Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
File:                     GWhCPtbSSViApWptsCvGcpjF5oY.mft (raw, json)
Hash identifier:          T2KJWRRoUJpLMgqKF6n2b3wswtCoJBskZ0pwH3Tmnak=
Subject key identifier:   35:47:CD:7D:94:3A:03:18:44:5D:6C:FE:0C:4A:50:68:E7:16:B8:94
Authority key identifier: 19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86
Certificate issuer:       /CN=A918D3A9/serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
Certificate serial:       115A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
Manifest number:          1138
Signing time:             Wed 22 Jul 2026 17:23:57 +0000
Manifest this update:     Wed 22 Jul 2026 17:23:57 +0000
Manifest next update:     Wed 29 Jul 2026 17:23:57 +0000
Files and hashes:         1: GWhCPtbSSViApWptsCvGcpjF5oY.crl (hash: 3nqj7tjhoPw6BstyGxdSvEl9A1GYX14C2jPreSup3AY=)
                          2: 2884888A717011E99BA2FB3DC4F9AE02.roa (hash: zF6U2ehdoF8Lg9asPnRlMeYeqV16C4gI7kUBzdtRdNU=)
                          3: D4F3A2B4DBCD11EE9B6F4669C4F9AE02.roa (hash: 0/3h8qrF1hoUC7tmh4rWpKK0V8YfkgxImbH6h+ZlRSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl
                          rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4442 (0x115a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D3A9, serialNumber=1968423ED6D2495880A56A6DB02BC67298C5E686
        Validity
            Not Before: Jul 22 17:23:57 2026 GMT
            Not After : Jul 29 17:23:57 2026 GMT
        Subject: CN=6a60fcad-4543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:7e:9b:3e:ef:e3:c2:0d:ed:e9:8c:45:d2:
                    7f:f8:de:ae:15:cc:13:8c:4c:12:d3:26:fd:86:33:
                    c2:29:4f:c2:b3:c7:66:2b:a5:ad:a3:4f:0b:c8:7a:
                    24:93:5a:80:c1:a1:53:b8:bf:49:94:40:0f:74:c5:
                    f6:7a:96:66:b3:41:76:4c:4f:d3:dd:06:d5:99:9d:
                    bb:1f:13:61:ef:77:98:4e:63:86:43:ee:ff:55:4c:
                    a2:eb:d8:ba:26:c5:7a:ca:4e:a2:97:37:9b:83:52:
                    67:48:cf:51:31:73:34:c1:c3:bd:8b:b3:4f:73:ee:
                    35:f5:e9:71:f6:7c:0c:8a:c4:bd:09:dd:b0:59:12:
                    01:a5:3f:b4:67:ec:7d:dc:c3:06:fa:10:38:9a:f0:
                    05:7c:de:2f:e7:fe:3f:f7:71:94:47:86:4c:3f:88:
                    53:c5:fc:20:3a:72:fa:d6:9b:c5:44:ff:b6:ca:b0:
                    94:a9:b2:a2:c9:58:ff:4d:03:51:db:e2:d4:f8:fc:
                    2a:10:dd:66:2e:4b:7d:71:97:c5:0d:da:b3:60:ba:
                    9e:f7:79:39:4e:73:f5:09:29:3f:fe:c7:46:68:8a:
                    6b:be:7d:d8:14:87:d5:26:c5:b0:41:34:7b:e7:36:
                    2f:d2:9a:1a:fb:0c:05:d6:77:95:14:3f:1a:bf:f4:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:47:CD:7D:94:3A:03:18:44:5D:6C:FE:0C:4A:50:68:E7:16:B8:94
            X509v3 Authority Key Identifier:
