Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
File:                     GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft (raw, json)
Hash identifier:          GtpuloVVCWO/2tP5la+x22kvWgjWI5tcZyQ33hWPUeU=
Subject key identifier:   ED:85:F5:B7:CE:C8:A2:E5:4D:78:BC:B7:54:46:3D:70:B9:B6:3C:AF
Authority key identifier: 18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A
Certificate issuer:       /CN=A91F8357/serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
Manifest number:          0139
Signing time:             Sat 03 Oct 2026 06:11:50 +0000
Manifest this update:     Sat 03 Oct 2026 06:11:49 +0000
Manifest next update:     Sat 10 Oct 2026 06:11:49 +0000
Files and hashes:         1: GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl (hash: k/0EQEx0CjCQzfSnjkLF9GRyji9q026hsEtP9arYViE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl
                          rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8357, serialNumber=180A3522E2050C5F1E0873539B12D6D2312A201A
        Validity
            Not Before: Oct  3 06:11:49 2026 GMT
            Not After : Oct 10 06:11:49 2026 GMT
        Subject: CN=6ac09ca5-2aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:ec:46:b4:e9:52:b1:1c:54:99:6d:ce:5b:
                    11:03:b4:98:8f:48:66:43:97:0a:65:12:3d:0d:eb:
                    2a:ac:a1:12:e8:ab:97:03:ed:19:a0:dd:30:f5:46:
                    ca:1f:df:19:c7:54:bd:ba:f7:88:09:a7:b3:64:c0:
                    8d:09:c8:1a:6c:d2:11:bf:c8:17:b6:82:87:d3:dc:
                    4d:88:02:4d:2d:a3:bb:90:a6:7a:ad:ea:8c:57:99:
                    62:cb:21:76:1f:d0:fa:36:bd:6e:9f:8c:74:81:1e:
                    b3:f8:b5:46:98:6a:67:d9:e4:fc:15:ae:80:14:4b:
                    dc:7a:4a:3a:30:7c:27:3b:5f:46:42:17:ad:82:57:
                    9c:70:89:ff:38:ab:b2:a8:e0:53:3a:a1:bd:d0:ec:
                    e6:ca:5a:93:02:c3:4d:86:9b:9c:fd:0f:1e:73:7e:
                    67:1c:6c:16:c0:d1:e0:72:6b:3f:f5:7f:96:42:cb:
                    1d:c9:9f:af:2b:f0:ac:b2:25:7c:ef:32:7b:64:54:
                    23:a6:0c:4c:d2:03:38:da:0f:d0:08:51:be:20:64:
                    39:84:af:01:3b:b1:52:41:57:91:ea:87:0f:e9:a1:
                    e1:8f:e4:da:52:14:d4:32:2a:ae:a7:88:ed:b2:89:
                    88:12:a3:ff:64:2d:2f:5a:10:ac:12:4b:17:a9:b9:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:F5:B7:CE:C8:A2:E5:4D:78:BC:B7:54:46:3D:70:B9:B6:3C:AF
            X509v3 Authority Key Identifier:
