Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File:                     Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier:          FJcM/xrlcJEa4TstAHdmCeMAeMTOx1bLQbvvCi2ukxQ=
Subject key identifier:   18:92:9C:C8:DC:FF:23:10:53:91:8A:C5:0C:3D:54:09:4D:40:74:C5
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       1A3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number:          1A27
Signing time:             Thu 22 Oct 2026 16:22:35 +0000
Manifest this update:     Thu 22 Oct 2026 16:22:34 +0000
Manifest next update:     Thu 29 Oct 2026 16:22:34 +0000
Files and hashes:         1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: UpNqpsOf/O7icbdueZKQOEYr9S3+BIk91bQd7seE5wM=)
                          2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: ZQpN4eFzD7d15/pql3WL2/ZjZDYkswUqki4AmBgOAPo=)
                          3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: 7rH2iv1QGdm3csS4MeZCYlgwaz57wBm4i8OcDaisDdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
                          rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 16:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6718 (0x1a3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
        Validity
            Not Before: Oct 22 16:22:34 2026 GMT
            Not After : Oct 29 16:22:34 2026 GMT
        Subject: CN=6ada384b-1ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:69:d8:b9:2b:6e:30:1f:11:fb:40:f4:7f:e8:
                    18:fd:fc:3e:a8:1a:f8:dc:aa:c9:c1:c2:e4:58:61:
                    27:35:a8:97:c7:7d:29:e2:89:6d:21:a2:66:70:85:
                    4c:52:31:eb:b8:93:74:9c:5a:f0:4a:b5:eb:98:32:
                    1d:b2:a9:35:d0:f7:d7:ed:0d:d7:65:8c:1a:2d:36:
                    e0:da:1e:3b:0f:23:49:3a:f9:51:55:33:62:11:1c:
                    77:a6:28:27:07:cb:17:1e:dd:75:e9:32:4b:42:9b:
                    67:22:42:16:c6:70:70:bf:8f:29:83:34:2a:37:f7:
                    1b:1a:b7:6f:aa:0b:44:a5:94:a1:de:c6:e7:f5:db:
                    75:bd:3d:fc:9b:98:1d:36:61:44:ac:3a:a3:38:ec:
                    f2:47:8a:df:0d:b9:45:39:67:b7:23:2d:17:b6:31:
                    ae:b3:88:5b:a3:cc:df:1c:24:70:94:cf:e4:20:5d:
                    fe:a7:f8:a5:d3:35:7c:16:76:e8:fb:5e:b5:ea:74:
                    84:7c:98:4f:2f:dd:aa:4b:fe:c4:ed:71:cc:e3:84:
                    c7:38:85:e3:38:93:74:e4:d4:03:6a:e9:db:f0:05:
                    6a:77:e8:e4:1f:92:9f:75:8a:0c:4b:71:f3:80:05:
                    8b:2e:a1:fb:8c:39:a3:c6:5b:19:70:d2:5e:83:d5:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:9C:C8:DC:FF:23:10:53:91:8A:C5:0C:3D:54:09:4D:40:74:C5
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f9:fa:fd:a7:9e:e7:49:d8:1f:6b:91:a9:a0:7d:f5:1a:2b:
         3b:fb:d0:4b:a6:69:96:09:75:de:bd:50:2b:19:a4:a6:0f:34:
         94:c9:83:8f:8a:69:d4:9f:4f:ed:f8:75:19:70:f7:e8:6a:42:
         74:39:dc:04:ff:ac:a7:d0:d6:87:8f:07:b1:03:b0:f6:d6:22:
         03:e8:fa:c0:d3:ae:e7:f8:c1:25:06:0a:ed:09:ec:ac:e9:5a:
         c3:63:ec:25:cf:71:d7:f0:43:86:53:7f:9a:d3:02:2b:60:0c:
         19:6f:63:6a:03:8f:d8:27:ff:c1:31:ea:7e:b8:fc:ba:44:fc:
         ce:cb:51:c9:1d:cd:da:17:9f:cc:1a:a6:da:02:df:02:12:89:
         4e:f7:93:ce:76:8c:0e:30:1a:71:cc:e3:74:22:e0:ab:3c:45:
         fd:9d:8e:dd:4a:f0:9e:94:73:fb:0f:f4:13:7b:e6:9b:d7:e9:
         af:ea:d5:65:3a:36:57:c2:c4:22:bc:d1:96:e9:2d:a2:eb:e3:
         6c:c0:c5:96:58:8e:57:ab:71:5c:1f:4e:90:33:a7:63:1d:b7:
         e8:bf:ac:09:4d:0b:25:e1:1e:c8:6c:70:90:bc:21:d2:03:5c:
         02:a6:ea:79:86:c3:ba:0f:19:a1:d1:32:24:84:e8:10:76:27:
         39:57:91:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw
MDE1NUZGN0UwHhcNMjYxMDIyMTYyMjM0WhcNMjYxMDI5MTYyMjM0WjAYMRYwFAYD
VQQDEw02YWRhMzg0Yi0xZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj2nYuStuMB8R+0D0f+gY/fw+qBr43KrJwcLkWGEnNaiXx30p4oltIaJmcIVM
UjHruJN0nFrwSrXrmDIdsqk10PfX7Q3XZYwaLTbg2h47DyNJOvlRVTNiERx3pign
B8sXHt116TJLQptnIkIWxnBwv48pgzQqN/cbGrdvqgtEpZSh3sbn9dt1vT38m5gd
NmFErDqjOOzyR4rfDblFOWe3Iy0XtjGus4hbo8zfHCRwlM/kIF3+p/il0zV8Fnbo
+1616nSEfJhPL92qS/7E7XHM44THOIXjOJN05NQDaunb8AVqd+jkH5KfdYoMS3Hz
gAWLLqH7jDmjxlsZcNJeg9VQwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBiSnMjc
/yMQU5GKxQw9VAlNQHTFMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy
NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM
OTFJMjdaYUdyazhBRlZfMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQ/n6/aee50nYH2uRqaB99RorO/vQS6Zplgl13r1QKxmkpg80lMmDj4pp1J9P
7fh1GXD36GpCdDncBP+sp9DWh48HsQOw9tYiA+j6wNOu5/jBJQYK7QnsrOlaw2Ps
Jc9x1/BDhlN/mtMCK2AMGW9jagOP2Cf/wTHqfrj8ukT8zstRyR3N2hefzBqm2gLf
AhKJTveTznaMDjAacczjdCLgqzxF/Z2O3UrwnpRz+w/0E3vmm9fpr+rVZTo2V8LE
IrzRluktouvjbMDFlliOV6txXB9OkDOnYx236L+sCU0LJeEeyGxwkLwh0gNcAqbq
eYbDug8ZodEyJIToEHYnOVeR9g==
-----END CERTIFICATE-----
Generated at Sat Oct 24 06:56:58 2026 by rpki-client