Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File:                     gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier:          96H5evq6F99zZRycD0MSgzfwLVFmj3+/USKy4R+1Nao=
Subject key identifier:   5C:9E:9B:5A:04:48:3B:AF:29:79:4B:3A:E2:99:C8:8A:5F:5A:14:6C
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number:          9B
Signing time:             Thu 23 Jul 2026 09:13:36 +0000
Manifest this update:     Thu 23 Jul 2026 09:13:36 +0000
Manifest next update:     Thu 30 Jul 2026 09:13:36 +0000
Files and hashes:         1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: PoydwP0dIz2yaAmH8I0nqQOge35Phf7aPoDEmQCY7Tk=)
                          2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Jul 23 09:13:36 2026 GMT
            Not After : Jul 30 09:13:36 2026 GMT
        Subject: CN=6a61db40-ed3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9c:05:f4:bf:ef:56:43:f2:da:81:29:81:13:
                    2f:15:f3:f3:13:88:7f:db:cb:c9:45:d8:de:6f:a4:
                    a6:30:ca:1f:be:4f:7d:cf:54:17:dd:db:8c:0d:50:
                    72:7b:ec:a7:d8:5f:6a:b0:2d:fe:36:cc:df:46:44:
                    84:e0:5b:ab:92:a5:bc:19:2c:9e:00:b8:38:00:da:
                    50:b5:1c:ee:a3:53:39:64:6c:d0:40:fb:c8:b7:5a:
                    6f:82:c6:ef:f7:87:ac:8f:e3:3a:b1:8c:7c:e8:e8:
                    5a:4a:0a:60:d2:dd:8e:1c:2b:59:5a:14:8f:6c:2c:
                    80:ba:70:a3:d7:e4:51:b9:ce:ca:f5:92:20:a1:9f:
                    6f:55:de:87:63:0d:06:d2:1d:3e:56:ad:87:4b:b7:
                    6e:7f:1c:cf:55:e0:a8:8d:03:1e:eb:92:f4:82:8a:
                    29:b5:a7:2e:99:35:ee:85:52:ff:16:e3:2e:51:dd:
                    ac:1e:af:df:0d:33:fe:06:8e:d8:a2:f3:d7:e6:90:
                    fc:5a:31:83:d3:5c:c7:4a:d6:ea:7f:f5:01:01:82:
                    01:bb:c1:0f:35:b3:a0:95:c2:f0:0e:99:58:3b:fa:
                    32:00:d9:98:a2:e8:eb:1a:11:e6:11:1a:cc:84:c7:
                    a3:f7:cc:f2:c8:cc:95:dd:4e:1a:e4:14:32:21:f4:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9E:9B:5A:04:48:3B:AF:29:79:4B:3A:E2:99:C8:8A:5F:5A:14:6C
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:6c:a2:f4:63:9a:de:cf:92:36:b5:46:20:b2:39:da:0f:
         c3:f5:a4:7b:21:b8:10:3b:92:06:df:8c:c5:fa:c6:78:fd:37:
         6f:0e:8e:77:e8:01:42:97:b3:a0:93:8b:1f:f1:a0:b3:84:5c:
         d7:09:f5:7a:49:f1:44:94:65:6a:1a:8c:6d:bd:10:af:96:ec:
         81:9f:60:7b:c2:ac:6f:f5:01:b1:22:8e:f1:60:d8:cd:dc:28:
         a4:45:98:43:d6:2d:77:d9:d2:d2:0b:ba:22:8d:c6:8f:3d:77:
         3d:11:78:d1:2a:78:49:97:a3:dc:d1:2e:a4:57:c4:fa:7d:9f:
         65:a6:4d:e6:55:96:ef:d7:43:6a:da:42:a4:03:fe:54:3e:a0:
         a6:84:63:38:15:04:40:5e:96:c7:55:af:47:cd:63:cb:30:e4:
         84:68:a1:e3:79:c5:97:92:8d:a5:2c:d6:50:cd:a2:13:73:37:
         f0:25:33:c3:9f:db:27:25:c8:9a:19:f7:b8:88:77:d2:ea:f7:
         5d:0f:52:6a:c2:eb:f9:72:2a:26:12:36:ca:49:39:6d:8a:b9:
         73:85:ae:d7:53:55:3f:31:fc:e4:d0:89:0f:6f:54:d5:57:85:
         c9:c5:52:7c:7d:bb:14:e2:3a:ae:7e:18:49:6d:6a:1d:6a:e3:
         3b:85:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:44 2026 by rpki-client