec:41:b1:72:
         0b:5c:19:80:7e:40:ce:87:23:33:93:14:5c:89:9a:f9:cd:a4:
         dc:09:02:93:05:d1:31:38:2c:cc:b6:53:9c:79:63:1c:12:30:
         92:34:1d:dd:54:95:8f:38:4a:22:42:b8:f6:68:0a:32:a7:2c:
         13:5b:7e:08:1c:37:f6:e7:6c:fa:f1:4a:08:7c:ea:79:34:9c:
         94:62:11:31:57:38:d1:3e:11:e0:84:b9:57:51:5b:63:4b:9a:
         49:1d:64:5f:f1:f8:11:0b:09:ad:09:bd:5c:0f:30:8b:f2:f9:
         2a:c1:31:dd:cc:bc:d3:02:b9:d9:10:aa:3d:b1:85:79:e5:09:
         12:61:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:30:35 2026 by rpki-client