Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
File:                     G7ThccrEGeYWe6On1yU8dhYxoo0.mft (raw, json)
Hash identifier:          Es7ldZ3WXHIsGiAfTepj/cBHU/g2uxv4X2TQ84JvHb8=
Subject key identifier:   45:53:F9:A8:F0:BC:69:40:D1:73:44:0C:9C:15:76:51:26:DA:95:BF
Authority key identifier: 1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D
Certificate issuer:       /CN=A91259CA/serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
Manifest number:          FD
Signing time:             Thu 23 Jul 2026 08:00:11 +0000
Manifest this update:     Thu 23 Jul 2026 08:00:10 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:10 +0000
Files and hashes:         1: G7ThccrEGeYWe6On1yU8dhYxoo0.crl (hash: 4AFgLj689DzYGw3Y/WzbaDE1tGxFzT7PHOVXGEQt2os=)
                          2: 2031308808A111F09B131E5BC4F9AE02.roa (hash: bfZHmy0//lzWJ0TH2iq1RiILBXFH7y1Z1TmJFXwbV9c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl
                          rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91259CA, serialNumber=1BB4E171CAC419E6167BA3A7D7253C761631A28D
        Validity
            Not Before: Jul 23 08:00:10 2026 GMT
            Not After : Jul 30 08:00:10 2026 GMT
        Subject: CN=6a61ca0a-67c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:ce:d6:f5:5d:7c:59:44:30:d5:ed:7c:0f:
                    77:4e:68:28:ec:6f:ca:a9:02:81:b2:d7:44:94:b7:
                    65:ca:aa:cc:87:3b:9e:f1:bd:3b:f4:54:13:d8:db:
                    c5:c1:6b:65:37:7a:37:72:2d:8a:78:08:0a:d4:3f:
                    88:74:e7:df:c7:d3:04:34:65:34:41:fe:8f:59:58:
                    eb:b4:fc:06:73:b1:52:1f:0f:d1:35:de:dd:27:24:
                    ac:43:ad:5d:90:0f:81:0b:8e:25:5a:ba:08:e5:dc:
                    bc:6a:c4:8d:be:bf:eb:d2:86:ae:05:99:b5:af:94:
                    ac:c1:2d:85:df:77:e3:dd:2a:41:cf:6c:84:98:22:
                    ca:81:da:0d:47:c0:11:6e:b3:3e:87:74:be:c0:cb:
                    6b:c2:18:17:9c:42:c6:57:00:d0:bc:24:0b:86:f8:
                    54:1c:ee:a9:e2:c2:cb:7d:e8:a0:65:84:0d:c9:36:
                    ba:7d:05:76:e5:3c:d4:bc:83:70:18:34:2d:a0:3f:
                    1c:63:66:27:9f:6a:25:9b:27:a7:79:de:c9:08:e9:
                    b4:99:15:c5:f2:f1:ae:7c:44:9b:a0:e5:f8:8e:89:
                    6a:10:65:45:39:a5:57:ab:24:aa:c4:35:a4:c3:df:
                    5e:75:e2:c9:d5:39:76:64:2a:a7:db:f0:77:d6:cf:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:53:F9:A8:F0:BC:69:40:D1:73:44:0C:9C:15:76:51:26:DA:95:BF
            X509v3 Authority Key Identifier:
                keyid:1B:B4:E1:71:CA:C4:19:E6:16:7B:A3:A7:D7:25:3C:76:16:31:A2:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G7ThccrEGeYWe6On1yU8dhYxoo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91259CA/A9F2722E08A011F0B158565AC4F9AE02/G7ThccrEGeYWe6On1yU8dhYxoo0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:37:9b:49:b5:ba:56:f4:4b:2d:bf:70:4b:27:4a:c8:59:e3:
         9c:9b:56:4f:b5:9b:e8:8b:cc:97:ba:7a:24:41:76:7e:31:a2:
         4e:77:6d:ca:8f:5f:67:a1:ff:ca:7c:05:22:c4:03:64:81:99:
         c3:4a:8c:e7:44:98:99:72:70:d0:99:42:55:35:09:c9:7a:bf:
         c1:5b:72:d2:51:24:d5:d9:2d:ee:74:72:99:42:1b:1c:79:5d:
         03:d1:5a:1d:27:1b:f9:23:0c:86:ab:f6:03:16:be:45:fc:d8:
         57:ba:87:92:a5:dc:59:67:9a:ed:72:6e:b6:f9:1e:a1:6a:54:
         b2:ac:2a:05:fb:a2:5d:69:a6:7a:5b:31:63:63:16:fa:22:6d:
         31:e1:76:c9:09:b1:ef:b6:c2:7f:16:bd:af:a5:e3:7a:94:41:
         d5:c3:c9:c2:89:9d:56:4e:20:d1:12:9a:26:d5:b4:1b:8a:ca:
         bc:80:a8:29:d6:8a:5c:12:1e:22:4b:32:80:99:b0:6d:9f:3b:
         bd:ca:a3:99:67:21:49:24:46:5f:05:cc:cf:04:c8:65:d6:d1:
         32:34:ca:d9:44:d8:47:6b:90:21:67:63:4c:f4:be:6d:68:80:
         9d:1c:8a:93:55:f9:4f:12:15:e5:d7:e7:f9:a4:0b:43:ff:d9:
         02:15:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:00 2026 by rpki-client