Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File:                     GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier:          jQJV999+47af1muS8QttZNjIced1Ly6Um2LPssu7pp0=
Subject key identifier:   FE:48:74:58:04:D5:CC:C8:AD:61:6D:71:84:F2:4F:4E:31:1B:29:29
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer:       /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number:          77
Signing time:             Thu 23 Jul 2026 09:47:57 +0000
Manifest this update:     Thu 23 Jul 2026 09:47:56 +0000
Manifest next update:     Thu 30 Jul 2026 09:47:56 +0000
Files and hashes:         1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: 1XyhPnKAKVEcLeuuQvmWZ4pn16gctOM2xWm/nAdkGTM=)
                          2: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=)
                          3: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
        Validity
            Not Before: Jul 23 09:47:56 2026 GMT
            Not After : Jul 30 09:47:56 2026 GMT
        Subject: CN=6a61e34d-70db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:bd:4c:23:8d:96:ad:87:10:54:6a:60:06:
                    cf:81:b4:26:85:41:ce:30:00:ab:61:b9:89:c7:c9:
                    e3:45:fc:0d:94:73:76:bc:7a:33:44:50:ed:db:a4:
                    2b:af:00:69:b7:56:da:30:d5:16:52:32:4d:91:5a:
                    08:68:3e:a8:48:0e:88:71:3e:15:17:94:83:34:c2:
                    e6:58:31:2e:fc:6c:aa:d6:dc:9f:d8:3f:da:4e:38:
                    63:3c:05:fd:f9:b8:df:b0:cf:47:07:9a:7b:8e:b4:
                    f0:41:6b:a5:39:7f:55:a5:24:bb:42:c6:6d:0c:24:
                    6e:f0:e2:a0:0a:e9:c3:d1:30:bc:e1:a7:aa:d2:00:
                    d8:fe:88:10:0f:60:9e:11:de:bf:b0:95:75:4f:be:
                    52:64:ea:d3:39:54:14:28:09:ec:04:3a:dc:a1:2a:
                    6d:f7:73:31:e2:b2:a0:c8:6c:51:0c:7f:bc:e1:f3:
                    29:d9:af:07:2a:8d:a0:9d:68:53:da:79:b3:13:28:
                    cc:2c:fb:5a:93:0b:f0:d3:e3:e8:bb:3d:2c:9a:29:
                    48:9f:03:f6:ce:65:32:35:59:9b:14:2c:5b:b9:36:
                    7c:ca:3c:dd:4b:37:ad:63:48:0b:ae:ef:f1:55:0d:
                    38:3d:8b:7e:c2:0e:1c:cf:63:34:70:fd:be:c0:ad:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:48:74:58:04:D5:CC:C8:AD:61:6D:71:84:F2:4F:4E:31:1B:29:29
            X509v3 Authority Key Identifier:
                keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e2:66:87:28:3b:5d:00:fb:70:d7:06:af:ee:e8:28:70:d1:
         a7:a8:7b:91:be:70:35:92:38:3d:49:b9:0e:29:39:bf:11:e7:
         90:ea:e5:d0:47:f8:58:61:4b:13:7d:36:bd:06:81:e0:fd:57:
         8a:58:5b:2e:7b:5f:a6:67:9b:07:e9:27:9a:8a:4b:35:f1:e5:
         b6:f1:03:40:ef:1c:92:d3:a0:bb:05:32:e0:fe:f5:3c:b2:02:
         6f:6f:02:ce:bf:38:63:94:9a:ae:64:0e:7b:22:3e:28:50:09:
         26:33:f4:87:0d:1d:ec:d9:f3:d5:e8:f4:9c:6b:97:ad:10:0e:
         3a:4d:ec:ed:82:c9:5b:4f:c7:11:a8:6a:ff:36:19:8e:0e:b8:
         60:89:9e:e1:4a:64:fd:1e:e9:1d:6d:07:95:bf:bf:03:8f:8e:
         bb:41:6b:0e:37:e4:ef:3a:bd:16:d8:8b:35:a9:0f:aa:c2:8d:
         de:cd:07:2f:f6:9e:5b:a2:cf:8c:4a:1c:65:5c:4c:8c:e5:b0:
         cf:ca:4c:78:bd:27:07:c1:1a:3c:36:e9:b0:3d:22:b5:84:cc:
         8f:74:ea:ac:43:d8:2e:25:87:22:c6:00:dd:0a:d6:44:59:69:
         77:21:14:e5:98:eb:6b:27:ab:f2:81:12:62:6f:00:4a:af:fd:
         38:c9:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:36 2026 by rpki-client