Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
File:                     gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json)
Hash identifier:          LYpQ6VHdFKTc16xK7OfCNjSA4cgUhIzJHCuCG47FWyM=
Subject key identifier:   34:2A:95:0C:F7:ED:E8:C6:45:D5:07:D2:42:AF:CF:AB:94:8B:EE:3B
Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82
Certificate issuer:       /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
Certificate serial:       1331
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
Manifest number:          1315
Signing time:             Wed 22 Jul 2026 17:08:14 +0000
Manifest this update:     Wed 22 Jul 2026 17:08:14 +0000
Manifest next update:     Wed 29 Jul 2026 17:08:14 +0000
Files and hashes:         1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: LqMdKffQxUM/gTB3YiRMv3O9B7Q1pwiSsM/1NvQ5FVE=)
                          2: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=)
                          3: 0E7E95E63C8B11F186364B569C833773.roa (hash: 5t+Odc3kzlHJOT49HQha5G542XKsnZRtShbX2b003G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl
                          rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4913 (0x1331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82
        Validity
            Not Before: Jul 22 17:08:14 2026 GMT
            Not After : Jul 29 17:08:14 2026 GMT
        Subject: CN=6a60f8fe-b531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:97:67:a7:7b:95:02:b1:e9:74:f2:84:6d:88:
                    35:68:da:9b:89:b2:b7:4a:ad:ed:61:b2:e3:d4:b2:
                    3f:6e:e4:94:2a:b7:c5:e1:a5:6d:e1:8f:17:a3:ff:
                    d8:47:dc:dd:51:49:05:52:fe:e5:6d:3f:6e:0a:60:
                    ff:38:76:14:05:23:b1:54:54:c5:ea:f4:90:37:68:
                    cb:62:48:64:ad:38:d8:87:36:90:51:a0:c5:16:2d:
                    d8:14:da:23:d1:9c:e4:a9:c9:7c:75:d6:50:07:10:
                    eb:71:1b:3b:b3:1f:98:0b:f9:20:88:fd:94:0b:fd:
                    c6:81:44:3e:8c:80:20:cd:7c:75:81:e2:73:ae:73:
                    2f:4c:df:45:b6:12:4c:7d:02:36:9e:60:c9:2f:83:
                    84:39:1c:ec:91:81:04:83:32:f3:5d:7d:69:17:c3:
                    1a:04:1a:89:45:61:99:b2:ff:33:6d:c4:e9:3b:63:
                    d1:54:9b:1d:26:12:36:dd:a0:b7:bc:88:e8:a9:2e:
                    f7:3e:4f:be:16:52:f0:05:70:de:70:d1:fd:be:b0:
                    dd:2c:d8:e4:5a:f0:bd:94:36:45:33:f4:8f:83:95:
                    21:27:96:8b:0f:9b:7e:70:92:44:f4:89:d2:b7:e5:
                    85:9c:0e:23:f7:19:01:f1:5e:23:f4:e0:09:db:76:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:95:0C:F7:ED:E8:C6:45:D5:07:D2:42:AF:CF:AB:94:8B:EE:3B
            X509v3 Authority Key Identifier:
                keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:69:2d:01:37:90:fb:1f:90:18:bd:0f:04:86:59:6b:d3:
         86:5d:69:ea:08:50:46:74:25:85:df:30:9c:25:b5:ba:78:a7:
         3c:d0:0a:2a:ef:11:dd:a5:8b:b6:ad:85:d0:d4:83:36:e9:d4:
         94:f5:51:68:09:56:e6:0e:0b:8e:ba:50:91:7c:da:d7:9b:8e:
         6c:ad:55:c7:33:38:f7:19:d4:86:15:72:80:6a:8f:e6:75:7a:
         ce:76:f1:6a:35:4d:6e:64:d7:9c:5b:b2:df:5d:2b:f9:e1:9b:
         0a:b9:b5:83:dc:ed:33:bf:cb:f8:6a:c3:91:91:ab:39:e4:8c:
         67:c2:26:06:0b:d5:31:19:0f:ee:33:63:76:21:75:92:dd:28:
         22:6b:be:9a:f1:7d:b5:09:10:c0:45:a4:f5:b9:14:25:b1:99:
         63:69:84:26:1e:69:90:ed:fe:46:a2:36:f2:23:92:48:76:1a:
         59:34:1c:25:eb:7b:a4:80:f7:83:79:bb:d4:b0:51:36:87:0c:
         37:0c:8d:1d:17:5c:dc:f1:76:27:5b:cb:f6:a8:99:43:9a:6c:
         64:92:77:64:96:87:bc:fb:a5:52:6e:05:25:6a:96:bc:f5:0b:
         77:d6:6f:88:da:21:00:de:55:25:36:fe:59:df:05:45:dc:7d:
         c3:74:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:55:53 2026 by rpki-client