Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
File:                     gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft (raw, json)
Hash identifier:          rFDA5j9qgTdNXF1bjYWcAm+fyEjwZ1kv2kHKEB3fsok=
Subject key identifier:   31:E8:DC:C8:12:74:E0:7D:17:6B:F0:CA:BA:D6:89:D4:F0:47:E5:70
Authority key identifier: 83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22
Certificate issuer:       /CN=A911C005/serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
Certificate serial:       09E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
Manifest number:          09D7
Signing time:             Wed 22 Jul 2026 20:19:13 +0000
Manifest this update:     Wed 22 Jul 2026 20:19:12 +0000
Manifest next update:     Wed 29 Jul 2026 20:19:12 +0000
Files and hashes:         1: gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl (hash: u8WrDoZkho4ITXN0lcNuTZyXErpaThH3MvtIqzSGEVs=)
                          2: B0071914AAE811EA8412810FC4F9AE02.roa (hash: gqN4+0x/iPERujmuiwnxSyaP8QLNa37HtTvPV2wxA2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl
                          rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533 (0x9e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C005, serialNumber=830DCFCB5A9AA0C7FA7D7AB9989DA2343DED2C22
        Validity
            Not Before: Jul 22 20:19:12 2026 GMT
            Not After : Jul 29 20:19:12 2026 GMT
        Subject: CN=6a6125c0-a228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cb:e4:c3:bc:8b:c8:66:66:e6:d7:65:47:46:
                    c3:20:32:17:9c:b1:b7:d8:f2:bf:71:c0:a0:4e:c5:
                    a8:cd:ae:2d:35:d6:c6:ca:88:05:88:e5:34:a6:0f:
                    c5:f4:26:46:be:01:19:39:b5:eb:82:73:ac:d1:9a:
                    4f:80:91:4b:cc:53:cb:32:4e:6b:31:ad:48:6b:bd:
                    24:1b:f1:a1:6c:b3:ac:3c:a6:f9:0e:87:11:7a:29:
                    74:f4:df:ff:7d:ef:83:5e:75:c5:5a:b6:10:4d:72:
                    ca:48:a9:2e:53:2b:b5:ca:4b:04:bf:31:cc:ad:06:
                    10:31:e9:18:21:98:cc:d4:71:2b:62:d8:50:40:f6:
                    65:4a:1e:02:e7:2e:90:ef:72:eb:fe:04:99:2f:03:
                    24:ae:ce:e3:fa:a2:02:34:09:da:74:f3:1c:a8:f1:
                    e8:33:c3:e1:2b:25:61:21:56:f2:5f:fa:41:d2:ff:
                    04:b4:87:47:68:01:af:e7:5c:56:09:0e:45:18:7a:
                    11:19:b6:85:86:96:6e:b0:31:3b:2e:f7:58:51:c5:
                    55:ae:62:b4:b4:ee:e4:5c:b1:e9:ff:6e:61:95:a3:
                    07:7d:b6:c1:73:63:6e:8d:65:1a:f1:9d:37:b1:ad:
                    89:fe:48:61:a6:ac:85:05:33:f1:4d:9d:b8:60:1f:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E8:DC:C8:12:74:E0:7D:17:6B:F0:CA:BA:D6:89:D4:F0:47:E5:70
            X509v3 Authority Key Identifier:
                keyid:83:0D:CF:CB:5A:9A:A0:C7:FA:7D:7A:B9:98:9D:A2:34:3D:ED:2C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gw3Py1qaoMf6fXq5mJ2iND3tLCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C005/8CA68276AAE711EAA9122B0EC4F9AE02/gw3Py1qaoMf6fXq5mJ2iND3tLCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:1f:a2:fa:1f:4c:3f:19:5c:bc:ca:6b:96:de:52:1a:a9:
         c2:14:36:6f:8c:4b:0c:99:66:c5:90:26:0a:f7:92:da:d0:19:
         05:01:b0:36:37:b5:13:03:86:0d:b0:55:2e:ef:56:64:00:a3:
         b2:26:f7:98:dd:9c:e2:bc:e1:d2:30:91:3f:19:ef:1d:8e:ff:
         9f:40:8f:f0:e8:5b:75:b7:d2:11:b1:90:78:61:06:d3:e2:40:
         3e:c9:da:bb:82:cc:ca:a2:05:47:61:7c:47:66:fb:30:a0:9b:
         18:f1:a3:e2:4b:a8:17:b9:0a:4d:f2:1a:ed:47:29:54:59:fb:
         ec:c2:5b:69:68:c5:6a:a8:3d:24:c1:f3:fa:7a:cb:95:91:88:
         8d:8b:52:2e:3a:b2:a5:79:73:d1:90:8f:52:6b:f8:38:d9:e0:
         88:b8:4a:c7:8d:56:8e:d2:d5:49:39:ef:e4:12:7a:03:88:01:
         5e:ba:57:33:88:f7:51:ca:2b:ff:5f:50:8a:f2:68:38:e9:19:
         fc:9a:08:36:f2:44:56:d4:d6:9a:60:01:81:06:4e:48:a9:4a:
         4f:c0:d5:1e:9b:25:ec:77:ba:72:b8:7e:9e:dd:3f:f8:da:47:
         c6:ae:fc:05:15:95:0a:b9:f2:a7:25:b4:58:bf:05:a2:7b:e1:
         4e:55:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:15 2026 by rpki-client