Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
File:                     gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json)
Hash identifier:          e/UqJHUczDy5iLqObYrN8D4carkDFIIZa5nS3VUSBO8=
Subject key identifier:   50:66:4E:7B:01:39:55:74:BE:A3:11:82:8C:62:B4:4A:2E:08:5D:DC
Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D
Certificate issuer:       /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
Certificate serial:       1D37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
Manifest number:          1D20
Signing time:             Wed 22 Jul 2026 16:13:16 +0000
Manifest this update:     Wed 22 Jul 2026 16:13:15 +0000
Manifest next update:     Wed 29 Jul 2026 16:13:15 +0000
Files and hashes:         1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: YoQPY6RPCwgG1V3uMkhHBGZ2jVM6wGLZ+fcBgir2KGw=)
                          2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: 83YZzYxEIIXyh0cYGM9jrxbckZK92FPWPHsnsvXXSF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl
                          rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7479 (0x1d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
        Validity
            Not Before: Jul 22 16:13:15 2026 GMT
            Not After : Jul 29 16:13:15 2026 GMT
        Subject: CN=6a60ec1c-81c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:f0:dd:2f:e8:cd:cc:7e:6c:bf:d0:2f:a5:
                    c2:c4:c2:23:df:d6:9e:4a:94:e0:aa:b5:34:76:f0:
                    5a:f2:4f:36:90:37:c5:48:c6:2e:91:37:48:02:a9:
                    4f:28:68:cd:d9:d3:7d:74:06:94:e5:f6:49:8e:1e:
                    0a:85:a4:9a:b0:87:4e:f8:e7:48:ba:50:82:63:28:
                    88:81:2d:bd:30:57:4c:e2:25:c9:21:f7:d4:2c:ff:
                    f8:76:32:e2:ae:c4:7d:60:d8:6b:91:64:27:f8:17:
                    66:c8:d3:9d:70:26:de:7a:f3:cc:e4:11:69:99:c9:
                    44:f7:09:a0:26:f7:b6:09:d1:3d:0b:a7:fc:86:71:
                    17:8b:c0:43:98:b7:37:70:ad:56:a9:38:79:49:64:
                    4c:d1:a4:7c:b9:e0:5a:1f:bc:3d:e9:0f:7a:e6:bf:
                    b8:5c:df:be:21:93:6f:61:18:3d:4e:3e:be:3b:00:
                    e9:14:a2:68:e3:73:16:ff:fa:35:13:90:84:d0:2e:
                    c4:a0:0e:9e:3b:d2:c5:53:22:3c:1d:ed:33:67:aa:
                    17:e7:60:62:e4:c7:3f:4c:79:0d:9d:de:bb:40:39:
                    41:80:7c:b5:6a:b2:d8:30:d9:38:53:c9:c3:37:48:
                    1a:16:66:44:55:1c:36:80:a7:b5:aa:76:2e:43:c7:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:66:4E:7B:01:39:55:74:BE:A3:11:82:8C:62:B4:4A:2E:08:5D:DC
            X509v3 Authority Key Identifier:
                keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5a:17:7a:7e:fc:73:9a:4c:a7:13:6d:05:89:9a:17:5a:b1:
         a5:4e:f9:25:ed:f4:95:cc:2f:91:71:23:ee:d3:ed:9d:93:ed:
         73:74:50:29:ab:70:25:a2:da:90:e6:d2:23:6a:ac:bb:86:cc:
         90:57:85:e6:00:7f:37:17:6b:6b:c9:3c:77:69:c6:64:5d:32:
         30:67:94:66:88:0f:6e:c5:5c:82:bf:a7:8a:df:1c:b9:78:5a:
         84:81:63:6a:d8:2b:90:4f:52:bc:4d:5b:db:0a:e6:6f:b0:6d:
         22:e1:76:71:48:c3:a6:5a:4a:f7:ab:8c:59:0f:59:44:2f:b1:
         5c:0a:57:54:89:c1:c7:76:b8:d6:02:45:bc:f9:f0:9c:49:da:
         1c:11:ff:2f:0e:a9:99:2c:02:1a:e4:91:66:8e:61:d9:ad:f6:
         2f:b3:33:4c:81:49:44:ac:34:2a:fa:cb:52:59:d2:37:bf:b5:
         71:4e:cc:ad:31:62:b0:0c:a0:c8:67:7c:c6:26:26:95:7d:bb:
         2f:2a:1a:62:5b:34:82:f5:4c:4e:c4:7a:5c:34:bc:47:de:e4:
         1e:d7:42:aa:bf:77:ed:64:2a:62:fd:98:d7:19:58:cb:19:63:
         8b:30:25:6f:36:33:ae:98:80:a3:90:42:7b:0a:d1:35:c8:16:
         c7:77:92:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx
OUFDRjZEOEQwHhcNMjYwNzIyMTYxMzE1WhcNMjYwNzI5MTYxMzE1WjAYMRYwFAYD
VQQDEw02YTYwZWMxYy04MWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl0rw3S/ozcx+bL/QL6XCxMIj39aeSpTgqrU0dvBa8k82kDfFSMYukTdIAqlP
KGjN2dN9dAaU5fZJjh4KhaSasIdO+OdIulCCYyiIgS29MFdM4iXJIffULP/4djLi
rsR9YNhrkWQn+BdmyNOdcCbeevPM5BFpmclE9wmgJve2CdE9C6f8hnEXi8BDmLc3
cK1WqTh5SWRM0aR8ueBaH7w96Q965r+4XN++IZNvYRg9Tj6+OwDpFKJo43MW//o1
E5CE0C7EoA6eO9LFUyI8He0zZ6oX52Bi5Mc/THkNnd67QDlBgHy1arLYMNk4U8nD
N0gaFmZEVRw2gKe1qnYuQ8dEYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBmTnsB
OVV0vqMRgoxitEouCF3cMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz
QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi
WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjJBMC84MDMyQ0JGMEUzQTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdU
S29oUlZjUXgwek1aclBiWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnloXen78c5pMpxNtBYmaF1qxpU75Je30lcwvkXEj7tPtnZPtc3RQKatwJaLa
kObSI2qsu4bMkFeF5gB/Nxdra8k8d2nGZF0yMGeUZogPbsVcgr+nit8cuXhahIFj
atgrkE9SvE1b2wrmb7BtIuF2cUjDplpK96uMWQ9ZRC+xXApXVInBx3a41gJFvPnw
nEnaHBH/Lw6pmSwCGuSRZo5h2a32L7MzTIFJRKw0KvrLUlnSN7+1cU7MrTFisAyg
yGd8xiYmlX27LyoaYls0gvVMTsR6XDS8R97kHtdCqr937WQqYv2Y1xlYyxljizAl
bzYzrpiAo5BCewrRNcgWx3eSuw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:49 2026 by rpki-client