Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
File:                     GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft (raw, json)
Hash identifier:          V54QD4GYLncHPNcbOm/KeQmu+qXKDf1FoRMvRTr41CM=
Subject key identifier:   B3:27:38:21:76:8A:76:2F:2D:DA:FC:35:92:42:E0:DD:6B:A6:DF:65
Authority key identifier: 19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7
Certificate issuer:       /CN=A916C2B9/serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
Manifest number:          01D5
Signing time:             Thu 23 Jul 2026 05:03:26 +0000
Manifest this update:     Thu 23 Jul 2026 05:03:26 +0000
Manifest next update:     Thu 30 Jul 2026 05:03:26 +0000
Files and hashes:         1: GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl (hash: ou5lmZKwUXsQP8Tp1XrO+d0sw1VGcTljNOI4xGkAorE=)
                          2: 4427FBD87D5911F1B1AC9F497AA30FBC.roa (hash: tVI6K7v8cHDUvZSho2rzwKTdWnfHve3mMbqzsymvnyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl
                          rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C2B9, serialNumber=19BB553062F9363D60DA6B94681F1AD60483D5B7
        Validity
            Not Before: Jul 23 05:03:26 2026 GMT
            Not After : Jul 30 05:03:26 2026 GMT
        Subject: CN=6a61a09e-6b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:59:4c:e1:37:c4:42:18:23:d1:49:fa:44:
                    22:ad:8f:92:a7:7a:d3:86:39:53:7e:c1:df:64:d0:
                    1a:a1:b3:7b:99:37:f2:a8:3b:84:d8:55:df:69:2f:
                    78:a4:59:99:2d:9c:17:e9:7b:3e:55:e8:db:56:3a:
                    08:c7:7f:fe:54:d8:78:06:47:ba:3b:0c:f3:c7:29:
                    27:b7:b7:95:65:cf:18:c4:b8:86:34:f4:8a:06:e5:
                    e9:6b:15:dd:0a:b4:f9:84:b8:54:e6:5f:cf:17:ed:
                    4c:b2:c4:11:9e:46:18:a6:fe:c1:48:90:9f:48:25:
                    79:e6:38:f1:09:f9:52:8a:68:8f:6c:21:85:c2:47:
                    fa:c4:86:d4:55:f4:5e:32:87:8a:db:0e:63:e8:c4:
                    69:22:92:7b:a2:68:94:4c:96:f2:f9:22:24:8a:b4:
                    3f:a4:20:97:2e:03:2f:d2:42:4e:4a:3a:d1:6b:16:
                    33:14:0d:70:3c:a2:9c:64:5a:88:6b:a3:cd:85:24:
                    fd:cb:04:66:6e:98:ec:2b:48:28:d9:68:e2:55:8b:
                    95:4f:3b:28:a3:c8:11:03:50:55:77:1f:b7:a5:a6:
                    10:63:87:9a:cc:4d:01:85:9c:e9:ed:07:64:d4:76:
                    21:3a:99:cd:86:ca:3a:97:53:49:d8:c6:fc:50:72:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:27:38:21:76:8A:76:2F:2D:DA:FC:35:92:42:E0:DD:6B:A6:DF:65
            X509v3 Authority Key Identifier:
                keyid:19:BB:55:30:62:F9:36:3D:60:DA:6B:94:68:1F:1A:D6:04:83:D5:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GbtVMGL5Nj1g2muUaB8a1gSD1bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/398E8A26C2A211EE91D9535CC4F9AE02/GbtVMGL5Nj1g2muUaB8a1gSD1bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:04:9a:c1:ab:65:c8:13:e0:90:39:61:9c:47:88:96:90:3d:
         95:5e:18:60:58:8f:58:49:60:d4:2d:e8:c9:d5:fb:20:88:a8:
         7a:53:a6:ae:d0:e5:de:e7:f8:bf:19:d9:9c:2b:13:33:6e:4a:
         be:fa:7d:26:0d:3b:07:60:fa:64:e8:83:ba:9d:31:36:3c:7d:
         15:32:18:14:99:58:0a:e7:29:b4:93:02:72:13:29:e7:a8:b1:
         3d:0b:d8:4e:30:26:ee:d8:a7:22:da:47:a1:55:95:bd:34:c5:
         22:65:0f:ca:b5:70:62:0a:09:3e:c0:34:b3:ac:59:a2:d8:4d:
         70:0c:ae:88:8f:1e:38:61:6a:2f:8b:d9:51:47:65:da:33:c2:
         5f:ff:6c:fd:75:90:84:18:1f:19:30:de:fd:75:48:2f:ac:7d:
         a7:bb:a8:f2:46:29:75:6b:15:ee:98:3b:fa:74:95:3c:09:e4:
         5c:60:80:ed:41:70:e0:35:62:d2:d8:33:79:9a:d0:2b:75:c5:
         85:3a:bc:c5:43:ba:49:07:f3:55:29:17:8e:e3:8d:6f:49:0c:
         48:22:97:91:5a:f3:5a:81:79:e8:98:56:9f:17:78:b4:3f:7e:
         c5:88:4e:8d:6d:c6:ab:eb:d7:21:fa:04:b8:4b:15:a6:f5:c0:
         e5:05:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:44 2026 by rpki-client