Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
File:                     gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json)
Hash identifier:          qy7WWFiSejmG7AopNxnOhOjskN060VfnSq29upWLO9k=
Subject key identifier:   42:1F:C0:AF:21:91:A3:39:D6:08:A2:2B:C7:59:92:C3:8D:D3:71:81
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Certificate issuer:       /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
Manifest number:          74
Signing time:             Thu 23 Jul 2026 09:48:46 +0000
Manifest this update:     Thu 23 Jul 2026 09:48:46 +0000
Manifest next update:     Thu 30 Jul 2026 09:48:46 +0000
Files and hashes:         1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: WgD0Iemt1hmmhw966xPLMTmqizjs1dcCQ4taJjmqMFc=)
                          2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
        Validity
            Not Before: Jul 23 09:48:46 2026 GMT
            Not After : Jul 30 09:48:46 2026 GMT
        Subject: CN=6a61e37e-eb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:5d:fc:66:85:4f:fd:40:5f:89:2b:06:1f:
                    a8:70:7a:b0:fb:c0:75:91:81:7c:2e:fa:69:a8:01:
                    82:1b:e2:78:96:79:93:0e:a7:87:50:41:02:c0:b3:
                    22:ca:fb:81:f9:4c:f1:bd:5f:f0:ec:8c:07:2b:e9:
                    25:bb:4a:17:24:24:4b:4e:1a:7e:de:73:77:92:a1:
                    d8:0d:21:37:89:b0:ed:01:22:27:f8:04:72:ff:09:
                    a1:f0:28:db:23:75:72:2f:f0:57:5e:f9:dd:49:e8:
                    7a:b6:ff:67:00:2c:17:c8:bc:2b:f8:fe:7c:b3:56:
                    21:7c:9f:e3:77:45:e3:67:ef:27:59:6c:94:24:48:
                    0a:23:88:b9:0e:d0:7d:2c:b9:c4:72:d5:02:22:78:
                    59:55:3e:54:82:b9:8d:7f:e1:f0:a1:49:f6:ad:09:
                    f0:c3:b4:25:b5:6c:ac:29:37:88:5d:b0:f9:4a:f2:
                    d9:29:70:f7:ec:ee:f8:3b:5b:b5:7d:f2:85:34:54:
                    fe:54:e5:a4:7e:c1:bc:fb:b6:d9:28:34:1e:93:35:
                    e0:7c:d4:50:c7:e8:9a:e7:35:4b:44:7f:4f:44:36:
                    11:66:d7:98:da:11:c2:59:34:51:10:cb:70:db:4f:
                    fe:fa:f0:4d:51:50:f6:ae:52:fd:e5:be:79:84:b8:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:C0:AF:21:91:A3:39:D6:08:A2:2B:C7:59:92:C3:8D:D3:71:81
            X509v3 Authority Key Identifier:
                keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:70:81:c4:63:56:8d:cd:36:1f:ad:39:6a:57:fb:c8:0a:c4:
         0d:6d:5f:58:91:bb:26:8c:11:ed:87:35:66:93:1a:44:dd:28:
         8f:fd:dd:92:be:4a:fd:7b:68:25:3a:df:77:4f:36:9e:67:05:
         b4:e8:9c:4f:33:c4:a5:67:b6:a3:01:e0:f1:e6:11:46:f7:55:
         8a:d0:3f:32:fa:60:a6:fb:92:d9:75:f3:28:c5:f3:d3:71:8b:
         9d:62:b5:fa:5c:58:a3:62:30:48:02:9e:de:45:46:02:4e:6a:
         e5:66:b7:eb:fc:5f:10:5f:37:c5:63:af:6c:3e:bd:16:89:dd:
         a7:35:07:95:0c:5f:66:b5:3d:8a:98:a1:28:88:82:4d:01:b5:
         d0:10:bd:89:eb:82:30:6b:cc:08:55:8d:4d:9a:97:3c:2e:ee:
         6b:9b:a8:2b:ec:41:3c:98:78:ab:b3:fa:74:a2:f1:ec:0e:2a:
         1c:86:a3:75:06:ef:52:40:d4:ce:d6:9f:bb:55:09:4c:2d:7d:
         35:5d:9e:b0:9a:98:5b:a6:f2:d8:8c:f5:58:91:ce:1b:ee:59:
         a2:1e:c0:4b:c9:2c:79:92:83:98:db:ae:13:3d:62:42:2b:a9:
         64:7e:57:9d:29:53:a4:41:1e:81:b7:88:52:5b:0d:ad:0b:56:
         8e:7d:0b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:36 2026 by rpki-client