                keyid:18:0A:35:22:E2:05:0C:5F:1E:08:73:53:9B:12:D6:D2:31:2A:20:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GAo1IuIFDF8eCHNTmxLW0jEqIBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8357/1DA5CC56DF8A11EF87472B74C4F9AE02/GAo1IuIFDF8eCHNTmxLW0jEqIBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:37:8e:3e:16:3e:29:8a:67:ba:80:c3:fd:dc:ba:87:f1:
         28:e7:d8:b2:b3:ea:a3:59:5a:a2:01:5f:c6:4b:58:37:5d:e6:
         4e:d3:cf:c6:e1:13:d7:d6:a2:51:7e:a9:b6:3d:2c:4b:1f:f7:
         37:2c:52:54:c1:92:49:83:de:53:67:0b:ab:a9:60:17:4d:cf:
         ee:8b:5f:91:c8:d2:e8:32:44:15:9a:42:da:7b:02:60:69:24:
         67:9a:57:0c:05:20:c0:68:66:ef:a8:1d:12:d3:de:b0:b0:f4:
         5d:e0:f0:93:7b:97:e3:55:7e:17:cb:fb:db:31:0a:69:85:1f:
         2d:a7:49:0c:9e:a2:db:ed:dc:41:dc:0a:97:74:f1:45:34:4e:
         f1:f6:57:25:83:4d:0d:2a:4c:68:67:2b:33:35:fd:60:31:f4:
         b3:9a:07:a9:43:19:79:19:8c:64:62:ad:e5:d1:a1:23:d7:5c:
         0b:8c:ad:d4:47:dc:75:f2:84:e3:6e:ef:6c:f9:0c:c7:18:6d:
         7e:e6:a6:e7:53:3f:1a:58:eb:f9:38:4e:04:36:8e:f4:21:86:
         4f:1e:21:6a:83:87:a5:a1:5d:06:17:a7:d3:55:3f:6e:24:49:
         ed:7a:7e:38:5f:75:2f:79:22:e9:e8:52:1f:6c:b3:0d:6e:fb:
         db:a8:bf:2a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzNTcxMTAvBgNVBAUTKDE4MEEzNTIyRTIwNTBDNUYxRTA4NzM1MzlCMTJENkQy
MzEyQTIwMUEwHhcNMjYxMDAzMDYxMTQ5WhcNMjYxMDEwMDYxMTQ5WjAYMRYwFAYD
VQQDEw02YWMwOWNhNS0yYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6HsRrTpUrEcVJltzlsRA7SYj0hmQ5cKZRI9DesqrKES6KuXA+0ZoN0w9UbK
H98Zx1S9uveICaezZMCNCcgabNIRv8gXtoKH09xNiAJNLaO7kKZ6reqMV5liyyF2
H9D6Nr1un4x0gR6z+LVGmGpn2eT8Fa6AFEvceko6MHwnO19GQhetgleccIn/OKuy
qOBTOqG90OzmylqTAsNNhpuc/Q8ec35nHGwWwNHgcms/9X+WQssdyZ+vK/CssiV8
7zJ7ZFQjpgxM0gM42g/QCFG+IGQ5hK8BO7FSQVeR6ocP6aHhj+TaUhTUMiqup4jt
somIEqP/ZC0vWhCsEksXqbmNtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO2F9bfO
yKLlTXi8t1RGPXC5tjyvMB8GA1UdIwQYMBaAFBgKNSLiBQxfHghzU5sS1tIxKiAa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODM1Ny8xREE1Q0M1NkRG
OEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRGOGVDSE5UbXhMVzBqRXFJ
Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dBbzFJdUlGREY4ZUNITlRteExXMGpFcUlCby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODM1Ny8xREE1Q0M1NkRGOEExMUVGODc0NzJCNzRDNEY5QUUwMi9HQW8xSXVJRkRG
OGVDSE5UbXhMVzBqRXFJQm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPCE3jj4WPimKZ7qAw/3cuofxKOfYsrPqo1laogFfxktYN13mTtPPxuET19ai
UX6ptj0sSx/3NyxSVMGSSYPeU2cLq6lgF03P7otfkcjS6DJEFZpC2nsCYGkkZ5pX
DAUgwGhm76gdEtPesLD0XeDwk3uX41V+F8v72zEKaYUfLadJDJ6i2+3cQdwKl3Tx
RTRO8fZXJYNNDSpMaGcrMzX9YDH0s5oHqUMZeRmMZGKt5dGhI9dcC4yt1EfcdfKE
427vbPkMxxhtfuam51M/Gljr+ThOBDaO9CGGTx4haoOHpaFdBhen01U/biRJ7Xp+
OF91L3ki6ehSH2yzDW7726i/Kg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 21:48:44 2026 by rpki-client