Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File:                     gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier:          XJrcuBMd+/DJ1dR2neDbMrtv5M/q3laVXcPwc0XffOw=
Subject key identifier:   D7:65:B5:10:DA:5F:46:3C:02:F2:0E:3A:36:F3:1C:4C:0D:61:41:56
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       0644
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number:          0634
Signing time:             Wed 22 Jul 2026 23:28:49 +0000
Manifest this update:     Wed 22 Jul 2026 23:28:48 +0000
Manifest next update:     Wed 29 Jul 2026 23:28:48 +0000
Files and hashes:         1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: QlAHW+bkuaiO4MoD6Ap0/5g+1P9875KCO/6mEiIq5QI=)
                          2: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: 9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=)
                          3: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: m3HEhEwWSLfKtQb2ikmT/BSylxepHuo5uXczBb4yR7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Jul 22 23:28:48 2026 GMT
            Not After : Jul 29 23:28:48 2026 GMT
        Subject: CN=6a615230-060b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:23:a4:56:9a:a7:95:ac:b1:d9:86:43:be:
                    98:44:21:99:46:a5:c9:a8:27:52:96:83:56:25:dd:
                    9e:b2:14:6f:11:b4:10:a0:4f:29:e4:d2:54:7e:e2:
                    90:0f:aa:c2:45:c8:ac:0e:61:77:77:4b:44:10:1f:
                    22:34:50:7f:6a:f2:c0:18:38:86:c0:75:04:fb:f8:
                    28:58:df:87:d1:ea:b3:f8:61:be:7b:23:f9:42:ac:
                    97:6c:c0:69:3f:a4:be:8c:e6:ae:f5:49:29:70:d5:
                    ce:c5:51:71:7c:c3:fe:c5:e3:4f:44:cb:ec:44:2f:
                    ad:70:8e:0a:58:47:2c:87:6d:fe:a3:72:e7:b5:fe:
                    0b:38:77:38:6c:b2:87:31:90:28:11:cd:f6:5c:f2:
                    00:6f:ec:f4:4e:00:1e:be:05:c9:a8:c1:2a:8f:70:
                    84:93:d5:80:30:5f:15:b0:8d:be:ec:b1:df:ee:50:
                    b3:6a:af:db:12:d4:7d:a4:ce:3b:e6:f1:6d:be:15:
                    87:b0:25:4e:7c:50:70:37:23:57:1a:92:f4:c1:5a:
                    f1:f0:c3:07:dd:fe:e0:3d:a8:6d:0d:d6:2e:9b:e1:
                    35:1f:c0:e7:76:6b:cb:c1:c1:91:a7:8d:dd:fb:a7:
                    99:34:97:2e:71:79:04:04:b9:bb:a2:23:1d:72:07:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:B5:10:DA:5F:46:3C:02:F2:0E:3A:36:F3:1C:4C:0D:61:41:56
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a9:15:a6:6a:2e:0f:88:a4:7d:cf:6c:9e:35:08:1a:ad:1c:
         94:04:73:be:34:6c:f8:aa:49:1c:1e:2a:80:24:b0:02:69:e2:
         09:ac:a8:4c:f0:98:e5:14:5c:16:dc:81:29:0a:81:eb:86:4f:
         37:20:0e:b1:9e:85:95:1f:ea:9b:40:76:b4:aa:15:5d:21:9c:
         f2:ed:b0:b4:2a:ce:ba:30:87:f2:25:25:9d:9a:e3:b1:cb:61:
         aa:09:a2:22:f7:a1:d9:62:29:67:e3:72:f6:1d:2f:7c:8a:37:
         14:67:1f:a4:d1:f2:e5:d1:1a:1e:c0:ae:39:bc:04:5a:4c:40:
         f0:7f:b9:68:ae:2b:99:04:16:68:5f:41:74:54:24:5d:02:1b:
         41:a8:65:8c:ff:2c:12:b3:26:d5:aa:a2:83:23:9c:0c:58:34:
         58:c4:54:d1:25:09:f3:99:7f:e6:fa:fc:74:32:50:df:8c:42:
         f4:77:6c:48:bb:88:24:ef:c5:a3:88:db:c2:0c:cc:65:6d:46:
         17:a7:98:66:9d:38:76:c0:77:57:62:99:38:ad:62:21:da:94:
         54:97:dc:30:a1:c3:0e:5c:9d:45:d8:d4:7e:47:d2:bd:2b:cd:
         e9:b8:d9:d0:b9:70:42:b5:02:1e:33:fc:10:3d:5d:d9:b0:5c:
         82:0f:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:10 2026 by rpki-client