Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CF4E9/9EEE6274A70111F18092EC0C5911F970/gyxQyzneD4w-VRaVPJxvIBU3mpY.mft
File:                     gyxQyzneD4w-VRaVPJxvIBU3mpY.mft (raw, json)
Hash identifier:          AIpOHeOyJoLlY7RueBFmjBgKCZRq8kWjiIlhuFwNdzQ=
Subject key identifier:   43:A9:C4:FE:7A:E5:A3:3F:D4:2A:ED:09:2C:78:6C:01:6D:A7:FC:36
Authority key identifier: 83:2C:50:CB:39:DE:0F:8C:3E:55:16:95:3C:9C:6F:20:15:37:9A:96
Certificate issuer:       /CN=A91CF4E9/serialNumber=832C50CB39DE0F8C3E5516953C9C6F2015379A96
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyxQyzneD4w-VRaVPJxvIBU3mpY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF4E9/9EEE6274A70111F18092EC0C5911F970/gyxQyzneD4w-VRaVPJxvIBU3mpY.mft
Manifest number:          11
Signing time:             Sat 03 Oct 2026 09:50:22 +0000
Manifest this update:     Sat 03 Oct 2026 09:50:21 +0000
Manifest next update:     Sat 10 Oct 2026 09:50:21 +0000
Files and hashes:         1: gyxQyzneD4w-VRaVPJxvIBU3mpY.crl (hash: w37ZXYrrxv7zYMZ4Ol+pTgdgyr+AgEjNRv4LPadQEX0=)
                          2: 727E3E2AA70211F1B6D2ECD35911F970.roa (hash: i3LMFuVo65p4u5OaSuctyGgxU8fcRy6aaio7oYWx87I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF4E9/9EEE6274A70111F18092EC0C5911F970/gyxQyzneD4w-VRaVPJxvIBU3mpY.crl
                          rsync://rpki.apnic.net/member_repository/A91CF4E9/9EEE6274A70111F18092EC0C5911F970/gyxQyzneD4w-VRaVPJxvIBU3mpY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyxQyzneD4w-VRaVPJxvIBU3mpY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF4E9, serialNumber=832C50CB39DE0F8C3E5516953C9C6F2015379A96
        Validity
            Not Before: Oct  3 09:50:21 2026 GMT
            Not After : Oct 10 09:50:21 2026 GMT
        Subject: CN=6ac0cfde-b4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:4f:a5:17:7b:90:1f:76:ad:bc:0a:8f:d9:
                    e0:8a:a4:18:e7:f6:7d:02:73:57:92:f3:b7:01:c5:
                    2e:2d:f7:c0:9d:f7:e1:3b:12:ac:80:3a:ee:27:ec:
                    ff:4f:8e:45:f4:4a:dd:8c:c9:cc:63:81:f8:e3:9a:
                    c5:a7:e7:ea:42:ca:b6:cc:66:1f:03:b4:ce:1b:ce:
                    63:78:45:4d:49:78:3b:6d:c5:df:cf:59:71:34:25:
                    a6:18:fd:8b:5b:bc:cc:b7:68:a1:26:19:cf:66:89:
                    65:c2:bf:70:1a:8b:47:83:1e:6b:03:dd:4b:9c:15:
                    1a:f4:c5:01:00:40:71:ef:66:a4:4e:64:e3:aa:47:
                    a9:e7:57:6d:7e:79:56:6a:46:aa:bb:90:74:30:7a:
                    74:41:21:8e:21:20:14:60:c5:7c:f7:b4:44:25:dd:
                    f7:10:b8:66:2d:fe:d4:59:67:16:f8:61:d4:74:0f:
                    97:ac:69:2c:26:3d:5a:e9:ff:c1:24:34:dd:f6:e2:
                    d8:ce:f4:e8:fb:bb:89:44:ec:9e:84:f8:58:1a:c4:
                    2f:35:98:ca:a4:9e:8f:c6:b2:a5:45:15:c4:13:ef:
                    fd:63:aa:e6:ab:23:12:66:29:29:b8:27:f9:4b:d2:
                    5f:77:ed:aa:55:e5:91:0c:e6:01:a8:cb:dc:6f:fc:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:C4:FE:7A:E5:A3:3F:D4:2A:ED:09:2C:78:6C:01:6D:A7:FC:36
