Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
File:                     gYE9avls8KB0gHHNux4nD2tcYRM.mft (raw, json)
Hash identifier:          VyRAwmxj6P4C9yS5HKvITMJSAMIrAGZSipC1TeeXh4M=
Subject key identifier:   65:1F:D4:9C:B0:48:11:A9:B9:B6:2A:BD:8D:5B:1D:32:ED:AD:F0:EC
Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13
Certificate issuer:       /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
Certificate serial:       0CD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
Manifest number:          0CB4
Signing time:             Wed 22 Jul 2026 18:49:49 +0000
Manifest this update:     Wed 22 Jul 2026 18:49:48 +0000
Manifest next update:     Wed 29 Jul 2026 18:49:48 +0000
Files and hashes:         1: gYE9avls8KB0gHHNux4nD2tcYRM.crl (hash: 97bv9ynSWaiYL7fZNGadAKdOD8efl/BniuXKbxX5JPw=)
                          2: 1D77B4081BD911EAB49CC840C4F9AE02.roa (hash: aM0okos6HP2lmuHFZTzsM6czS1dLwWW/PzQ8J/OHsFE=)
                          3: FE677A947F3611F1AEABD9D88FA30FBC.roa (hash: xXKNP1utbvVSzFEm+p/CVGumail8NouJOePObgsIKAg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl
                          rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3281 (0xcd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128DE9, serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113
        Validity
            Not Before: Jul 22 18:49:48 2026 GMT
            Not After : Jul 29 18:49:48 2026 GMT
        Subject: CN=6a6110cc-0cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:43:cd:fb:40:ed:fc:06:c1:b3:c2:27:ae:
                    50:02:d0:2c:8a:25:33:c0:ce:14:e2:d7:9d:18:e7:
                    5a:85:98:68:ea:0b:36:19:bf:e5:9c:f3:93:1c:41:
                    14:81:fe:43:de:5c:df:8e:a7:64:3e:47:72:88:7e:
                    a2:a7:33:98:74:8f:1e:28:5d:1a:fd:88:6a:c9:af:
                    1e:dc:c3:0f:c1:74:5c:20:b4:b1:a4:db:c0:05:42:
                    9e:92:e5:3f:ce:0c:f5:ee:0d:f2:1d:2a:29:e6:33:
                    ff:6d:e9:fd:8a:f8:4c:39:06:73:29:cd:b2:18:00:
                    1e:14:30:69:ff:d2:e5:b3:37:75:e6:45:25:6d:ba:
                    13:d6:66:9d:c0:8a:ff:fc:59:b2:e2:e1:4d:fc:72:
                    79:a6:6f:e5:f8:b9:af:da:81:45:a7:96:67:ae:6f:
                    b9:8e:b4:01:b7:60:f0:e2:8b:6e:44:0e:56:98:c1:
                    04:ae:a4:68:ad:d6:2c:cd:b3:6b:d1:19:3a:5d:6c:
                    ce:f3:08:1d:80:6f:f5:18:dc:f9:0c:d9:38:ad:f1:
                    d3:1b:d7:c2:78:a1:a8:5d:c6:e0:25:ec:32:2d:b9:
                    89:a6:10:79:be:d6:6a:10:b6:0a:b5:89:89:28:41:
                    a9:07:08:47:47:52:43:9a:12:d5:53:cf:d0:23:c4:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1F:D4:9C:B0:48:11:A9:B9:B6:2A:BD:8D:5B:1D:32:ED:AD:F0:EC
            X509v3 Authority Key Identifier:
                keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5d:49:82:66:e6:af:b7:46:82:9f:ee:17:18:a5:05:50:0f:
         77:87:2f:e7:8e:5d:06:f6:6a:cf:b6:80:08:b3:ae:2b:e3:e2:
         ce:ba:b5:7f:3a:ac:53:76:96:3e:da:c2:be:00:1b:b7:48:ce:
         de:94:0e:63:31:59:6e:70:08:66:b8:8c:8f:7b:b5:c0:1a:32:
         bf:a0:17:4e:27:20:12:3d:98:01:54:e2:98:a5:fa:b4:0f:ec:
         46:b4:48:90:41:ce:07:67:20:45:d6:c9:87:cb:58:ae:da:dc:
         17:db:90:9e:d6:27:b3:50:4f:53:13:b8:62:d4:28:b1:06:ed:
         6c:77:05:cd:64:b2:42:d9:b7:85:a9:5a:51:75:cf:8f:81:6d:
         d2:a9:53:3c:31:6d:b4:50:b4:a5:1f:ba:1c:cb:b4:e3:dd:db:
         82:01:8b:fa:f7:49:e0:31:2f:00:c4:f2:96:46:70:b4:38:0c:
         56:00:2d:bd:c0:3c:63:67:f1:8c:04:91:d8:ca:48:ca:4f:da:
         e3:54:e3:b3:95:64:d3:93:14:33:a7:76:a8:6b:38:fa:e8:d0:
         16:52:78:cc:f1:83:6c:52:ad:43:7f:3d:33:5c:dc:e2:f5:5b:
         0b:58:38:00:c3:e2:6a:23:e2:7b:03:e6:3e:35:1b:b1:2a:02:
         59:a6:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:24 2026 by rpki-client