Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
File:                     gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json)
Hash identifier:          Brotq50y4OgE3CMnYywosUwAuZMTG4OR7jFt//aFEQ0=
Subject key identifier:   CA:DD:5F:43:7C:D6:F9:0F:BE:AF:6F:CC:62:90:36:9D:AB:F8:E0:84
Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Certificate issuer:       /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Certificate serial:       08F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
Manifest number:          08DA
Signing time:             Wed 22 Jul 2026 20:54:06 +0000
Manifest this update:     Wed 22 Jul 2026 20:54:05 +0000
Manifest next update:     Wed 29 Jul 2026 20:54:05 +0000
Files and hashes:         1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: w1TFTZ3BxoqWC1UCPxr0riL/w8pY74Nr6IwOl9Zn5lM=)
                          2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
                          rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:54:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
        Validity
            Not Before: Jul 22 20:54:05 2026 GMT
            Not After : Jul 29 20:54:05 2026 GMT
        Subject: CN=6a612dee-7723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:55:55:4d:f8:2a:b8:b6:ce:55:9c:bd:7e:
                    ca:31:b2:d5:94:eb:30:ee:7c:b3:fc:23:2b:e7:49:
                    29:ce:60:30:f2:e4:e9:f0:20:58:f9:3f:2f:28:1a:
                    8b:d8:b6:0a:ec:05:00:c5:37:87:8e:f4:c8:fc:71:
                    aa:2a:d0:9b:e5:a9:12:0d:68:6b:ee:4d:99:89:69:
                    f9:6a:61:94:9d:1b:d5:51:9b:1d:9d:ad:76:15:1c:
                    26:9a:c9:fe:92:93:29:c9:ef:8a:05:75:d2:7b:c6:
                    de:2d:f2:77:a0:74:fa:04:8a:1e:98:79:bc:c3:5c:
                    e2:b5:a7:6d:6c:3f:85:88:72:f8:8f:b1:a1:6c:84:
                    19:91:81:6a:f8:99:d6:df:db:25:cb:7d:2a:23:e7:
                    fe:81:08:b4:7b:20:c7:78:fe:be:b1:ba:b4:d3:82:
                    4c:0b:9f:fe:51:94:3b:ad:6f:7a:5b:73:6e:a8:10:
                    97:4a:93:e9:ff:cf:4c:a0:fa:0f:73:19:8b:91:aa:
                    2a:d4:1f:b6:da:1d:05:fb:6c:72:2d:47:50:4e:d8:
                    f7:e7:e1:72:e8:f0:3a:ef:06:33:89:81:5f:45:68:
                    c3:e5:fc:9f:ea:bd:70:7b:ba:9a:3e:5a:4c:1d:16:
                    87:fc:cb:15:21:a7:db:1d:c6:69:ea:2a:b7:45:16:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:5F:43:7C:D6:F9:0F:BE:AF:6F:CC:62:90:36:9D:AB:F8:E0:84
            X509v3 Authority Key Identifier:
                keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:4e:3f:b9:6d:13:e4:b0:4a:54:c6:83:45:b2:91:da:0b:
         a7:67:22:a5:c2:35:41:ff:46:ed:b1:a6:40:fd:b4:57:dd:9c:
         73:9f:23:fb:bf:84:ad:17:0a:79:1e:3b:58:01:b6:3a:8b:f8:
         34:c5:49:89:67:bc:30:3b:40:d3:68:7d:83:6b:f8:60:59:b0:
         ac:35:89:79:9f:09:00:aa:0b:ec:cd:df:31:1b:e7:dc:33:d6:
         e0:82:f1:7c:5e:04:5e:b7:1c:0e:a3:f2:26:a4:fe:59:03:7b:
         bd:c3:79:1e:34:d5:61:f4:b5:2d:94:7e:c6:a5:50:e9:42:7a:
         1e:75:74:f5:2e:7b:fb:ee:76:69:d4:42:3d:97:06:46:dd:38:
         a9:28:d5:53:3e:b0:4f:e0:32:80:7d:6b:71:45:10:2b:81:ce:
         d6:0f:fa:e4:58:e8:76:36:21:3d:84:b2:ca:69:f7:8b:f2:45:
         fd:4e:4f:53:f6:d9:61:46:0e:22:91:94:4b:70:41:9a:88:25:
         f1:5d:92:15:d6:af:c2:9b:3c:7a:da:c5:42:ac:66:c9:26:62:
         da:99:9e:29:41:0f:20:3c:f9:d6:72:1b:34:8f:4d:8b:9b:cf:
         4f:69:ad:92:44:6b:a8:a1:f3:19:e3:84:5a:dc:d8:3e:f3:6b:
         17:c4:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:04:26 2026 by rpki-client