Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File:                     gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier:          08ynw8Axc5U5JzcnqjKtpu6UTg5IF0Z2mfTNBxnr4uI=
Subject key identifier:   97:3A:7E:00:30:76:D2:3D:1A:DE:E0:83:6F:A0:C6:E6:84:B2:31:C8
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer:       /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number:          013F
Signing time:             Thu 23 Jul 2026 07:10:24 +0000
Manifest this update:     Thu 23 Jul 2026 07:10:23 +0000
Manifest next update:     Thu 30 Jul 2026 07:10:23 +0000
Files and hashes:         1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: 5gvXMv8ZENEl6HpI1GJlmCFZ0++zl1DlTCw44os6y80=)
                          2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: fKB1wROuPCiOAs2iiH8T0iD/fbxHacro6VdzGc7766Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
        Validity
            Not Before: Jul 23 07:10:23 2026 GMT
            Not After : Jul 30 07:10:23 2026 GMT
        Subject: CN=6a61be60-fe41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9a:7e:9b:a6:bd:41:b5:6f:96:17:06:1a:d3:
                    d1:6f:b0:32:9a:00:31:3b:cd:e1:d7:e5:8c:d4:39:
                    c2:50:a5:ee:a1:6f:0c:e5:87:0d:88:b9:c7:3a:d5:
                    34:9e:da:66:f3:9e:cd:9c:f3:e4:8f:96:83:07:2b:
                    5c:d9:0b:7c:56:4f:26:d6:52:5d:60:46:2e:ed:c7:
                    08:ff:d4:df:c7:79:d6:42:81:3d:40:80:68:0b:e2:
                    0a:0b:db:d4:c4:7b:dd:28:c5:4b:d2:eb:23:f7:bb:
                    50:8e:7f:52:c5:e1:8c:30:74:68:e2:33:1c:6b:ba:
                    77:29:53:c2:6d:a8:f6:0a:27:82:5f:eb:4b:6f:3f:
                    2c:de:de:b0:f1:46:07:11:39:a7:b8:c7:55:31:c8:
                    79:9d:1b:1a:27:35:a8:da:48:c1:83:79:80:f4:56:
                    10:bf:bc:0e:a1:f7:23:5e:de:f7:49:ce:4f:04:5c:
                    d1:db:33:8f:ee:7b:1a:ed:28:9b:46:4c:68:d5:33:
                    4a:a8:e2:9d:3e:a6:fa:61:e6:10:c2:dd:d8:b7:44:
                    be:63:de:2b:ab:16:38:fd:c9:67:a6:cf:37:9a:1b:
                    f2:26:27:ec:a7:0b:89:fd:84:13:8d:70:fa:0b:e8:
                    6f:5c:84:08:57:69:ab:fe:cd:ff:d9:14:b9:a2:8d:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3A:7E:00:30:76:D2:3D:1A:DE:E0:83:6F:A0:C6:E6:84:B2:31:C8
            X509v3 Authority Key Identifier:
                keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:94:a7:66:64:1b:e0:c3:3c:9d:d3:5e:6f:ef:ec:08:eb:40:
         5d:9f:0e:de:aa:ae:83:72:03:7d:6d:c5:bd:9d:85:33:1d:cc:
         ee:7a:ca:b3:93:26:01:fa:84:43:c3:18:47:51:cb:25:d3:04:
         9b:eb:f3:11:c7:07:50:bb:36:96:39:71:75:6d:58:af:b7:93:
         65:33:40:f7:46:8e:a5:37:bd:94:49:72:ee:3a:de:25:bc:45:
         2d:0c:bd:92:c5:e7:a5:9d:c4:81:d1:84:f5:61:e1:fe:fd:0a:
         23:41:79:71:c9:2b:83:06:1f:b9:4b:68:c9:89:77:21:1b:cb:
         be:79:f0:0d:f4:3a:f0:31:6c:78:51:58:dc:4d:3c:29:f5:1e:
         e5:35:72:aa:c8:50:30:95:3c:c9:51:8a:c9:eb:fe:d9:09:5b:
         8c:b2:10:80:ea:3d:58:b6:ec:0d:16:83:27:43:d7:ff:de:91:
         e9:c4:f9:ae:19:82:f3:f2:75:5a:76:39:0e:01:75:4a:2a:59:
         dd:db:fe:d2:f7:dd:b3:bf:17:5f:b8:e8:bb:15:88:b5:9f:96:
         36:f8:83:c4:f2:11:89:19:67:2d:0c:a6:6f:a1:14:10:87:03:
         c5:45:cd:06:44:40:df:47:ed:56:bb:3d:48:3a:33:4b:9d:30:
         de:4e:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:18 2026 by rpki-client