Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
File:                     gmtVkqw4sBK358JzDdBgfhDbgQI.mft (raw, json)
Hash identifier:          MLVNCgva/z82Yq4oTs9A1MD82gFmf12/N4P7BsUBqic=
Subject key identifier:   13:61:42:8E:17:03:33:E2:F2:66:2B:38:C2:D2:11:CC:B6:0D:19:6D
Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02
Certificate issuer:       /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
Certificate serial:       0631
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
Manifest number:          0628
Signing time:             Sun 04 Oct 2026 22:48:24 +0000
Manifest this update:     Sun 04 Oct 2026 22:48:23 +0000
Manifest next update:     Sun 11 Oct 2026 22:48:23 +0000
Files and hashes:         1: gmtVkqw4sBK358JzDdBgfhDbgQI.crl (hash: 9ymyoU8zSCDjfvm4cd/wxc8vM+c0QuI7agDb1yR0mvs=)
                          2: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (hash: DqhzTlL/TM9MCYZl1hZt1EMkx6698paItxMEmrPBJS4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl
                          rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 22:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102
        Validity
            Not Before: Oct  4 22:48:23 2026 GMT
            Not After : Oct 11 22:48:23 2026 GMT
        Subject: CN=6ac2d7b8-f617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:76:0a:f2:50:fa:6e:18:e3:b4:b8:be:c9:
                    75:98:37:50:dc:9b:d1:22:8e:16:88:41:24:ae:61:
                    33:56:51:54:ca:4a:64:ec:39:c6:14:af:dc:01:cb:
                    c0:c8:c3:e8:e8:af:44:04:93:0b:07:e3:d3:64:60:
                    b5:72:85:23:80:a2:0f:18:75:c1:59:b9:08:48:da:
                    40:72:51:9e:26:4a:8c:6d:c0:c9:5e:49:bc:ba:cc:
                    a8:5f:4a:c4:dc:a0:1c:a6:99:34:a8:b1:b2:8b:5a:
                    12:3f:db:00:29:67:69:14:c6:12:b0:b7:dd:1b:18:
                    f4:72:5c:37:1f:b7:74:c3:87:09:18:84:b7:e7:7d:
                    43:2d:ae:fd:d3:a3:8c:cd:89:82:ef:a8:3a:6b:c9:
                    3c:09:10:d8:21:80:f4:a5:f2:55:64:32:f5:73:8c:
                    4c:aa:49:1f:aa:92:ea:a1:f1:d3:46:b1:4f:bb:43:
                    0f:a8:98:8f:fc:30:b4:ac:4b:fe:37:52:0f:55:22:
                    82:c8:0a:13:04:47:e4:91:91:bf:9f:dc:b6:ff:22:
                    5e:87:63:6e:96:66:7c:08:8f:fb:46:99:0d:d7:99:
                    4f:b8:f8:1f:aa:d1:45:8a:07:83:e6:48:bd:ad:9b:
                    35:c9:d8:43:a1:42:fd:f6:ae:96:16:2d:ef:2a:20:
                    4f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:42:8E:17:03:33:E2:F2:66:2B:38:C2:D2:11:CC:B6:0D:19:6D
            X509v3 Authority Key Identifier:
                keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8b:8e:c3:e6:02:5e:15:e6:2b:7f:36:63:cb:0b:bc:ee:da:
         66:01:92:ee:f8:2a:f8:c3:e8:df:29:26:c5:14:50:f8:6e:7c:
         78:98:e3:c6:fc:e1:81:6f:50:0b:62:1a:17:6f:77:fb:e1:09:
         2e:21:cc:0c:0b:df:2d:3e:9e:7e:9a:46:97:c3:31:2a:c4:1f:
         18:26:38:62:5c:55:c8:8c:db:b3:5d:3d:e1:b6:2f:c0:cc:81:
         f1:8e:5b:5c:8b:4d:9e:ca:70:11:d7:56:ca:53:65:d2:2b:72:
         10:81:6d:86:9f:ba:4f:9f:8c:f6:b8:69:5e:e2:3b:41:e6:35:
         42:81:0a:1a:f7:bc:d8:92:5a:8c:eb:61:26:07:c2:f1:40:7e:
         70:29:47:7f:14:5d:f2:3c:52:da:44:ef:b6:d1:21:3a:a3:81:
         c7:f9:f7:e1:78:a7:44:1b:eb:b9:96:54:29:9b:e8:e4:ef:3d:
         d9:ba:47:22:57:42:af:21:25:36:4c:22:57:69:ac:0c:84:93:
         4a:83:b0:b2:68:cd:ef:ea:fe:cf:00:80:c5:ca:56:ff:ae:11:
         42:74:98:85:52:49:56:60:ab:ad:39:e5:44:68:46:ce:b8:ea:
         1e:90:8f:0f:cb:9a:c5:04:19:72:d4:48:59:c4:de:02:65:ff:
         55:e9:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:36:03 2026 by rpki-client