Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
File:                     GBAcuEWHASNcPxMzmuWp2zx1skA.mft (raw, json)
Hash identifier:          +9iTgnk3B/ZGY0wwylMNUplWICDbGks0l/qUB035eVE=
Subject key identifier:   24:5C:86:86:EA:31:AE:AA:85:7C:9A:B1:F1:B1:7B:64:5D:24:48:E3
Authority key identifier: 18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40
Certificate issuer:       /CN=A9144D58/serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
Manifest number:          0110
Signing time:             Thu 23 Jul 2026 07:41:25 +0000
Manifest this update:     Thu 23 Jul 2026 07:41:24 +0000
Manifest next update:     Thu 30 Jul 2026 07:41:24 +0000
Files and hashes:         1: GBAcuEWHASNcPxMzmuWp2zx1skA.crl (hash: UBoYHSPAA4hdJMhq1Y/SP7g8f24JB3mI8/VKkGfKFVw=)
                          2: 5BFE0C8AE83A11EFB30F7245C4F9AE02.roa (hash: wkTh9Y52qCH1kUygnzzHUYqH5OavzN/aAEX9D+Z5fho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl
                          rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144D58, serialNumber=18101CB8458701235C3F13339AE5A9DB3C75B240
        Validity
            Not Before: Jul 23 07:41:24 2026 GMT
            Not After : Jul 30 07:41:24 2026 GMT
        Subject: CN=6a61c5a5-67e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:38:41:7a:0f:77:76:1b:c0:86:0a:13:d4:
                    26:86:ca:fd:4c:f2:d8:a9:77:46:b2:79:4f:82:7f:
                    83:52:41:4a:22:e0:e2:90:00:00:8f:5d:7f:01:50:
                    a4:7b:71:ad:ff:32:19:dc:45:25:6d:53:99:75:9e:
                    8c:dc:97:d4:b1:a8:28:86:55:cc:fd:b0:0a:a0:af:
                    0a:7c:94:59:f5:75:ed:25:24:3c:b2:23:5a:e5:dd:
                    ae:06:b2:15:c8:4e:45:7f:32:9c:75:ae:da:e3:f3:
                    71:69:01:ec:74:99:b3:a5:d4:be:de:ff:61:5f:2c:
                    3b:2c:12:b6:7d:e2:52:e2:9d:28:7c:c1:d2:5c:fb:
                    36:dd:48:31:d9:68:6e:e6:2f:1f:79:ca:78:5b:ae:
                    f8:86:a7:f1:31:89:c0:ef:df:c6:a2:f8:c6:51:73:
                    4d:3a:9d:87:15:66:87:6d:2e:68:4c:0a:37:b8:fe:
                    bd:6f:37:43:90:10:52:5b:39:be:c2:f1:73:b3:00:
                    d1:da:e0:72:da:a6:b7:af:f4:4f:b9:24:f5:5e:31:
                    2b:35:90:b8:3c:f3:39:a3:ee:66:d2:b5:8a:34:0e:
                    c2:40:7e:bf:fd:ad:7a:d9:54:aa:82:e1:8e:a6:30:
                    37:e4:6c:24:fb:ca:d5:67:08:5f:43:b2:95:59:cb:
                    1c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5C:86:86:EA:31:AE:AA:85:7C:9A:B1:F1:B1:7B:64:5D:24:48:E3
            X509v3 Authority Key Identifier:
