Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
File:                     Gv1CZeY9DL91I27ZaGrk8AFV_34.mft (raw, json)
Hash identifier:          mEQFGPm+ItURTmvKOIfkRD0CPUnb+rEYXaannla2IY4=
Subject key identifier:   A8:36:C5:43:6C:63:B8:53:3A:F2:E2:B6:BB:F6:0B:42:90:C7:BE:41
Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E
Certificate issuer:       /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
Certificate serial:       1A3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
Manifest number:          1A28
Signing time:             Sat 24 Oct 2026 16:19:23 +0000
Manifest this update:     Sat 24 Oct 2026 16:19:23 +0000
Manifest next update:     Sat 31 Oct 2026 16:19:23 +0000
Files and hashes:         1: Gv1CZeY9DL91I27ZaGrk8AFV_34.crl (hash: KzUWh+IKyR+o2a2zVKzQ051lvEaW9aSYmM6sJtbIMFo=)
                          2: FFE0F998101511EDA7D8F271C4F9AE02.roa (hash: ZQpN4eFzD7d15/pql3WL2/ZjZDYkswUqki4AmBgOAPo=)
                          3: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (hash: 7rH2iv1QGdm3csS4MeZCYlgwaz57wBm4i8OcDaisDdc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl
                          rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6719 (0x1a3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBA26, serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E
        Validity
            Not Before: Oct 24 16:19:23 2026 GMT
            Not After : Oct 31 16:19:23 2026 GMT
        Subject: CN=6adcda8b-6c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:f0:48:ee:70:12:ae:0c:6b:67:d3:b6:91:
                    7d:2f:ad:f0:81:4f:dd:7e:68:0a:a1:22:59:6f:8e:
                    4b:83:ea:86:23:b1:d0:c5:3e:0f:e8:72:5d:d9:44:
                    e7:06:82:1d:a7:8b:81:32:78:0b:9a:a5:80:1f:0d:
                    76:49:29:4b:5e:97:85:cf:7e:40:17:2e:4f:91:e5:
                    df:08:50:36:2c:98:4f:cd:c5:03:34:e9:b6:a8:38:
                    6b:51:04:20:8b:f8:45:60:18:81:12:65:7b:fa:4f:
                    46:e9:95:93:3b:77:6e:8a:01:2b:54:65:26:ea:f4:
                    23:82:3c:f4:4a:05:92:91:57:b9:b5:6e:d3:f1:11:
                    68:1f:9c:3b:2e:b1:8b:e1:90:72:1d:e1:9d:c9:55:
                    5f:75:14:2b:c4:f1:cc:68:27:a5:9b:c0:3d:92:34:
                    8e:c0:b2:b0:2b:33:35:ff:fc:7f:53:fe:71:7e:f8:
                    73:93:9f:e8:2c:1c:e9:a2:59:1b:ee:21:31:81:01:
                    67:66:0b:ac:09:d9:6f:83:c4:1f:71:46:2c:c7:59:
                    d6:61:3a:1f:e1:d1:ca:1b:50:9b:08:11:d3:50:1e:
                    8a:70:47:fb:db:cf:69:bc:85:fb:b3:db:dd:de:2e:
                    67:a8:22:da:a4:ca:36:a1:81:44:0d:69:52:b6:17:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:36:C5:43:6C:63:B8:53:3A:F2:E2:B6:BB:F6:0B:42:90:C7:BE:41
            X509v3 Authority Key Identifier:
                keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:47:a0:fa:39:8e:1e:68:1a:f4:f2:26:56:b2:0b:52:31:c8:
         3a:20:59:7e:ca:15:36:d3:e9:d1:90:6e:0b:33:e4:f5:23:20:
         7c:1e:f9:12:5b:65:d2:39:20:6a:56:e9:ed:82:ea:a8:90:16:
         2a:ab:95:e7:48:1a:87:ac:5a:3c:c8:cd:b8:96:8d:2f:9f:3d:
         a1:7e:12:c7:8d:33:88:97:3c:ce:3b:34:1b:89:c7:54:03:4f:
         2b:c8:b5:a8:d3:e0:b7:45:4a:fe:05:ed:93:7d:07:88:d3:ff:
         4d:82:79:ba:77:a0:68:71:68:a8:10:e2:55:d0:9e:5c:d3:36:
         bd:fd:3b:04:ce:6b:54:ed:41:98:57:97:cc:6e:78:96:2e:e1:
         5a:5d:76:7a:ec:cb:7d:47:2a:8e:d6:53:8b:38:1f:3a:89:29:
         72:5a:9a:e9:42:c7:c2:97:a1:dd:72:c6:c9:06:a9:28:58:9e:
         8a:83:5d:e9:8c:6a:fd:64:ac:39:cb:39:8e:a1:03:53:ae:87:
         37:2b:56:61:67:fd:ce:f3:8a:ac:62:af:60:dd:61:fc:82:c7:
         7a:92:bf:77:ea:b2:92:28:0a:c8:11:c5:14:2d:04:98:48:19:
         2e:79:da:56:8b:0b:a3:dd:cf:bb:13:0d:f5:45:0b:fb:cf:55:
         b6:63:8e:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw
MDE1NUZGN0UwHhcNMjYxMDI0MTYxOTIzWhcNMjYxMDMxMTYxOTIzWjAYMRYwFAYD
VQQDEw02YWRjZGE4Yi02YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5zwSO5wEq4Ma2fTtpF9L63wgU/dfmgKoSJZb45Lg+qGI7HQxT4P6HJd2UTn
BoIdp4uBMngLmqWAHw12SSlLXpeFz35AFy5PkeXfCFA2LJhPzcUDNOm2qDhrUQQg
i/hFYBiBEmV7+k9G6ZWTO3duigErVGUm6vQjgjz0SgWSkVe5tW7T8RFoH5w7LrGL
4ZByHeGdyVVfdRQrxPHMaCelm8A9kjSOwLKwKzM1//x/U/5xfvhzk5/oLBzpolkb
7iExgQFnZgusCdlvg8QfcUYsx1nWYTof4dHKG1CbCBHTUB6KcEf7289pvIX7s9vd
3i5nqCLapMo2oYFEDWlSthecPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg2xUNs
Y7hTOvLitrv2C0KQx75BMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy
NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf
MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkEyNi9DQTY0Q0JGQTgyNUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURM
OTFJMjdaYUdyazhBRlZfMzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAckeg+jmOHmga9PImVrILUjHIOiBZfsoVNtPp0ZBuCzPk9SMgfB75Eltl0jkg
albp7YLqqJAWKquV50gah6xaPMjNuJaNL589oX4Sx40ziJc8zjs0G4nHVANPK8i1
qNPgt0VK/gXtk30HiNP/TYJ5unegaHFoqBDiVdCeXNM2vf07BM5rVO1BmFeXzG54
li7hWl12euzLfUcqjtZTizgfOokpclqa6ULHwpeh3XLGyQapKFieioNd6Yxq/WSs
Ocs5jqEDU66HNytWYWf9zvOKrGKvYN1h/ILHepK/d+qykigKyBHFFC0EmEgZLnna
VosLo93PuxMN9UUL+89VtmOOLA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:51:57 2026 by rpki-client