            X509v3 Authority Key Identifier:
                keyid:83:2C:50:CB:39:DE:0F:8C:3E:55:16:95:3C:9C:6F:20:15:37:9A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF4E9/9EEE6274A70111F18092EC0C5911F970/gyxQyzneD4w-VRaVPJxvIBU3mpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyxQyzneD4w-VRaVPJxvIBU3mpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF4E9/9EEE6274A70111F18092EC0C5911F970/gyxQyzneD4w-VRaVPJxvIBU3mpY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:ff:39:8c:09:ca:d0:d6:c6:fb:61:9e:69:cb:cd:f5:14:
         7c:23:fd:9f:7b:d3:ec:5f:a4:ec:c4:ca:17:61:53:f3:5a:79:
         de:63:be:ba:1d:8d:3b:e3:56:59:d3:94:af:51:d4:5b:07:69:
         3d:5f:da:96:2e:9e:97:ee:fa:71:5a:b3:15:06:cb:c1:04:54:
         7a:a6:ef:12:8d:5b:97:88:4f:a9:3e:c8:cf:6f:f2:b8:31:b4:
         31:0b:d0:07:e8:d9:7b:2d:8a:de:29:10:5e:59:41:50:d1:29:
         6f:3b:94:18:a4:c6:52:12:e7:15:ce:56:4f:b6:0b:6e:e4:05:
         fc:ae:55:13:5e:5b:32:1a:9a:cc:0b:0f:79:24:ca:47:4f:16:
         19:4b:62:e4:7a:59:e3:71:2b:3b:27:ac:9e:03:c8:a1:de:06:
         30:be:cf:4f:06:bd:40:ea:35:f3:e0:9a:0a:15:c1:b4:98:ee:
         c1:f9:40:22:c4:ce:3b:de:6d:f9:86:e6:5b:8a:49:fa:38:11:
         c5:15:55:b2:0c:b7:f2:53:74:9c:e7:5d:6f:de:f3:de:6a:a4:
         73:85:48:59:ef:20:67:d6:e9:cb:88:18:b7:16:fd:e1:13:25:
         7e:c3:4e:71:91:9b:73:18:1f:ae:2e:cd:66:1b:a6:3a:3c:55:
         a5:19:b7:aa
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RjRFOTExMC8GA1UEBRMoODMyQzUwQ0IzOURFMEY4QzNFNTUxNjk1M0M5QzZGMjAx
NTM3OUE5NjAeFw0yNjEwMDMwOTUwMjFaFw0yNjEwMTAwOTUwMjFaMBgxFjAUBgNV
BAMTDTZhYzBjZmRlLWI0ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4SE+lF3uQH3atvAqP2eCKpBjn9n0Cc1eS87cBxS4t98Cd9+E7EqyAOu4n7P9P
jkX0St2MycxjgfjjmsWn5+pCyrbMZh8DtM4bzmN4RU1JeDttxd/PWXE0JaYY/Ytb
vMy3aKEmGc9miWXCv3Aai0eDHmsD3UucFRr0xQEAQHHvZqROZOOqR6nnV21+eVZq
Rqq7kHQwenRBIY4hIBRgxXz3tEQl3fcQuGYt/tRZZxb4YdR0D5esaSwmPVrp/8Ek
NN324tjO9Oj7u4lE7J6E+FgaxC81mMqkno/GsqVFFcQT7/1jquarIxJmKSm4J/lL
0l937apV5ZEM5gGoy9xv/PHpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQ6nE/nrl
oz/UKu0JLHhsAW2n/DYwHwYDVR0jBBgwFoAUgyxQyzneD4w+VRaVPJxvIBU3mpYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGNEU5LzlFRUU2Mjc0QTcw
MTExRjE4MDkyRUMwQzU5MTFGOTcwL2d5eFF5em5lRDR3LVZSYVZQSnh2SUJVM21w
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZ3l4UXl6bmVENHctVlJhVlBKeHZJQlUzbXBZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG
NEU5LzlFRUU2Mjc0QTcwMTExRjE4MDkyRUMwQzU5MTFGOTcwL2d5eFF5em5lRDR3
LVZSYVZQSnh2SUJVM21wWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB5Xf85jAnK0NbG+2GeacvN9RR8I/2fe9PsX6TsxMoXYVPzWnneY766HY0741ZZ
05SvUdRbB2k9X9qWLp6X7vpxWrMVBsvBBFR6pu8SjVuXiE+pPsjPb/K4MbQxC9AH
6Nl7LYreKRBeWUFQ0SlvO5QYpMZSEucVzlZPtgtu5AX8rlUTXlsyGprMCw95JMpH
TxYZS2LkelnjcSs7J6yeA8ih3gYwvs9PBr1A6jXz4JoKFcG0mO7B+UAixM473m35
huZbikn6OBHFFVWyDLfyU3Sc511v3vPeaqRzhUhZ7yBn1unLiBi3Fv3hEyV+w05x
kZtzGB+uLs1mG6Y6PFWlGbeq
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:23:37 2026 by rpki-client