Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
File:                     gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json)
Hash identifier:          pUGOM6mkth4wNX6VI0PVycXTgxkxOZMSYOoD5oL89uU=
Subject key identifier:   04:63:9D:6C:8F:9F:81:54:49:AF:50:01:3B:74:20:C6:61:BE:7D:CC
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0E0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
Manifest number:          0DE7
Signing time:             Wed 22 Jul 2026 18:05:30 +0000
Manifest this update:     Wed 22 Jul 2026 18:05:30 +0000
Manifest next update:     Wed 29 Jul 2026 18:05:30 +0000
Files and hashes:         1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: bEgwK347WJ/bO+wYvJXcDRRTXEPEM7uks2TRfWuL2m8=)
                          2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=)
                          3: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=)
                          4: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=)
                          5: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=)
                          6: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=)
                          7: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599 (0xe0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Jul 22 18:05:30 2026 GMT
            Not After : Jul 29 18:05:30 2026 GMT
        Subject: CN=6a61066a-ab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:eb:49:21:de:78:93:d3:3a:bd:a1:b9:5f:
                    6f:fe:94:65:4d:e9:e2:d5:82:6d:df:88:7a:d4:51:
                    19:6b:f0:f2:81:51:1e:c5:03:7d:1d:9a:bf:15:a8:
                    23:4f:3f:14:0b:85:52:5c:38:7b:03:d9:c8:e4:32:
                    40:e6:9e:0e:fe:8a:a1:d7:73:54:00:b5:53:89:91:
                    fb:50:4c:8b:ff:ae:fe:5c:e2:94:cf:bc:dc:23:b1:
                    e0:c9:f5:60:75:4d:2b:53:75:49:b9:3b:6f:b9:a4:
                    fb:e3:fe:2f:a9:36:11:c3:bd:b4:34:4a:13:7a:76:
                    d4:76:1a:65:94:80:af:65:fd:cf:f2:64:d4:95:31:
                    65:7e:25:05:fe:64:8f:b7:c7:12:e0:9c:63:5b:84:
                    ee:a7:09:99:f9:ff:43:d5:40:92:2e:3b:00:8f:ec:
                    3b:eb:61:73:07:cd:5e:d1:c5:d7:13:a7:2b:08:fb:
                    74:d3:ad:db:14:65:94:85:b3:8e:3c:ae:69:88:fc:
                    83:24:76:07:07:38:2a:3e:f4:1f:df:7b:75:bd:b5:
                    03:db:a8:cd:30:82:c2:3c:1d:8b:8c:ad:be:ed:12:
                    7d:53:4f:41:bb:00:83:af:91:a3:a3:d3:bf:d1:ba:
                    9c:58:4a:f8:82:9e:8a:b5:8d:18:72:b7:3c:41:5a:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:63:9D:6C:8F:9F:81:54:49:AF:50:01:3B:74:20:C6:61:BE:7D:CC
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:09:fd:b8:04:f0:d7:68:e3:90:c4:1b:5d:54:a4:8e:3d:
         9d:05:77:80:42:b0:f8:14:b8:65:a9:fc:68:36:79:03:a9:b5:
         1d:c1:c0:88:83:0d:9f:8d:55:10:83:ff:97:a3:1b:ae:9e:0e:
         88:af:67:9c:7c:70:6b:f6:57:15:87:1a:f2:af:66:09:c5:ef:
         23:e2:2b:84:c2:9d:ac:08:82:5a:d7:4f:c1:df:b1:4c:be:a3:
         5c:00:33:3e:b8:ec:59:49:b9:b0:e2:79:dc:dd:93:f2:b6:5c:
         d8:42:1a:13:b2:16:06:80:23:cb:4f:20:1f:07:2c:35:f0:a2:
         57:4a:6c:6f:4b:6a:7f:33:5f:c0:db:b2:12:b4:5c:f8:82:99:
         91:03:de:d2:eb:ad:42:2b:9e:07:13:03:23:a6:9c:46:0f:f3:
         f9:6f:c8:e8:41:32:1c:d8:02:11:05:62:5a:7b:0c:9e:f9:e7:
         be:a5:8a:4f:ee:3e:d7:a1:4a:00:0f:1a:30:d7:f8:d2:30:17:
         f3:36:0c:e1:92:11:2c:e7:3f:68:b8:94:33:5b:7e:53:88:50:
         85:ed:7b:f2:d6:97:75:c5:8d:73:b6:c6:55:aa:ff:97:b4:73:
         ab:6f:04:73:12:45:0b:6a:2e:12:e6:24:df:a5:5a:20:93:cb:
         c2:d4:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:08 2026 by rpki-client