Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
File:                     15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json)
Hash identifier:          JzN8QCHG3z2R3QKJceemGPY2von6XUinwN8kuQiPICU=
Subject key identifier:   DB:36:D6:24:CB:F3:1F:13:BC:E1:8F:C6:95:9C:A4:EF:91:CE:90:46
Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2
Certificate issuer:       /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
Manifest number:          0103
Signing time:             Thu 23 Jul 2026 07:53:48 +0000
Manifest this update:     Thu 23 Jul 2026 07:53:47 +0000
Manifest next update:     Thu 30 Jul 2026 07:53:47 +0000
Files and hashes:         1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: NzZIQvTNeHuyzYKbci7e2yCstlZeBJJryYrjoD3jGG0=)
                          2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: gfOD6URsp7SaHqbX7i3uTtfgx5nJhXl7AmIXZ2sSe24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl
                          rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2
        Validity
            Not Before: Jul 23 07:53:47 2026 GMT
            Not After : Jul 30 07:53:47 2026 GMT
        Subject: CN=6a61c88c-7e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:05:60:59:c8:cc:ad:f2:31:f9:38:5f:8c:
                    40:36:87:84:9c:37:9f:52:41:76:ec:04:bc:b8:57:
                    03:22:b0:c3:28:97:c1:ee:b9:29:ac:c5:77:d9:6d:
                    88:75:80:39:68:cb:f6:0c:59:68:2a:b7:ee:86:dd:
                    1e:58:c4:13:08:95:43:43:b7:33:98:3b:9e:d1:d0:
                    04:f6:1d:8b:ee:f5:d2:4e:87:fc:e8:4e:11:9f:79:
                    7b:97:3a:dc:b3:44:48:22:14:66:ec:9d:00:34:15:
                    66:2e:9f:6b:c3:40:ef:c8:94:22:d4:02:e0:64:32:
                    4d:7c:61:47:ab:79:66:f2:75:90:72:ec:04:3a:25:
                    19:61:2e:c9:06:ef:e4:f9:2d:3d:44:b6:10:2e:fe:
                    2b:c0:70:ef:f0:a9:c3:2f:24:6f:84:c5:6e:e4:9d:
                    7d:47:e6:bb:cc:15:8c:06:49:2e:a8:a5:0f:31:83:
                    3c:bf:d8:cb:6d:50:71:9e:e4:a4:29:d5:35:7c:6d:
                    5d:32:a5:e0:1a:dd:06:a1:8a:46:89:74:17:3d:0c:
                    0c:40:ed:d4:e7:d4:ae:86:34:b0:f0:de:4c:a9:09:
                    76:97:0c:69:29:a5:6c:57:45:c5:ad:7c:af:9c:e7:
                    74:eb:79:8d:05:db:c9:e3:96:5d:f7:d4:e7:c9:bc:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:36:D6:24:CB:F3:1F:13:BC:E1:8F:C6:95:9C:A4:EF:91:CE:90:46
            X509v3 Authority Key Identifier:
                keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:14:41:5f:d7:d4:e2:7d:45:de:0c:21:06:13:90:7a:cd:af:
         ee:eb:72:e8:f0:c1:6e:fd:fa:f5:05:cc:f0:16:66:47:70:68:
         35:8f:c5:fa:84:de:e7:0e:03:3f:d4:f7:15:ef:dc:1f:89:b0:
         a4:a9:73:76:4a:ec:4f:2e:a5:2e:6f:05:20:d5:c1:33:fb:6c:
         9f:fb:32:0b:6f:b1:dc:f5:95:d4:ea:75:67:78:60:8e:98:f4:
         99:d4:40:92:21:a9:13:72:6c:5f:49:7a:ed:4c:05:ee:37:30:
         e5:5e:23:b5:32:1f:19:ce:28:a6:ae:2c:f9:8d:ad:17:eb:64:
         22:58:61:82:71:21:07:c5:cc:ae:c9:3b:f1:af:0d:9f:59:2e:
         e6:19:c3:c2:e7:7d:2c:5f:13:cc:79:43:8e:d7:5c:33:1f:2b:
         25:b8:3d:0a:f2:92:35:74:16:85:d6:d7:5c:64:82:5f:6f:24:
         78:58:ed:39:95:4b:7c:dc:73:06:ab:a5:a8:0e:b4:b8:df:3a:
         d6:80:77:95:4c:9c:05:17:63:a9:a8:3f:fd:8f:0a:f6:d0:a1:
         22:cd:ff:a7:b2:c7:03:33:83:04:40:f9:8a:d3:cc:dd:0e:02:
         10:a1:43:1a:17:7d:02:09:5e:42:59:0b:e6:a7:90:bb:25:11:
         05:d5:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:53 2026 by rpki-client