                keyid:19:68:42:3E:D6:D2:49:58:80:A5:6A:6D:B0:2B:C6:72:98:C5:E6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWhCPtbSSViApWptsCvGcpjF5oY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3A9/BB7FFB8E3A9211E9B52DCF53C4F9AE02/GWhCPtbSSViApWptsCvGcpjF5oY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:fd:b6:f6:48:22:49:62:ad:38:73:28:fe:46:8a:b0:47:
         3b:8e:8e:ea:83:7a:92:ca:c4:a3:eb:9c:00:6f:ac:f0:3a:c8:
         14:8b:5b:d4:9d:e7:27:f9:a2:0b:7d:1e:6d:e3:27:74:4a:d1:
         c1:da:c1:61:ff:89:58:1c:9e:7c:d1:8c:95:af:10:79:f9:db:
         54:ae:1a:d3:e6:61:06:f6:b5:2d:87:d7:66:78:f1:82:4b:23:
         ad:3b:08:e7:85:51:21:14:1b:e1:af:b8:30:3c:6b:d5:59:0e:
         0c:fe:18:83:25:3f:39:0b:ce:06:65:41:8d:23:64:37:7a:7e:
         de:27:79:54:da:6c:47:68:db:a6:9d:65:72:ec:6c:e3:ae:69:
         47:38:97:92:d9:c2:ce:05:c7:46:9b:1c:9f:82:8a:c8:a7:4e:
         5b:f0:dd:13:40:45:65:4e:15:0a:25:9f:fb:42:6f:a5:14:e4:
         2b:af:42:2d:69:d9:85:df:88:6f:d2:02:1d:eb:90:e7:3e:9f:
         26:3b:a7:99:76:e4:7a:56:43:25:d0:d2:90:5c:a4:0d:3a:5e:
         ed:bb:f4:e9:3c:93:04:6b:1d:08:e2:09:29:d5:a9:53:b1:2a:
         8d:f1:cd:aa:45:bd:7b:a6:16:18:98:bc:af:31:ed:45:7d:bb:
         c6:c6:88:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQzQTkxMTAvBgNVBAUTKDE5Njg0MjNFRDZEMjQ5NTg4MEE1NkE2REIwMkJDNjcy
OThDNUU2ODYwHhcNMjYwNzIyMTcyMzU3WhcNMjYwNzI5MTcyMzU3WjAYMRYwFAYD
VQQDEw02YTYwZmNhZC00NTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArcR+mz7v48IN7emMRdJ/+N6uFcwTjEwS0yb9hjPCKU/Cs8dmK6Wto08LyHok
k1qAwaFTuL9JlEAPdMX2epZms0F2TE/T3QbVmZ27HxNh73eYTmOGQ+7/VUyi69i6
JsV6yk6ilzebg1JnSM9RMXM0wcO9i7NPc+419elx9nwMisS9Cd2wWRIBpT+0Z+x9
3MMG+hA4mvAFfN4v5/4/93GUR4ZMP4hTxfwgOnL61pvFRP+2yrCUqbKiyVj/TQNR
2+LU+PwqEN1mLkt9cZfFDdqzYLqe93k5TnP1CSk//sdGaIprvn3YFIfVJsWwQTR7
5zYv0poa+wwF1neVFD8av/TmqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVHzX2U
OgMYRF1s/gxKUGjnFriUMB8GA1UdIwQYMBaAFBloQj7W0klYgKVqbbArxnKYxeaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDNBOS9CQjdGRkI4RTNB
OTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NWaUFwV3B0c0N2R2NwakY1
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dXaENQdGJTU1ZpQXBXcHRzQ3ZHY3BqRjVvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDNBOS9CQjdGRkI4RTNBOTIxMUU5QjUyRENGNTNDNEY5QUUwMi9HV2hDUHRiU1NW
aUFwV3B0c0N2R2NwakY1b1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAufj9tvZIIklirThzKP5GirBHO46O6oN6ksrEo+ucAG+s8DrIFItb1J3nJ/mi
C30ebeMndErRwdrBYf+JWByefNGMla8QefnbVK4a0+ZhBva1LYfXZnjxgksjrTsI
54VRIRQb4a+4MDxr1VkODP4YgyU/OQvOBmVBjSNkN3p+3id5VNpsR2jbpp1lcuxs
465pRziXktnCzgXHRpscn4KKyKdOW/DdE0BFZU4VCiWf+0JvpRTkK69CLWnZhd+I
b9ICHeuQ5z6fJjunmXbkelZDJdDSkFykDTpe7bv06TyTBGsdCOIJKdWpU7EqjfHN
qkW9e6YWGJi8rzHtRX27xsaI+A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:51 2026 by rpki-client