Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
File:                     GkUkezobAmknHXRsWl-sAUX_MyI.mft (raw, json)
Hash identifier:          K2NkMuvSnaCSY/2tMb07B5eKQCyn0Pofu16NST85CXs=
Subject key identifier:   FA:03:7A:5E:E8:88:E4:3E:66:38:AD:1C:9D:52:12:50:AF:D7:76:19
Authority key identifier: 1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22
Certificate issuer:       /CN=A911A2B1/serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
Manifest number:          01B2
Signing time:             Thu 23 Jul 2026 05:27:33 +0000
Manifest this update:     Thu 23 Jul 2026 05:27:33 +0000
Manifest next update:     Thu 30 Jul 2026 05:27:33 +0000
Files and hashes:         1: GkUkezobAmknHXRsWl-sAUX_MyI.crl (hash: rGbqHprVPnsVPuccH/X7LcQc1OZye/FRJe8GaHOKZCQ=)
                          2: F44E8EBCF3B511EE8451152DC4F9AE02.roa (hash: epSNdxky22TBESs7X/2oDXWpoJovm523A9D1YZGpSUw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl
                          rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A2B1, serialNumber=1A45247B3A1B0269271D746C5A5FAC0145FF3322
        Validity
            Not Before: Jul 23 05:27:33 2026 GMT
            Not After : Jul 30 05:27:33 2026 GMT
        Subject: CN=6a61a645-b277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:03:ec:d6:a6:6f:9f:91:81:aa:b5:9e:f6:
                    08:19:ac:ce:29:0a:1b:b0:11:db:89:72:a8:54:22:
                    19:4f:f7:10:c9:86:2f:0f:90:cd:ff:43:d9:77:48:
                    61:97:9a:2a:f5:e0:fc:96:d6:a0:5f:e6:a9:a2:0d:
                    ac:32:d9:93:ef:e4:e5:3c:f0:43:0a:ad:62:a2:7e:
                    d1:74:5e:34:be:64:9a:ec:ea:6f:6f:15:2a:3f:b7:
                    01:f5:d8:f2:73:57:a8:4c:6e:e4:69:46:2c:f9:a3:
                    45:3a:b8:a8:ac:8d:d6:24:5c:1b:16:bf:65:55:ec:
                    17:a0:93:8e:2e:a3:87:08:cb:47:72:33:6e:3d:05:
                    f1:66:a1:ff:22:e9:14:49:20:db:3a:7c:b1:c1:3f:
                    c9:03:09:46:94:b6:07:1c:a1:0c:c4:fe:f3:5d:44:
                    63:f1:12:91:6a:35:5a:24:50:d1:11:a3:62:b5:fd:
                    d9:8b:47:a0:ef:b4:45:3d:72:06:06:ac:ea:a6:98:
                    66:16:a2:37:06:ec:06:21:5b:91:77:97:5f:81:6e:
                    36:0e:23:35:51:47:56:c4:42:61:b8:59:24:8c:47:
                    74:46:4f:c8:f5:12:e8:e2:20:28:05:7a:82:fb:63:
                    52:2b:c0:c6:67:58:08:a8:5c:9e:45:b4:8a:4c:fb:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:7A:5E:E8:88:E4:3E:66:38:AD:1C:9D:52:12:50:AF:D7:76:19
            X509v3 Authority Key Identifier:
                keyid:1A:45:24:7B:3A:1B:02:69:27:1D:74:6C:5A:5F:AC:01:45:FF:33:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GkUkezobAmknHXRsWl-sAUX_MyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A2B1/19A82F66F3B511EEB1E2230EC4F9AE02/GkUkezobAmknHXRsWl-sAUX_MyI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4d:61:d7:33:27:44:a0:51:21:9d:02:28:45:94:d6:94:d8:
         a9:74:a4:6e:ad:55:1e:ee:62:84:70:5e:df:22:e6:17:9a:a6:
         8d:2a:a7:d1:fe:6b:0c:d0:5f:5b:97:9f:74:c8:7c:c1:02:bd:
         30:51:ce:c2:40:98:02:3a:74:be:cf:9b:0f:17:10:91:2c:52:
         ec:40:28:b1:f2:64:dd:78:16:59:33:7a:26:5f:a2:bf:42:93:
         06:bb:28:9d:cc:7c:6a:eb:40:62:fd:b1:1e:10:a8:1c:a7:fd:
         21:e9:f2:ef:bc:32:6e:23:74:ca:53:83:34:92:1c:28:3d:ec:
         e3:ee:c2:7b:bd:65:5e:08:46:1a:11:2a:fa:ae:c3:7b:7e:dd:
         99:7a:2e:d6:49:5e:b3:91:0f:82:2d:ea:52:8a:d0:ca:ea:65:
         91:6b:e8:96:ea:7c:7b:13:16:1f:e1:09:ad:7d:d7:17:10:56:
         e8:f8:70:e3:28:e2:e9:7c:b3:52:bc:50:21:d1:69:db:f5:80:
         19:fd:1d:8e:93:23:a3:82:af:a2:93:c8:10:94:d0:98:45:00:
         b3:82:6b:3e:5c:5d:bd:62:7d:dd:48:f8:fd:dc:67:a2:b6:14:
         9b:0b:ba:0c:69:c7:04:b8:a1:f6:f0:30:4d:f7:5a:99:8d:75:
         17:8e:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:06 2026 by rpki-client