Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
File:                     GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft (raw, json)
Hash identifier:          HRTXksfqfT5k39bxLcICmN5ilQE+3w85RqTvZzoOfSU=
Subject key identifier:   C3:8E:F3:00:58:3D:3A:F6:9D:72:A5:34:86:58:35:1C:FE:3E:75:04
Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8
Certificate issuer:       /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
Certificate serial:       035C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
Manifest number:          0354
Signing time:             Wed 19 Aug 2026 01:19:26 +0000
Manifest this update:     Wed 19 Aug 2026 01:19:26 +0000
Manifest next update:     Wed 26 Aug 2026 01:19:26 +0000
Files and hashes:         1: GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl (hash: E5grVXyHbOgEv2fAW3DRcrRlNe/+wUVcfoLwlxlboM4=)
                          2: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (hash: A1R3Y4X7LUU1B6vjhdMdznAPyuhYgB7EU9CPG7tpvR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl
                          rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8
        Validity
            Not Before: Aug 19 01:19:26 2026 GMT
            Not After : Aug 26 01:19:26 2026 GMT
        Subject: CN=6a85049e-a826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:41:e4:b0:f5:c1:66:9c:b7:c9:ab:fb:04:
                    60:37:45:a7:a3:9e:ca:5e:31:22:ac:2e:24:cd:e7:
                    cb:f5:06:9e:5f:63:45:c7:be:12:5d:55:9e:45:cc:
                    73:c1:67:67:d9:44:79:c5:91:1e:b2:88:60:1e:7b:
                    8d:87:b1:9f:ed:5c:99:71:52:c7:35:f7:43:57:d3:
                    9a:f1:07:00:90:38:0d:f9:82:7e:37:b0:07:ac:65:
                    2d:eb:33:b7:f9:f4:8f:d8:a4:d1:97:6a:d0:a0:27:
                    f6:af:5d:a7:69:53:94:49:60:ac:9c:97:b3:51:a6:
                    12:1b:00:2a:2f:03:f7:9c:62:de:d9:7a:58:b1:fc:
                    6a:4f:a3:96:73:30:bd:eb:80:de:38:be:c5:48:cc:
                    45:e8:c2:8d:14:72:aa:44:62:de:fa:00:86:fc:62:
                    a2:76:54:47:32:1e:17:93:a0:c6:d8:13:d5:82:af:
                    5f:c7:88:08:6a:4c:60:a9:37:18:aa:03:50:05:85:
                    20:9e:85:48:62:ca:fe:40:b7:05:5d:f9:b6:e8:2b:
                    40:66:d3:4d:b5:08:66:9c:a5:c0:b3:71:69:eb:0b:
                    cf:bd:4c:97:91:e1:31:da:5c:58:93:ab:16:42:fe:
                    37:1c:bd:b4:39:2c:6d:0c:e7:09:dc:be:cf:ed:08:
                    a2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:F3:00:58:3D:3A:F6:9D:72:A5:34:86:58:35:1C:FE:3E:75:04
            X509v3 Authority Key Identifier:
                keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:96:59:4f:d8:3f:20:11:43:f9:92:68:cf:75:09:b9:df:
         18:9e:7e:3e:76:7e:bc:3b:43:f5:57:51:9a:9d:b8:66:7c:f8:
         39:97:45:48:4b:ca:6f:f2:0d:f8:f9:66:f6:da:bc:5b:e1:6a:
         a8:78:94:65:c0:7f:a1:da:55:5d:4a:84:5a:2b:fe:a6:25:fc:
         52:70:66:b8:b7:8a:2c:1c:aa:ee:12:8c:80:4d:83:e1:41:cf:
         1b:fc:d8:9d:ab:d6:8f:59:10:1f:21:69:60:f6:62:49:ed:cb:
         ed:ef:0b:14:c8:0f:b6:c8:ea:5f:69:18:84:81:ec:2b:3d:92:
         9e:18:71:fd:7a:95:ca:db:8d:07:e7:73:82:81:12:7c:8a:2e:
         3a:b6:b2:14:03:f2:b2:dc:1d:bd:1b:45:00:32:c9:fa:1d:a2:
         c7:fa:93:af:9e:d5:dd:d7:a7:8c:f7:35:59:00:b1:2a:1d:2a:
         53:9f:fd:b6:d0:d1:af:5c:53:53:00:d7:6b:c8:f3:ef:6d:4e:
         00:3f:b0:67:5d:99:94:fd:20:46:48:3b:48:ff:c2:ca:49:50:
         9c:58:f5:ae:5f:7c:0d:91:45:90:e6:05:12:87:16:eb:25:08:
         e8:2d:6a:d7:2b:2e:9e:e8:de:e1:06:eb:08:86:d9:b6:30:b5:
         f9:2a:0e:02
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2
MjMwMDU5RTgwHhcNMjYwODE5MDExOTI2WhcNMjYwODI2MDExOTI2WjAYMRYwFAYD
VQQDEw02YTg1MDQ5ZS1hODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmpB5LD1wWact8mr+wRgN0Wno57KXjEirC4kzefL9QaeX2NFx74SXVWeRcxz
wWdn2UR5xZEesohgHnuNh7Gf7VyZcVLHNfdDV9Oa8QcAkDgN+YJ+N7AHrGUt6zO3
+fSP2KTRl2rQoCf2r12naVOUSWCsnJezUaYSGwAqLwP3nGLe2XpYsfxqT6OWczC9
64DeOL7FSMxF6MKNFHKqRGLe+gCG/GKidlRHMh4Xk6DG2BPVgq9fx4gIakxgqTcY
qgNQBYUgnoVIYsr+QLcFXfm26CtAZtNNtQhmnKXAs3Fp6wvPvUyXkeEx2lxYk6sW
Qv43HL20OSxtDOcJ3L7P7QiiUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOO8wBY
PTr2nXKlNIZYNRz+PnUEMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy
N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX
ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTY5Qy85RUIwNzk5ODEyN0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9L
T20xSXp3UWp4YlJpTUFXZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhr+WWU/YPyARQ/mSaM91CbnfGJ5+PnZ+vDtD9VdRmp24Znz4OZdFSEvKb/IN
+Plm9tq8W+FqqHiUZcB/odpVXUqEWiv+piX8UnBmuLeKLByq7hKMgE2D4UHPG/zY
navWj1kQHyFpYPZiSe3L7e8LFMgPtsjqX2kYhIHsKz2Snhhx/XqVytuNB+dzgoES
fIouOrayFAPystwdvRtFADLJ+h2ix/qTr57V3denjPc1WQCxKh0qU5/9ttDRr1xT
UwDXa8jz721OAD+wZ12ZlP0gRkg7SP/CyklQnFj1rl98DZFFkOYFEocW6yUI6C1q
1ysunuje4QbrCIbZtjC1+SoOAg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:31:24 2026 by rpki-client