Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File:                     4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier:          EEd3yITOZHHKaZd3jrLXeVH/0k8Ty294LwMQSMGA9BI=
Subject key identifier:   B0:D8:9E:5B:BE:FF:1D:B6:95:56:F4:AB:0E:3F:2B:9C:AB:DB:38:5A
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       01ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number:          01D6
Signing time:             Sat 05 Sep 2026 03:30:53 +0000
Manifest this update:     Sat 05 Sep 2026 03:30:52 +0000
Manifest next update:     Sat 12 Sep 2026 03:30:52 +0000
Files and hashes:         1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: 1SGeC36Sp0ddzbI85oLBfjIr2HxemdZleWNh4u0OrSM=)
                          2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=)
                          3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 03:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Sep  5 03:30:52 2026 GMT
            Not After : Sep 12 03:30:52 2026 GMT
        Subject: CN=6a9b8ced-cbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:26:dd:f5:e4:3e:fd:f8:da:00:58:18:8f:
                    e3:41:c0:80:e9:43:99:0f:0e:5b:8b:d5:50:1b:e1:
                    92:51:7e:d9:39:0c:7c:96:f8:0d:90:ae:e1:95:05:
                    8e:c9:55:58:60:3b:1e:7f:5d:34:9d:98:fe:1b:41:
                    b4:a9:13:37:4f:7a:98:e4:5a:72:19:ed:b0:2e:69:
                    8a:c6:14:a5:71:1a:87:20:c0:3e:0d:ab:46:99:1d:
                    de:28:0d:ce:f2:42:6a:28:a1:ac:64:f6:ba:c7:88:
                    d8:9a:1b:94:cf:5c:6d:0e:14:1a:53:11:bf:c3:62:
                    01:95:fd:6a:54:3c:de:9b:26:d8:71:5f:52:8a:0a:
                    da:02:67:c3:4d:03:60:ed:d8:1a:b4:c6:09:17:42:
                    a2:d6:3b:39:50:8e:2e:41:d2:4a:92:b1:20:b6:66:
                    63:77:a5:72:e0:ed:84:5e:ae:d9:2d:37:7d:07:fe:
                    6b:36:4c:38:33:59:24:e0:5d:b5:b5:b2:5b:bb:db:
                    f1:ca:be:c5:6d:9c:9a:f9:57:59:c9:7b:a6:13:e0:
                    6d:63:7a:0b:2f:4e:f2:89:11:0f:33:fe:9c:fb:2c:
                    b1:03:d6:39:f9:1e:0e:a6:c9:25:54:32:2e:2c:21:
                    51:02:c9:6e:dd:4f:b1:16:5b:42:cb:f6:8c:37:34:
                    9f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D8:9E:5B:BE:FF:1D:B6:95:56:F4:AB:0E:3F:2B:9C:AB:DB:38:5A
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:d9:8f:c9:41:34:3c:0f:eb:23:2c:21:c7:18:ce:92:01:
         c3:d3:7e:a9:97:ae:f4:69:d1:6f:dd:5a:75:10:86:66:01:20:
         ca:8a:cf:ce:8a:ac:b2:14:05:e5:bf:a1:9b:4c:bf:d6:04:86:
         3d:07:43:2a:6d:ae:fd:72:d7:ce:da:c2:1b:21:70:b4:08:6a:
         91:05:1a:e7:09:6e:7c:c8:2f:a2:9b:76:34:4e:10:5f:c2:d2:
         25:a6:68:fd:76:7c:a0:6a:7b:11:2d:85:c8:82:d2:40:f5:d2:
         1b:be:59:1b:cd:8c:00:0b:ed:15:7a:b8:90:3f:2d:55:9b:cf:
         fe:ed:b2:8e:e9:fe:3a:87:3e:1a:96:d8:0c:42:bb:e5:9f:41:
         fa:32:b9:95:3f:ae:c8:cb:14:0a:89:cf:a1:81:88:ef:6c:52:
         ce:2e:e6:a4:bf:a9:66:75:bd:93:aa:2b:79:83:e4:85:ab:37:
         78:c9:32:c0:a2:7c:1d:c9:de:2d:8f:20:8a:61:e6:0e:00:37:
         dc:8f:db:6f:0d:60:df:eb:de:03:92:a3:2b:30:77:0b:88:25:
         e0:42:40:37:a1:e2:94:be:d0:c6:25:0a:11:49:89:e2:13:bb:
         e4:35:46:fa:5b:5a:f1:09:f0:9e:d8:b0:fa:ca:66:7c:64:6d:
         43:c2:9c:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ4QkUxMTAvBgNVBAUTKEUzRjE4RDQxMjAyNkYzMUJBNDQzRUEzM0Y1NjcwNkZG
QjJGMEYxNjIwHhcNMjYwOTA1MDMzMDUyWhcNMjYwOTEyMDMzMDUyWjAYMRYwFAYD
VQQDEw02YTliOGNlZC1jYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnDcm3fXkPv342gBYGI/jQcCA6UOZDw5bi9VQG+GSUX7ZOQx8lvgNkK7hlQWO
yVVYYDsef100nZj+G0G0qRM3T3qY5FpyGe2wLmmKxhSlcRqHIMA+DatGmR3eKA3O
8kJqKKGsZPa6x4jYmhuUz1xtDhQaUxG/w2IBlf1qVDzemybYcV9SigraAmfDTQNg
7dgatMYJF0Ki1js5UI4uQdJKkrEgtmZjd6Vy4O2EXq7ZLTd9B/5rNkw4M1kk4F21
tbJbu9vxyr7FbZya+VdZyXumE+BtY3oLL07yiREPM/6c+yyxA9Y5+R4OpsklVDIu
LCFRAslu3U+xFltCy/aMNzSfcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDYnlu+
/x22lVb0qw4/K5yr2zhaMB8GA1UdIwQYMBaAFOPxjUEgJvMbpEPqM/VnBv+y8PFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDhCRS9DNjhFRkY5RUU1
RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4dWtRLW96OVdjR183THc4
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRfR05RU0FtOHh1a1Etb3o5V2NHXzdMdzhXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDhCRS9DNjhFRkY5RUU1RDYxMUVFOEIzNTY3MzlDNEY5QUUwMi80X0dOUVNBbTh4
dWtRLW96OVdjR183THc4V0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArJrZj8lBNDwP6yMsIccYzpIBw9N+qZeu9GnRb91adRCGZgEgyorPzoqsshQF
5b+hm0y/1gSGPQdDKm2u/XLXztrCGyFwtAhqkQUa5wlufMgvopt2NE4QX8LSJaZo
/XZ8oGp7ES2FyILSQPXSG75ZG82MAAvtFXq4kD8tVZvP/u2yjun+Ooc+GpbYDEK7
5Z9B+jK5lT+uyMsUConPoYGI72xSzi7mpL+pZnW9k6oreYPkhas3eMkywKJ8Hcne
LY8gimHmDgA33I/bbw1g3+veA5KjKzB3C4gl4EJAN6HilL7QxiUKEUmJ4hO75DVG
+lta8Qnwntiw+spmfGRtQ8KcZQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:10:39 2026 by rpki-client