Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          g2lkt2703XUzr3Kl81B2K6UyCvlosvHR08SO97BAT3Y=
Subject key identifier:   60:4D:0B:91:7E:B9:32:FF:EC:8F:2F:1E:2A:05:D9:F6:ED:FE:A6:DC
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          0172
Signing time:             Tue 13 Oct 2026 05:28:32 +0000
Manifest this update:     Tue 13 Oct 2026 05:28:31 +0000
Manifest next update:     Tue 20 Oct 2026 05:28:31 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: JzYEWxHW3Nuud7O9ClGcypG0x3nDfxsUdfDmyyOHOXk=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 05:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Oct 13 05:28:31 2026 GMT
            Not After : Oct 20 05:28:31 2026 GMT
        Subject: CN=6acdc180-4b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:ae:e1:ee:34:90:6e:fc:1d:9a:23:34:a2:
                    4c:90:b6:f0:4e:40:4c:ca:3a:4f:4b:d1:f7:b9:1c:
                    87:1b:52:f7:f0:8a:ce:ea:c8:0d:9f:69:2f:18:ee:
                    c5:d8:89:9d:16:e1:24:91:62:79:04:14:02:01:5b:
                    4f:f7:6f:d4:03:b3:c0:6e:66:41:9f:17:ca:0a:c5:
                    5d:d8:29:d6:de:a9:64:3c:f9:03:92:ab:40:8e:9c:
                    9d:e4:75:d9:4b:de:dd:1c:1c:c9:db:05:f0:9b:b7:
                    d5:58:d1:66:4a:9d:aa:34:de:e9:80:9a:0e:b9:bc:
                    83:5b:ae:82:f7:dd:09:30:ac:b5:e8:c0:ed:13:ad:
                    d6:d2:85:4e:66:9f:e4:aa:fe:a2:89:0f:8f:c7:4c:
                    ea:41:d6:d6:ee:26:b9:b2:6a:28:fc:e7:1f:36:f0:
                    94:7b:48:19:85:7d:75:fb:5c:cf:07:65:8f:b8:f4:
                    90:42:eb:7b:61:e4:72:9f:ee:03:73:45:b4:88:12:
                    22:73:a8:c4:d6:bc:2a:83:5b:5f:2b:22:3e:ef:fb:
                    cb:08:8b:f2:87:63:28:ab:15:33:3d:e6:1d:bd:ce:
                    80:59:00:11:12:06:c7:87:48:e5:40:42:e9:3e:bf:
                    e3:cc:4c:11:fb:e5:c8:d1:55:58:ce:aa:ca:65:70:
                    48:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:0B:91:7E:B9:32:FF:EC:8F:2F:1E:2A:05:D9:F6:ED:FE:A6:DC
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:12:f4:ee:01:67:24:08:6b:ee:7f:b3:35:e9:fe:56:dd:
         15:3c:70:8e:d4:6e:c8:70:04:72:da:02:1c:ec:da:00:29:af:
         5e:81:45:39:a6:a4:7c:e2:92:48:6f:da:31:ed:01:a3:5d:f4:
         ee:99:4e:95:d9:be:83:6e:3e:03:fa:17:16:51:6e:d2:bf:70:
         f4:00:53:f2:da:a3:c8:87:4e:1f:be:61:90:cd:76:1b:c5:b0:
         d6:ec:a5:91:78:d9:75:fa:0a:70:c9:75:bf:84:9a:5a:4b:b7:
         9d:9b:7c:c4:5c:96:ce:20:28:5b:28:8e:d7:30:17:46:42:be:
         b0:4c:4c:8c:04:26:a3:9c:fd:f6:7a:2f:4f:dc:13:fe:3a:6e:
         14:59:a8:cc:81:a4:dd:70:0a:03:4e:61:35:f3:e2:a1:a9:21:
         f1:dc:06:9b:b5:35:9e:cf:e6:cc:2f:72:2e:59:94:bc:4f:8f:
         9c:f9:28:ad:63:c2:bd:f8:64:77:0f:a5:cd:14:58:38:79:b3:
         17:88:dc:d2:c8:15:ba:a7:64:50:6f:8a:83:14:fb:ee:f1:6c:
         24:97:06:8b:75:6f:8f:f9:5e:48:b4:ed:18:9a:a5:aa:ed:0c:
         c5:d1:ff:46:8c:b6:e1:93:ec:b8:8c:62:d3:37:bd:51:96:cf:
         16:65:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:05:21 2026 by rpki-client