Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
File:                     GcmgwhkwwW6kFprC6-3H5snXtS8.mft (raw, json)
Hash identifier:          6tzadDfAeHsGHNwoShbNlu2A6VbhbQyOP5C8YPLnbjI=
Subject key identifier:   39:A9:6C:23:7B:87:25:6E:EB:89:7D:DA:13:45:99:B5:AA:7A:B2:70
Authority key identifier: 19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F
Certificate issuer:       /CN=A916BCBA/serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
Manifest number:          71
Signing time:             Thu 23 Jul 2026 09:54:12 +0000
Manifest this update:     Thu 23 Jul 2026 09:54:12 +0000
Manifest next update:     Thu 30 Jul 2026 09:54:12 +0000
Files and hashes:         1: GcmgwhkwwW6kFprC6-3H5snXtS8.crl (hash: LQO6aGKQRGJ0M/7M5p4nmNQOxsbZzEMj4Ba8a5wr2oc=)
                          2: 167F2222E8D211F091D937E6616F56BC.roa (hash: hqoxp1DZQxlSqrDmlnlQZc0fxw5C7ZE4Da6abuSlt+s=)
                          3: 18EB15B84C6C11F1A78F0F88C2833773.roa (hash: Gx1/bgiTTtC0ZtbXuD3ZiQ31WylCA/sLch7wjwJEjVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl
                          rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCBA, serialNumber=19C9A0C21930C16EA4169AC2EBEDC7E6C9D7B52F
        Validity
            Not Before: Jul 23 09:54:12 2026 GMT
            Not After : Jul 30 09:54:12 2026 GMT
        Subject: CN=6a61e4c4-83ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:5c:c7:7f:dd:64:d0:c5:8e:ad:41:e3:0f:
                    9f:d9:aa:8a:6b:3e:2e:fe:8c:d4:ba:6a:ef:8a:02:
                    9a:d5:a8:bd:8e:0d:f0:58:f1:9a:db:67:36:21:6d:
                    1f:cb:6d:a2:da:27:4c:79:28:49:f3:42:53:09:dd:
                    e0:e4:ef:cc:cc:6b:e2:93:84:3b:32:90:e5:7c:13:
                    48:f8:e4:c1:2d:05:e9:41:72:ec:8a:c6:14:28:f3:
                    ac:4c:76:14:64:c3:3d:e8:48:a2:cf:19:d9:8a:1d:
                    69:c3:9b:4b:73:a6:d6:70:8f:ef:f3:29:53:83:a3:
                    8d:ad:40:6a:45:ab:25:96:98:b7:70:2e:73:a8:91:
                    9e:ec:32:86:bc:e8:a0:cc:f8:ed:72:28:6b:2f:9d:
                    d7:42:3f:26:cf:0c:c4:2d:fc:b8:c3:0f:42:d3:1b:
                    d6:90:a1:8e:3e:6b:f7:fc:ff:0f:7c:bf:78:c0:44:
                    0e:3b:53:03:ef:27:2f:92:6c:c5:e1:43:76:c8:17:
                    54:63:89:a1:78:7d:3f:95:b3:73:63:72:fd:5c:1b:
                    f8:f7:3e:c3:ea:16:ec:cf:e7:fc:24:ea:d4:37:f2:
                    48:74:a6:23:c0:60:ec:ca:44:a8:3d:0d:c8:10:3d:
                    ad:11:3e:c3:4f:88:f5:a7:94:0d:19:02:f3:91:22:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A9:6C:23:7B:87:25:6E:EB:89:7D:DA:13:45:99:B5:AA:7A:B2:70
            X509v3 Authority Key Identifier:
                keyid:19:C9:A0:C2:19:30:C1:6E:A4:16:9A:C2:EB:ED:C7:E6:C9:D7:B5:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GcmgwhkwwW6kFprC6-3H5snXtS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCBA/3400C718E62C11F0976A95FB6F6F56BC/GcmgwhkwwW6kFprC6-3H5snXtS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:a3:06:a9:28:b6:9c:16:5f:b6:f5:9e:54:c7:2e:50:f6:
         14:91:cd:fb:e4:76:f2:2a:1c:ba:e4:29:a2:c7:97:20:62:cc:
         33:23:b1:8f:56:6d:1e:de:a5:c3:1b:ba:c7:6e:6d:59:f0:2d:
         e6:20:ff:dd:d9:53:ba:9a:b4:a2:6e:8e:03:8f:62:a8:49:bf:
         10:53:0c:1d:c2:f0:d8:62:fe:f5:9c:04:45:2f:d8:32:38:ad:
         f9:1f:6d:51:1e:f4:2f:ad:39:a3:b8:1b:c9:ea:7f:ba:f6:5d:
         9e:7f:f8:d8:6b:0d:af:cd:ce:77:ec:1e:f6:96:01:ea:0d:62:
         d6:15:90:b2:de:49:9e:91:27:0a:f5:b3:f4:f7:76:4c:c8:8b:
         94:dc:64:0c:00:10:20:25:23:b1:fc:47:42:eb:55:9b:6d:6f:
         94:3f:e6:a8:c2:3c:a2:a9:19:37:77:eb:1e:2a:3c:35:e6:00:
         73:4a:ed:05:2f:2d:44:5e:c0:95:69:60:9b:74:24:25:94:e2:
         dc:bd:26:9c:53:c6:90:f0:08:62:e9:4d:c4:15:08:1e:e2:bd:
         fa:79:3a:7a:f2:4d:42:76:83:50:2a:6e:c5:f7:01:2e:84:ee:
         88:4f:e0:d6:dd:2d:13:dd:26:fe:b5:db:22:93:f2:6d:82:30:
         c3:62:11:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:30 2026 by rpki-client