Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
File:                     GVL9OFMmo9kd2kXDemIlOWPD9jg.mft (raw, json)
Hash identifier:          AnLOovEQ8ALWS2urgKokwYYIjn9Tk2GmPybHHnuyxAc=
Subject key identifier:   39:19:35:F5:4A:35:04:16:C7:57:CC:C9:6E:5D:21:73:AA:E1:46:3F
Authority key identifier: 19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38
Certificate issuer:       /CN=A91DD00E/serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638
Certificate serial:       1660
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
Manifest number:          1654
Signing time:             Tue 18 Aug 2026 16:51:36 +0000
Manifest this update:     Tue 18 Aug 2026 16:51:35 +0000
Manifest next update:     Tue 25 Aug 2026 16:51:35 +0000
Files and hashes:         1: GVL9OFMmo9kd2kXDemIlOWPD9jg.crl (hash: mai+sOLzVsiNQDitWmtRPfu27jmRvuNwcA7wBcpN534=)
                          2: 7482AB4A3DC511EB8276EA19C4F9AE02.roa (hash: ZFOMiYYvjJ1vVOGVLeWMLSCJ+EAjSCECdZorsR2uhvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl
                          rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5728 (0x1660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD00E, serialNumber=1952FD385326A3D91DDA45C37A62253963C3F638
        Validity
            Not Before: Aug 18 16:51:35 2026 GMT
            Not After : Aug 25 16:51:35 2026 GMT
        Subject: CN=6a848d98-80ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:86:11:15:77:e5:6f:35:d6:05:ed:b6:74:
                    92:9c:52:85:af:45:51:4e:34:32:c9:d9:6d:04:0c:
                    41:fb:ce:27:2d:d2:35:61:d4:97:80:12:8c:03:cc:
                    ca:6b:c6:4e:a4:58:80:9b:61:7f:f8:93:cc:a9:52:
                    a7:25:79:0b:fd:b5:bd:6f:78:0d:7a:25:d0:3f:37:
                    6a:11:f4:98:96:63:91:0c:5b:c6:e3:ab:2e:ef:7a:
                    12:bc:6f:a4:30:2d:0f:3a:c8:4f:c5:7d:74:30:3b:
                    33:02:f8:b0:98:13:64:6e:85:89:54:75:a8:c0:62:
                    a5:d0:07:22:b5:b5:68:57:3e:b7:4b:54:8c:e8:2d:
                    81:0c:fe:78:65:39:0f:c9:d4:23:e0:b9:67:54:39:
                    dc:a1:54:e1:e7:f7:52:89:1b:9c:48:5e:ef:89:8f:
                    5a:1d:54:7f:5a:34:ec:0a:c2:80:a1:31:ec:e9:b5:
                    f9:7c:0e:5e:fc:33:94:49:37:85:2c:a4:ea:8f:47:
                    18:1b:ff:db:3e:6b:03:38:30:c1:49:c1:20:02:0c:
                    ff:cb:8b:30:a8:4a:bb:a1:c6:0e:8f:73:86:10:54:
                    7d:5c:c2:a0:bd:9a:82:f5:a2:bd:7b:fa:79:25:55:
                    33:69:e6:4f:f3:86:e9:19:75:3d:12:72:4b:4f:13:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:19:35:F5:4A:35:04:16:C7:57:CC:C9:6E:5D:21:73:AA:E1:46:3F
            X509v3 Authority Key Identifier:
                keyid:19:52:FD:38:53:26:A3:D9:1D:DA:45:C3:7A:62:25:39:63:C3:F6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVL9OFMmo9kd2kXDemIlOWPD9jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD00E/800E3F7238E311E88977FB0FC4F9AE02/GVL9OFMmo9kd2kXDemIlOWPD9jg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f6:57:b0:68:63:bc:3b:8e:89:31:76:45:26:32:88:80:7e:
         3e:36:b1:66:7c:27:40:31:05:ec:45:50:e0:1e:9b:f7:e2:e0:
         a4:1c:2d:b9:ad:f9:44:30:32:73:06:30:d3:e7:f1:f9:e4:ee:
         55:35:75:54:fe:f0:ff:ad:ef:ca:1d:d3:e0:08:e6:3f:27:6b:
         c4:5a:1d:f5:f4:f0:12:b6:e9:b8:a0:86:1b:99:48:60:60:a4:
         d0:2c:7c:8c:49:1e:ee:af:99:94:e2:fa:e8:b8:f4:33:a2:8a:
         9a:d7:ac:7b:9c:fd:c4:62:ca:26:d0:4f:cc:f2:c9:00:37:65:
         e9:be:b2:44:e2:82:4d:05:96:b5:8e:3f:26:74:bb:e3:9f:f1:
         89:56:e0:42:7b:05:3f:42:76:b1:af:80:ca:5f:19:94:d8:61:
         95:a3:4c:dc:ca:27:38:dc:1f:64:5f:24:d0:ed:05:59:11:dc:
         8d:ef:26:e9:a0:86:f4:5c:d1:71:64:00:cb:a1:91:dc:fb:cb:
         b1:25:64:81:9e:ba:40:fb:d0:22:b0:e0:ef:5c:eb:8e:5b:b8:
         c3:52:0e:af:19:6c:d6:5d:ce:42:e0:01:88:13:33:3a:93:49:
         cc:18:75:ae:41:c5:16:90:97:b4:6d:2e:75:b9:a5:42:f6:25:
         b5:1e:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:04 2026 by rpki-client