Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AE0/E53568B299D811F1888C6B094011F970/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.mft
File:                     GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.mft (raw, json)
Hash identifier:          KUi2g4zZ03f4Ub2FWfZbrAW+4aIYiBLb+quHfz/kPmI=
Subject key identifier:   EF:FD:49:5A:DA:75:F4:D9:73:E6:2C:60:E2:EF:F1:2E:7B:A4:EB:11
Authority key identifier: 1A:D8:DC:14:5B:03:8D:06:2F:2B:5A:04:27:EC:D2:11:80:78:62:0C
Certificate issuer:       /CN=A91C5AE0/serialNumber=1AD8DC145B038D062F2B5A0427ECD2118078620C
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5AE0/E53568B299D811F1888C6B094011F970/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.mft
Manifest number:          04
Signing time:             Wed 19 Aug 2026 09:59:45 +0000
Manifest this update:     Wed 19 Aug 2026 09:59:45 +0000
Manifest next update:     Wed 26 Aug 2026 09:59:45 +0000
Files and hashes:         1: GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.crl (hash: +UqJQybwbtkOUflYrTORP9qdrX7MOP+dNjIQ1xzgGm8=)
                          2: 3EEB12429ABC11F1AAF97CF94511F970.roa (hash: 0HBOeoodFgvVVBbcjzNhfn3Dso7KeXvywrI1llTwxp0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5AE0/E53568B299D811F1888C6B094011F970/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.crl
                          rsync://rpki.apnic.net/member_repository/A91C5AE0/E53568B299D811F1888C6B094011F970/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5AE0, serialNumber=1AD8DC145B038D062F2B5A0427ECD2118078620C
        Validity
            Not Before: Aug 19 09:59:45 2026 GMT
            Not After : Aug 26 09:59:45 2026 GMT
        Subject: CN=6a857e91-76c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:ab:80:8d:83:8c:ab:04:cd:68:2a:25:fc:
                    fc:ec:e6:46:78:68:11:cd:26:1c:93:75:87:d7:e6:
                    67:f2:9b:fa:06:ce:22:5e:4e:cc:47:0e:ea:8e:55:
                    a9:44:ce:c2:31:e8:f6:48:0e:e3:2f:20:59:77:50:
                    1a:27:f7:b0:e8:fe:76:ce:b5:83:bf:a8:99:a7:0c:
                    91:85:05:fb:40:c4:54:c2:12:8e:82:59:69:5e:28:
                    69:ac:0e:e0:79:03:b3:bf:dc:f3:03:6c:a2:09:b5:
                    5d:c4:ed:65:33:c8:74:75:c6:e3:6f:06:c9:42:22:
                    4b:e8:9e:8f:ca:b0:8a:9e:59:39:81:b3:f2:d7:83:
                    13:00:2c:3a:0b:db:f0:e9:a8:76:a3:49:f9:dc:b5:
                    c5:a4:a8:69:8f:44:95:ef:5d:b2:f7:94:67:e3:93:
                    2b:bf:97:70:48:3a:1f:0f:2f:b4:5a:e0:2a:a1:25:
                    48:c5:d5:e6:97:ae:be:87:29:e2:fe:08:65:31:4c:
                    b6:bb:f9:97:66:a2:b4:89:75:1c:ca:2e:e2:d9:99:
                    cd:55:ff:d4:42:bb:aa:b5:ef:17:54:0f:9d:d5:41:
                    c0:98:82:0f:93:63:50:c3:16:e7:08:b9:a1:2a:0a:
                    a7:9a:d3:ee:4e:32:74:e2:d1:b5:6d:1d:54:10:71:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:49:5A:DA:75:F4:D9:73:E6:2C:60:E2:EF:F1:2E:7B:A4:EB:11
