Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
File:                     GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft (raw, json)
Hash identifier:          /2JGHlbPvKGmXlGvdB+PzxM9e+IxGdJmJAfFDfGqaN4=
Subject key identifier:   79:7A:F1:BF:03:CC:8C:95:78:A2:99:40:E2:2D:69:AB:DE:CE:60:C7
Authority key identifier: 18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F
Certificate issuer:       /CN=A9126BDE/serialNumber=1899AA6415670533224938FAA6655296183E438F
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
Manifest number:          77
Signing time:             Thu 23 Jul 2026 09:44:42 +0000
Manifest this update:     Thu 23 Jul 2026 09:44:41 +0000
Manifest next update:     Thu 30 Jul 2026 09:44:41 +0000
Files and hashes:         1: GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl (hash: 1a2yY2jintW0yiEDaydOdJ2bwK3IHL8GIKpdPyuxul0=)
                          2: 5325F364D3FF11F09B7E5281C4F9AE02.roa (hash: 0DoVxQ7M0n3cZaqCMc5G8GkmP8gnmF47PhLipr8RTHg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=1899AA6415670533224938FAA6655296183E438F
        Validity
            Not Before: Jul 23 09:44:41 2026 GMT
            Not After : Jul 30 09:44:41 2026 GMT
        Subject: CN=6a61e28a-e4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:2c:aa:2f:e5:fb:3b:46:76:8e:74:13:48:
                    b4:f4:68:a7:6d:c2:ad:04:d6:3b:e3:f5:64:7b:f0:
                    5c:6f:f5:37:0e:cc:8a:b3:44:d2:22:ef:c3:be:32:
                    29:49:e7:79:08:74:b2:19:20:91:48:d5:e6:62:67:
                    77:c3:46:e6:c0:63:44:00:60:c3:5f:5d:9a:bd:ea:
                    ce:b3:66:d7:75:74:f8:45:22:52:dc:94:c6:4f:bd:
                    01:74:22:2c:ba:4c:62:83:c2:98:04:2b:62:e0:8a:
                    17:c1:04:52:18:57:ce:88:2b:a0:aa:1d:e5:06:64:
                    8c:6d:dc:55:e8:38:8c:ed:7c:c1:83:47:5b:41:e1:
                    c8:b3:fc:b8:f9:85:d8:b1:cf:b2:46:8c:eb:eb:25:
                    86:5d:71:a5:06:7f:3c:b4:12:10:df:e7:1a:b2:b3:
                    a7:00:96:7b:6a:a0:d2:13:e7:70:5d:69:a5:60:b1:
                    ed:23:31:f1:16:8b:74:46:1c:dc:7b:e4:21:4d:c4:
                    2a:6a:a3:7b:d9:62:da:35:4e:75:84:76:98:6d:53:
                    75:e8:61:37:40:ab:6a:49:fb:d4:9d:78:cb:d3:38:
                    95:a0:21:9a:b7:24:17:42:03:d4:79:7c:55:a5:ef:
                    08:dd:cb:61:ca:52:0a:a7:ba:c9:ce:d9:d5:ff:5a:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7A:F1:BF:03:CC:8C:95:78:A2:99:40:E2:2D:69:AB:DE:CE:60:C7
            X509v3 Authority Key Identifier:
                keyid:18:99:AA:64:15:67:05:33:22:49:38:FA:A6:65:52:96:18:3E:43:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GJmqZBVnBTMiSTj6pmVSlhg-Q48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/39BC0498D3FC11F0A70D6432C4F9AE02/GJmqZBVnBTMiSTj6pmVSlhg-Q48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:3d:69:a0:05:dc:3e:fd:16:c4:11:f1:3d:05:7a:8e:e8:
         16:8d:00:0d:67:d3:67:6b:7e:a3:8c:cb:11:db:d5:ab:6c:8c:
         4e:87:42:5a:71:3c:06:da:2c:bc:53:0b:8e:6c:f2:ba:b8:f2:
         e2:a8:6b:4a:38:04:82:8a:f2:6b:fe:11:e0:a0:4b:e9:64:4b:
         6a:a0:71:a3:64:c5:95:14:54:4f:86:8e:a2:53:20:f4:f4:1d:
         68:31:c1:0e:21:c8:5e:0a:ac:a3:a8:1f:9d:29:91:c0:72:14:
         f3:29:e9:73:6a:81:7d:01:ea:60:e3:7a:bd:e6:fc:9b:f7:aa:
         7c:76:4f:34:e7:27:d3:45:d6:b7:68:ff:3d:ef:87:86:e5:09:
         85:f1:12:e4:fe:d0:1c:76:2f:d5:9e:a0:13:cc:c5:0d:a9:70:
         79:a6:bf:05:5c:62:f7:47:85:ed:0e:b3:12:e4:69:88:b9:d1:
         74:a9:47:7a:41:ce:0c:8b:c3:e2:e7:a0:b2:ce:8f:91:73:d2:
         29:15:a7:13:38:e7:4c:5e:ad:c5:45:39:35:bb:17:23:06:b4:
         14:8c:51:22:3c:e9:78:4a:df:9c:53:d1:2a:e1:55:60:4f:cc:
         31:b0:b2:7c:72:47:6a:28:57:95:ce:0d:d0:6b:bf:b7:cf:d3:
         c2:ba:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:38 2026 by rpki-client