                keyid:18:10:1C:B8:45:87:01:23:5C:3F:13:33:9A:E5:A9:DB:3C:75:B2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBAcuEWHASNcPxMzmuWp2zx1skA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144D58/44C73FD6E82211EFA8973F84C4F9AE02/GBAcuEWHASNcPxMzmuWp2zx1skA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:98:ad:5f:42:ff:74:36:a0:66:cf:ca:46:d4:28:b3:5d:01:
         29:e4:34:3a:e8:6d:0d:64:cf:7f:3a:03:75:71:b1:e4:e1:c9:
         98:1e:b8:5f:0c:bb:26:4e:32:f5:4c:6b:ab:49:bf:f5:31:22:
         41:e3:3e:4a:95:9b:16:8f:db:ae:27:1e:5a:74:84:16:9b:68:
         41:55:bd:76:01:5f:2b:ab:9a:b2:fc:de:a7:8b:b5:e5:7b:92:
         3c:b0:4c:09:74:72:19:7a:fd:98:bf:0e:c9:db:bb:52:ad:33:
         27:b8:65:a0:65:32:bc:c1:85:d4:63:f2:76:a4:aa:b0:03:a1:
         e1:5c:4d:8a:f6:d0:ee:f7:02:79:26:e3:81:df:3c:14:b4:76:
         f7:0d:e7:91:1c:e3:e0:e5:25:a8:fe:c5:5d:69:1d:c5:90:bf:
         e2:3f:89:90:f0:bd:e5:95:fd:3d:6e:ce:ac:8e:f8:b7:99:7d:
         de:66:4c:2b:dd:00:9e:2f:4a:66:98:9e:e6:5b:bc:31:fc:27:
         ca:2a:45:f3:a2:df:26:02:1a:fe:8b:b5:91:f3:b9:e6:9a:9a:
         a0:f2:2f:83:b9:b6:1a:8e:d8:d5:94:ef:84:40:c3:d4:21:d7:
         e7:c2:76:b8:08:dc:6a:be:2d:2e:17:62:13:0e:5a:6a:33:10:
         08:e7:47:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRENTgxMTAvBgNVBAUTKDE4MTAxQ0I4NDU4NzAxMjM1QzNGMTMzMzlBRTVBOURC
M0M3NUIyNDAwHhcNMjYwNzIzMDc0MTI0WhcNMjYwNzMwMDc0MTI0WjAYMRYwFAYD
VQQDEw02YTYxYzVhNS02N2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaw4QXoPd3YbwIYKE9Qmhsr9TPLYqXdGsnlPgn+DUkFKIuDikAAAj11/AVCk
e3Gt/zIZ3EUlbVOZdZ6M3JfUsagohlXM/bAKoK8KfJRZ9XXtJSQ8siNa5d2uBrIV
yE5FfzKcda7a4/NxaQHsdJmzpdS+3v9hXyw7LBK2feJS4p0ofMHSXPs23Ugx2Whu
5i8fecp4W674hqfxMYnA79/GovjGUXNNOp2HFWaHbS5oTAo3uP69bzdDkBBSWzm+
wvFzswDR2uBy2qa3r/RPuST1XjErNZC4PPM5o+5m0rWKNA7CQH6//a162VSqguGO
pjA35Gwk+8rVZwhfQ7KVWcsc2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRchobq
Ma6qhXyasfGxe2RdJEjjMB8GA1UdIwQYMBaAFBgQHLhFhwEjXD8TM5rlqds8dbJA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEQ1OC80NEM3M0ZENkU4
MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFTTmNQeE16bXVXcDJ6eDFz
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dCQWN1RVdIQVNOY1B4TXptdVdwMnp4MXNrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEQ1OC80NEM3M0ZENkU4MjIxMUVGQTg5NzNGODRDNEY5QUUwMi9HQkFjdUVXSEFT
TmNQeE16bXVXcDJ6eDFza0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ5itX0L/dDagZs/KRtQos10BKeQ0OuhtDWTPfzoDdXGx5OHJmB64Xwy7Jk4y
9Uxrq0m/9TEiQeM+SpWbFo/briceWnSEFptoQVW9dgFfK6uasvzep4u15XuSPLBM
CXRyGXr9mL8Oydu7Uq0zJ7hloGUyvMGF1GPydqSqsAOh4VxNivbQ7vcCeSbjgd88
FLR29w3nkRzj4OUlqP7FXWkdxZC/4j+JkPC95ZX9PW7OrI74t5l93mZMK90Ani9K
Zpie5lu8MfwnyipF86LfJgIa/ou1kfO55pqaoPIvg7m2Go7Y1ZTvhEDD1CHX58J2
uAjcar4tLhdiEw5aajMQCOdH3g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:39 2026 by rpki-client