Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File:                     GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier:          n+9s5BW+tS4Xhxa69BrlSqOfqXoXRF42bthTFDvQKaM=
Subject key identifier:   7C:FB:38:35:67:A0:1F:9C:73:CF:34:2A:90:B4:35:CD:83:FB:DA:84
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       07BA
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number:          07A6
Signing time:             Tue 20 Oct 2026 20:14:47 +0000
Manifest this update:     Tue 20 Oct 2026 20:14:47 +0000
Manifest next update:     Tue 27 Oct 2026 20:14:47 +0000
Files and hashes:         1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: UU1qdY14Qg5tlhR/ETGqKnSogjHEyN25q1uR16YH7rQ=)
                          2: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: JgXv8es/pw1sE0Gc2Hw1RSuBorDwuU0kKpPxiQ9evCo=)
                          3: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: UHoZmq0paQ48NlRRluqfsVDQh3Q2DcM666YtqeY10Y8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 20:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978 (0x7ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Oct 20 20:14:47 2026 GMT
            Not After : Oct 27 20:14:47 2026 GMT
        Subject: CN=6ad7cbb7-d522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:d3:61:5a:63:d9:e6:26:74:7b:06:f5:f2:
                    5a:71:3e:28:69:ae:88:28:45:85:7e:d8:d1:d5:60:
                    3e:de:82:08:4b:8e:33:ea:f5:47:a2:c2:43:b8:fa:
                    aa:ae:3c:3c:1e:f4:b7:cc:07:c0:1f:a9:88:1d:ad:
                    88:6b:aa:27:c8:fa:38:49:9a:c2:5a:80:62:b6:30:
                    ac:5b:f4:37:56:04:48:0e:24:f4:62:f4:8d:5b:4a:
                    4d:01:27:d2:23:5d:58:42:64:7b:ed:fa:0f:a3:95:
                    30:a0:64:28:b3:e2:4d:9b:9d:8e:07:64:41:34:88:
                    f3:db:21:71:82:ea:2a:b1:09:52:57:e9:a3:ac:b1:
                    02:70:85:ae:2a:82:cf:aa:72:00:8f:44:ee:61:f6:
                    01:f5:b8:2a:91:4f:3b:c4:8b:8e:cc:b2:c4:62:f2:
                    7b:d7:15:ce:48:ec:98:a6:cd:67:97:66:8f:a3:3f:
                    46:a8:4d:69:a3:c8:f2:f5:d3:89:51:75:68:e4:a2:
                    fa:1c:c6:ba:a9:7e:91:10:9e:47:40:69:cf:ae:0a:
                    e5:4c:2f:db:32:a5:d1:3a:44:10:ba:d8:d0:fd:63:
                    43:a3:c0:f3:44:4d:94:09:48:2f:c5:06:46:a0:55:
                    68:52:bb:e3:1d:2e:cf:53:b8:fb:96:88:78:20:57:
                    04:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FB:38:35:67:A0:1F:9C:73:CF:34:2A:90:B4:35:CD:83:FB:DA:84
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9a:ff:59:f8:00:35:f4:06:cf:59:ab:9f:6f:f9:9c:a4:41:
         59:84:78:3e:17:8e:29:33:6d:a5:1a:6b:8c:6e:a2:c3:00:6d:
         34:1b:c0:a8:ce:57:39:11:ee:96:d4:c9:4f:04:e9:35:cb:69:
         ac:d7:0f:0e:66:e0:4a:28:79:b1:27:72:5c:e7:26:14:c3:59:
         ea:9d:79:42:c0:29:6c:a6:10:c3:98:1b:cc:47:44:52:5e:9e:
         c5:f7:14:d3:56:6a:71:c1:69:9b:b6:b6:a0:66:3d:5b:a6:c7:
         f5:fb:94:29:a1:88:f4:ba:eb:d2:d0:42:86:b1:80:38:69:a0:
         05:41:2f:0e:4d:66:e4:61:09:e5:42:c5:a2:48:a8:04:07:c8:
         81:56:8c:83:8c:2c:f4:ec:d9:5c:a6:63:d5:c7:54:73:78:68:
         4a:ab:cd:75:f4:3d:da:64:39:26:39:f8:98:5c:70:23:19:af:
         95:91:46:d5:c8:ab:eb:b6:74:f5:7b:34:c1:14:74:f1:42:38:
         e4:bf:35:98:5b:38:a5:d3:80:d7:18:83:09:95:28:da:29:78:
         73:42:3a:cb:cb:c4:0b:e3:55:b5:31:e2:c2:cc:de:51:ce:45:
         f4:86:25:2d:12:db:ef:3d:6b:9d:f6:8f:99:84:53:82:b3:6e:
         f0:04:59:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE
M0UwMjY4MUIwHhcNMjYxMDIwMjAxNDQ3WhcNMjYxMDI3MjAxNDQ3WjAYMRYwFAYD
VQQDEw02YWQ3Y2JiNy1kNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxjTYVpj2eYmdHsG9fJacT4oaa6IKEWFftjR1WA+3oIIS44z6vVHosJDuPqq
rjw8HvS3zAfAH6mIHa2Ia6onyPo4SZrCWoBitjCsW/Q3VgRIDiT0YvSNW0pNASfS
I11YQmR77foPo5UwoGQos+JNm52OB2RBNIjz2yFxguoqsQlSV+mjrLECcIWuKoLP
qnIAj0TuYfYB9bgqkU87xIuOzLLEYvJ71xXOSOyYps1nl2aPoz9GqE1po8jy9dOJ
UXVo5KL6HMa6qX6REJ5HQGnPrgrlTC/bMqXROkQQutjQ/WNDo8DzRE2UCUgvxQZG
oFVoUrvjHS7PU7j7loh4IFcE3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHz7ODVn
oB+cc880KpC0Nc2D+9qEMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx
RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh
QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RENCNi82RTlBQzgwNjcxRDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dX
THBmeU9FVnpZVUhUNENhQnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHJr/WfgANfQGz1mrn2/5nKRBWYR4PheOKTNtpRprjG6iwwBtNBvAqM5XORHu
ltTJTwTpNctprNcPDmbgSih5sSdyXOcmFMNZ6p15QsApbKYQw5gbzEdEUl6exfcU
01ZqccFpm7a2oGY9W6bH9fuUKaGI9Lrr0tBChrGAOGmgBUEvDk1m5GEJ5ULFokio
BAfIgVaMg4ws9OzZXKZj1cdUc3hoSqvNdfQ92mQ5Jjn4mFxwIxmvlZFG1cir67Z0
9Xs0wRR08UI45L81mFs4pdOA1xiDCZUo2il4c0I6y8vEC+NVtTHiwszeUc5F9IYl
LRLb7z1rnfaPmYRTgrNu8ARZdw==
-----END CERTIFICATE-----
Generated at Wed Oct 21 16:01:57 2026 by rpki-client