Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File:                     GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier:          A58Qzrr+KvyKJ09efmXJhLDt/F/YgzHgJV7eU5Kh18Y=
Subject key identifier:   39:8B:D9:F6:A7:D2:3C:18:DD:47:95:D3:E9:63:A1:CA:8B:95:57:BC
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer:       /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number:          99
Signing time:             Thu 23 Jul 2026 09:13:04 +0000
Manifest this update:     Thu 23 Jul 2026 09:13:04 +0000
Manifest next update:     Thu 30 Jul 2026 09:13:04 +0000
Files and hashes:         1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: 1cqhz9p/EXrae/CVCW49qFOcS6BYuzovbWtnX0Cqc5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
        Validity
            Not Before: Jul 23 09:13:04 2026 GMT
            Not After : Jul 30 09:13:04 2026 GMT
        Subject: CN=6a61db20-1262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:db:b0:aa:6b:39:b4:da:6e:7d:89:5c:8e:
                    b4:de:0d:d3:f6:18:dc:b4:ae:ce:26:f8:85:a8:f4:
                    59:e2:df:4e:64:4b:24:4b:a3:81:01:3e:c4:81:9e:
                    83:a7:46:5a:5a:8e:2e:5b:9f:a4:67:81:bc:3f:96:
                    06:d0:bd:3b:21:ac:d8:db:02:c0:31:80:94:a8:2c:
                    f5:80:99:7f:c5:30:12:a9:f2:ff:53:62:2b:2e:88:
                    47:dc:44:92:40:3e:0a:d6:0e:cd:d6:02:1b:64:5c:
                    d9:3c:85:28:0b:5b:64:d4:b2:3a:57:32:86:b3:ee:
                    ad:42:3d:ce:42:3c:ff:10:e5:b3:65:cc:5d:9f:17:
                    c7:8d:ef:f1:d9:b2:18:19:e3:0f:7d:4a:fc:8f:ac:
                    c6:aa:00:35:03:3e:ac:01:5e:50:88:c7:cd:75:83:
                    e4:80:67:7c:95:f2:05:23:f4:7d:c4:d1:aa:7e:3e:
                    5d:dd:89:e2:15:c9:5c:ba:25:65:79:cd:31:e6:72:
                    cb:54:58:9a:86:d0:6f:85:ad:e5:01:17:86:f9:03:
                    de:51:b9:52:68:d3:f9:84:34:bc:37:31:0d:27:d9:
                    ba:ad:ab:ec:30:42:5e:b8:c6:2f:b1:40:08:3b:77:
                    d1:ac:45:26:3b:10:14:6b:1d:5a:ea:cb:ba:78:fe:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:D9:F6:A7:D2:3C:18:DD:47:95:D3:E9:63:A1:CA:8B:95:57:BC
            X509v3 Authority Key Identifier:
                keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:7b:7c:da:3c:d0:99:d0:79:91:d3:e2:8e:cc:e2:4c:c1:
         7f:62:a1:d3:8b:31:3d:e5:aa:bf:66:0e:24:a3:92:8b:a6:11:
         46:80:12:07:fb:ac:f0:2e:86:c8:69:8e:18:11:5f:88:a4:a0:
         01:9f:4b:04:20:40:18:ce:3a:53:bf:5e:80:d1:7b:86:cb:0a:
         d2:5b:40:38:a1:7d:e3:96:26:91:95:dc:11:31:4c:58:f4:3e:
         fc:d1:b3:95:01:27:9b:fa:79:64:55:8a:1d:20:9c:6b:b7:fd:
         56:e4:41:76:97:13:2a:84:aa:74:bb:10:7c:78:bd:f3:80:38:
         5b:ca:b2:88:f4:45:8b:f7:8d:04:ae:c2:0c:c9:da:ae:1e:70:
         64:ee:b2:42:57:93:40:eb:e8:28:1c:26:22:54:d0:50:a6:23:
         78:71:d2:4d:20:87:47:ef:68:d9:44:8a:e6:8f:e4:32:f9:ba:
         f8:0f:bf:40:fe:0f:71:af:02:e8:fc:01:92:46:12:03:ab:f2:
         74:37:cb:a8:75:86:fc:78:a1:ac:7e:97:bf:49:f4:e8:ac:4e:
         74:fb:b2:f5:d8:8e:7a:90:65:54:52:a7:87:60:3d:0f:61:13:
         68:4c:75:98:6f:11:62:88:92:a6:df:83:13:1f:1f:03:6a:2b:
         7f:03:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:54 2026 by rpki-client