Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
File:                     Gb4TIRiPCXbTLoNtGvulRidmV-M.mft (raw, json)
Hash identifier:          CU8+GYxBAfmzNxxPhqS7pRiuCpHmYGUxEoX9B4iYGcQ=
Subject key identifier:   4D:1B:0C:8A:26:24:71:98:2C:5D:D0:E2:DC:34:53:A2:4B:CC:E4:A8
Authority key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3
Certificate issuer:       /CN=A91174DD/serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
Manifest number:          6B
Signing time:             Thu 23 Jul 2026 10:02:47 +0000
Manifest this update:     Thu 23 Jul 2026 10:02:47 +0000
Manifest next update:     Thu 30 Jul 2026 10:02:47 +0000
Files and hashes:         1: Gb4TIRiPCXbTLoNtGvulRidmV-M.crl (hash: 2jrs/j7s4AUIM7QSYDibaInlG/erlbFehmPgoAQysAM=)
                          2: 687990125D7611F18A94BD85C1833773.roa (hash: wbkkhjuYyi+AxZKRXDpbx50fMxRRSA8ovxKIrgbbE8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3
        Validity
            Not Before: Jul 23 10:02:47 2026 GMT
            Not After : Jul 30 10:02:47 2026 GMT
        Subject: CN=6a61e6c7-fdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:fe:ef:a8:1e:13:cf:64:b2:71:f5:bc:9b:
                    5a:c5:fb:d7:2b:82:2d:63:64:98:d1:2e:18:c9:1f:
                    c2:81:01:78:54:7b:27:d2:b3:2e:d7:9f:7b:3d:f9:
                    21:00:01:e2:a6:7d:92:8e:32:b0:c5:98:9f:b1:eb:
                    85:7e:5b:8b:e3:f6:f5:c1:ed:d3:ff:64:de:27:d6:
                    df:d5:82:e3:01:7e:58:55:06:dc:1b:8e:d9:32:a5:
                    94:61:69:11:52:c3:69:80:98:8b:8a:9c:44:a8:0d:
                    2c:c6:a4:3a:45:fa:83:e0:48:2e:26:eb:fb:53:35:
                    5e:34:f1:27:a2:41:88:0e:91:bf:c4:6c:2b:11:8a:
                    01:ea:20:de:7a:51:00:49:08:bc:08:bc:46:87:b5:
                    81:03:24:8f:b9:dc:43:22:64:2c:7c:ca:5f:b0:99:
                    d8:9e:c6:8c:13:cb:63:ef:05:f3:75:d9:3e:68:86:
                    24:5c:90:a3:2e:65:57:92:3b:6a:2f:3b:20:b0:59:
                    74:fe:93:26:94:1a:c7:05:b9:7e:3f:05:27:2a:37:
                    d6:a4:61:da:4b:f5:31:f2:0c:f6:4b:8e:f5:80:85:
                    8f:f9:49:aa:32:e5:ca:eb:80:54:80:c3:a5:44:3b:
                    37:e0:3c:14:5b:97:49:c6:06:d1:45:e2:dc:b0:5b:
                    d9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1B:0C:8A:26:24:71:98:2C:5D:D0:E2:DC:34:53:A2:4B:CC:E4:A8
            X509v3 Authority Key Identifier:
                keyid:19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:8c:19:f9:c4:fc:78:94:65:5c:6a:e8:52:2f:04:78:c9:
         49:15:7d:00:a1:18:78:95:84:0d:08:ea:69:1a:b7:07:f7:f3:
         54:9f:82:da:3a:4a:3f:48:cd:1b:ee:ba:e1:9e:9e:80:53:44:
         f6:bf:05:bd:aa:aa:fc:ad:98:ab:eb:a9:4d:31:b1:ce:95:e5:
         e4:51:48:c6:b6:03:53:e7:60:43:65:71:09:d2:69:47:24:eb:
         25:8c:b3:76:f1:8b:9b:be:04:05:e4:7a:26:14:ce:f8:db:a2:
         13:a6:15:0e:03:6f:c1:77:c4:33:ca:65:90:ef:ac:8d:a9:93:
         0a:dd:2d:f4:aa:97:94:77:fb:13:df:8b:fd:0c:15:c1:df:84:
         a2:be:f3:c3:77:bc:ac:ff:71:48:d5:be:6b:3d:e1:25:9f:97:
         42:e1:5b:b7:e3:30:ba:6d:70:2c:a9:3f:28:2d:45:e9:ab:d1:
         f3:86:8a:47:13:68:48:c5:0b:9a:75:5f:4c:9b:b5:5b:c9:74:
         67:cb:82:bc:8b:01:d3:59:11:26:9a:69:c1:45:7b:72:ce:54:
         76:64:43:e0:02:a3:87:4b:29:b1:7c:c0:91:f1:37:fc:8c:5f:
         b2:68:81:d4:c9:03:d4:0e:7f:71:f4:97:ef:16:a5:59:af:2e:
         95:fc:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:32 2026 by rpki-client