Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
File:                     Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft (raw, json)
Hash identifier:          jHkVqMQIsTIWlw7QWCkey/lJ5+XjdwhB0c8LRzniRqI=
Subject key identifier:   43:33:49:B4:D9:53:02:6F:93:15:E7:D1:7E:67:06:79:B1:E6:4B:0F
Authority key identifier: 19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D
Certificate issuer:       /CN=A913E0D7/serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
Manifest number:          02D3
Signing time:             Thu 23 Jul 2026 02:15:30 +0000
Manifest this update:     Thu 23 Jul 2026 02:15:30 +0000
Manifest next update:     Thu 30 Jul 2026 02:15:30 +0000
Files and hashes:         1: Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl (hash: QLFkQJCLMqUWTf6TVMHx0IHsiK+QXQm1sZXEDd8tiGE=)
                          2: 12326B1E3ED211EDAE00DB18C4F9AE02.roa (hash: EMxgdpPufi1Og/AIiKXBzoLrbmFj4laz/LZzew8P9yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl
                          rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E0D7, serialNumber=19BABBCF4C9999300AC059C653C290842F6A660D
        Validity
            Not Before: Jul 23 02:15:30 2026 GMT
            Not After : Jul 30 02:15:30 2026 GMT
        Subject: CN=6a617942-4240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:60:d6:1e:4c:18:b9:44:a9:c7:ce:7f:2b:
                    e9:68:1b:69:27:c2:00:15:ad:88:5c:71:cd:61:d3:
                    3d:bd:63:38:96:1b:64:37:50:25:ec:f4:0b:b6:b8:
                    72:a9:de:8c:b4:44:27:fc:79:a4:c3:39:35:d8:ff:
                    39:33:97:00:57:0b:40:d0:8a:07:03:1f:a3:86:82:
                    fb:b4:d9:dd:64:43:9d:9b:01:62:0c:a1:8c:c9:9b:
                    79:fe:f2:47:db:0d:c4:8f:c5:6d:e9:45:82:35:fa:
                    7b:13:43:8e:19:a8:8f:8b:d3:e7:4e:d6:ff:34:00:
                    09:93:3e:66:48:a8:a8:a4:8d:14:ab:e3:87:3b:87:
                    c5:b2:0e:ba:f1:15:71:1d:1d:d1:25:52:ff:64:ce:
                    2b:13:64:3f:87:9c:b7:26:91:eb:22:82:a8:f7:f6:
                    d5:c1:9b:a0:5a:19:30:09:96:e8:e4:ac:4f:b0:bf:
                    ba:1d:8f:3a:27:72:e8:b2:16:94:af:f9:57:d2:77:
                    35:fd:ff:2a:91:bf:2c:ea:c1:d9:38:71:96:1f:e4:
                    9d:d4:3c:c3:9c:ca:42:28:ac:63:0d:62:56:b0:28:
                    b0:5f:48:b2:c4:85:04:bd:1a:8f:2b:2d:c6:4e:52:
                    a8:1c:1d:7f:35:06:6d:4f:1b:a4:91:c7:9a:32:1d:
                    d1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:33:49:B4:D9:53:02:6F:93:15:E7:D1:7E:67:06:79:B1:E6:4B:0F
            X509v3 Authority Key Identifier:
                keyid:19:BA:BB:CF:4C:99:99:30:0A:C0:59:C6:53:C2:90:84:2F:6A:66:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E0D7/8FEF84043ECF11EDA5F1FA17C4F9AE02/Gbq7z0yZmTAKwFnGU8KQhC9qZg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:aa:1e:21:41:9e:f4:6f:4c:bb:db:d2:af:f4:14:45:5c:
         81:85:f5:dc:ef:5e:2d:d3:51:0a:76:85:69:e1:ca:37:95:bd:
         0d:32:72:0b:93:30:51:de:1e:df:63:b3:a3:ae:e5:c3:d0:20:
         db:f1:4f:86:ee:30:c9:e8:98:d3:81:47:8d:f9:22:07:fc:bf:
         d8:44:ff:ae:63:b9:7f:4a:b3:cd:11:d9:0e:39:d3:54:14:98:
         60:6b:d8:4f:46:4d:d5:f9:f6:11:c8:53:8d:36:e5:23:3c:63:
         83:c9:93:be:9b:49:9d:cc:99:e7:d4:06:a3:18:a0:98:c3:2e:
         1d:89:1f:e2:64:5e:34:1a:f9:1a:1c:c7:a8:62:bb:f4:6b:a7:
         cc:f0:d6:d4:e1:1c:13:6c:01:f4:f0:bd:18:2a:e9:9a:f2:5d:
         b6:43:10:97:de:35:2f:1a:8d:7c:60:af:75:41:5f:9c:b4:5b:
         e7:f8:b4:1e:a7:b0:0f:4c:a3:08:82:66:f4:6c:02:80:bf:14:
         ed:d7:74:0c:2a:9e:e5:14:86:d2:78:7c:28:75:42:7e:30:49:
         cc:f6:c2:b7:59:b2:4b:60:76:0d:fc:8a:a5:46:8b:08:12:3f:
         c3:39:c4:d3:2e:f6:83:d5:5f:99:64:cc:b2:cf:8b:d9:29:95:
         a8:9e:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:07 2026 by rpki-client