            X509v3 Authority Key Identifier:
                keyid:1A:D8:DC:14:5B:03:8D:06:2F:2B:5A:04:27:EC:D2:11:80:78:62:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5AE0/E53568B299D811F1888C6B094011F970/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AE0/E53568B299D811F1888C6B094011F970/GtjcFFsDjQYvK1oEJ-zSEYB4Ygw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:df:23:4b:eb:09:12:0f:0e:8d:d1:f1:02:f8:e4:2d:3b:
         e6:d3:9f:cf:9f:a5:c7:9e:4f:e1:fc:65:37:0f:2e:41:7e:72:
         2a:b8:6f:d1:1e:ff:cc:84:a6:9a:2f:ac:96:b4:64:83:07:9f:
         22:c1:4e:ed:72:6e:f0:23:0d:fc:df:77:3f:2a:65:c0:13:08:
         46:84:45:06:d3:39:dd:3c:e5:19:32:fb:f1:cd:5d:b4:be:86:
         16:70:ac:73:5c:63:f4:83:de:38:f6:c7:ac:a5:9c:2e:bf:10:
         4c:05:26:95:52:e9:22:95:84:fa:e1:a9:97:ff:3b:b2:d3:a3:
         ef:97:9e:7b:47:fb:69:6e:ec:e5:65:10:b9:d2:95:cd:ae:3a:
         b9:4c:7f:73:9d:83:bd:26:8d:b4:1f:fa:fd:26:5f:6b:71:6f:
         85:d9:c7:68:83:90:59:9d:d3:56:55:19:08:00:64:1d:32:b9:
         ea:14:93:cc:f0:8e:db:53:d5:2b:b4:a4:bf:71:8b:f6:43:37:
         07:af:8c:e2:24:4f:8f:60:27:a1:44:fe:a7:aa:b7:c8:d0:e0:
         25:a9:6a:0d:8b:9d:73:5e:f8:4d:2e:d6:44:b2:ff:34:78:62:
         ae:95:4a:e4:2a:28:2b:9c:3b:e9:ce:23:2c:62:05:1c:82:5c:
         a5:52:51:7e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NUFFMDExMC8GA1UEBRMoMUFEOERDMTQ1QjAzOEQwNjJGMkI1QTA0MjdFQ0QyMTE4
MDc4NjIwQzAeFw0yNjA4MTkwOTU5NDVaFw0yNjA4MjYwOTU5NDVaMBgxFjAUBgNV
BAMTDTZhODU3ZTkxLTc2YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwL6uAjYOMqwTNaCol/Pzs5kZ4aBHNJhyTdYfX5mfym/oGziJeTsxHDuqOValE
zsIx6PZIDuMvIFl3UBon97Do/nbOtYO/qJmnDJGFBftAxFTCEo6CWWleKGmsDuB5
A7O/3PMDbKIJtV3E7WUzyHR1xuNvBslCIkvono/KsIqeWTmBs/LXgxMALDoL2/Dp
qHajSfnctcWkqGmPRJXvXbL3lGfjkyu/l3BIOh8PL7Ra4CqhJUjF1eaXrr6HKeL+
CGUxTLa7+ZdmorSJdRzKLuLZmc1V/9RCu6q17xdUD53VQcCYgg+TY1DDFucIuaEq
Cqea0+5OMnTi0bVtHVQQcc3zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU7/1JWtp1
9Nlz5ixg4u/xLnuk6xEwHwYDVR0jBBgwFoAUGtjcFFsDjQYvK1oEJ+zSEYB4Ygww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1QUUwL0U1MzU2OEIyOTlE
ODExRjE4ODhDNkIwOTQwMTFGOTcwL0d0amNGRnNEalFZdksxb0VKLXpTRVlCNFln
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR3RqY0ZGc0RqUVl2SzFvRUotelNFWUI0WWd3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1
QUUwL0U1MzU2OEIyOTlEODExRjE4ODhDNkIwOTQwMTFGOTcwL0d0amNGRnNEalFZ
dksxb0VKLXpTRVlCNFlndy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAnb98jS+sJEg8OjdHxAvjkLTvm05/Pn6XHnk/h/GU3Dy5BfnIquG/RHv/MhKaa
L6yWtGSDB58iwU7tcm7wIw3833c/KmXAEwhGhEUG0zndPOUZMvvxzV20voYWcKxz
XGP0g9449sespZwuvxBMBSaVUukilYT64amX/zuy06Pvl557R/tpbuzlZRC50pXN
rjq5TH9znYO9Jo20H/r9Jl9rcW+F2cdog5BZndNWVRkIAGQdMrnqFJPM8I7bU9Ur
tKS/cYv2QzcHr4ziJE+PYCehRP6nqrfI0OAlqWoNi51zXvhNLtZEsv80eGKulUrk
KigrnDvpziMsYgUcglylUlF+
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:53 2026 by rpki-client