Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
File:                     GWgoqCH0FqupzswxqnGjA_QhR3g.mft (raw, json)
Hash identifier:          D89aQmi9UGwUbjjJAOXHWNqIk/d9JsN9DjF+YNcWfOU=
Subject key identifier:   CA:BB:46:F6:F5:ED:55:25:3D:F0:3C:2E:7B:F0:E8:DA:BD:A3:BC:6E
Authority key identifier: 19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78
Certificate issuer:       /CN=A9197724/serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
Manifest number:          014A
Signing time:             Thu 23 Jul 2026 06:52:14 +0000
Manifest this update:     Thu 23 Jul 2026 06:52:13 +0000
Manifest next update:     Thu 30 Jul 2026 06:52:13 +0000
Files and hashes:         1: GWgoqCH0FqupzswxqnGjA_QhR3g.crl (hash: YBi4Z4nnEyjfqyV4D48lnJqdv+y/O4od7WiTDfiY7FY=)
                          2: B5907D4E904E11EFA704CB22C4F9AE02.roa (hash: cDLrt4v1Ze1CHd7PH3aTcbAB48+XEiHFCNx9Tl/70Is=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl
                          rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197724, serialNumber=196828A821F416ABA9CECC31AA71A303F4214778
        Validity
            Not Before: Jul 23 06:52:13 2026 GMT
            Not After : Jul 30 06:52:13 2026 GMT
        Subject: CN=6a61ba1e-f6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:94:0f:fc:1f:70:c1:40:ea:56:ad:6f:03:
                    0a:8c:06:76:c8:86:d2:88:2c:46:60:78:9d:b8:d0:
                    f1:74:d6:7c:3f:80:c0:41:c0:92:97:21:fb:21:58:
                    52:33:b8:24:0d:e6:8a:f8:3e:c0:b2:c0:f6:76:46:
                    c6:97:04:b5:f6:25:e6:03:49:5f:32:25:56:65:c9:
                    17:ed:40:3d:60:8a:60:2e:ce:a8:e8:97:7c:10:5d:
                    48:41:75:5a:7d:e2:d9:6d:2f:dd:65:9d:7c:38:4a:
                    af:56:16:41:a2:67:70:a2:4c:4d:51:bc:21:96:f8:
                    90:c4:3f:4a:53:75:43:da:f7:d7:ec:61:b8:35:bd:
                    20:c6:c3:a8:30:8b:09:6c:ea:e2:e0:62:15:d1:1e:
                    94:38:f5:e1:17:9e:92:79:b0:f1:c5:e4:3d:3d:cb:
                    b9:52:ab:40:0e:55:1b:e1:54:b8:ca:ab:f2:13:6f:
                    ab:32:6c:21:85:a2:eb:87:80:8f:b0:df:f3:bf:f0:
                    c3:d2:c6:df:af:d0:af:57:31:0d:85:f5:af:d3:26:
                    24:01:f9:17:5f:59:64:bb:5b:ec:2f:4d:f1:4f:e5:
                    fd:da:ea:d7:e7:46:07:0f:1e:f8:82:f2:ce:62:c0:
                    94:ae:89:55:06:27:a8:eb:7e:76:ba:6d:55:e5:23:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BB:46:F6:F5:ED:55:25:3D:F0:3C:2E:7B:F0:E8:DA:BD:A3:BC:6E
            X509v3 Authority Key Identifier:
                keyid:19:68:28:A8:21:F4:16:AB:A9:CE:CC:31:AA:71:A3:03:F4:21:47:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GWgoqCH0FqupzswxqnGjA_QhR3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/5F9C6B92904D11EFA1103864C4F9AE02/GWgoqCH0FqupzswxqnGjA_QhR3g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:6e:8b:67:3c:e2:1f:63:fd:cb:9a:e5:e4:66:a1:de:e8:
         ad:6c:56:01:cf:c2:4d:68:2b:3a:d7:79:18:98:23:a3:3b:30:
         af:d4:59:c1:f4:08:1e:7d:69:13:d5:42:2c:84:df:56:75:d2:
         97:f8:ac:83:c4:c2:27:6e:f2:68:15:1e:16:ce:43:9c:a9:74:
         70:14:e8:51:4e:ad:9b:c0:41:38:aa:48:c5:68:40:2f:95:a1:
         c0:22:24:08:96:44:e7:21:fc:f0:5d:12:c6:d0:eb:d9:73:fd:
         dd:87:77:30:2b:49:81:8a:f4:c5:30:3f:c7:d4:5b:7f:5e:a5:
         90:92:dd:86:87:8d:40:fe:4e:bf:88:36:c3:ca:07:45:9b:cb:
         48:ac:25:26:de:f9:a2:73:3c:e7:33:2b:85:6f:5e:af:2b:0c:
         03:22:a0:f6:d0:ab:24:4c:10:cf:0a:f8:cb:f2:f5:ee:63:2a:
         ff:8e:19:20:60:53:98:ce:29:79:ef:f8:aa:f2:d9:b0:a3:f5:
         22:d8:5f:8d:6a:b4:a1:84:d3:a6:73:74:a3:9c:c7:24:69:89:
         df:5f:32:08:34:a3:38:83:01:3a:8c:85:c8:07:40:47:41:87:
         80:b1:ed:d1:13:f1:45:b4:7a:3c:ca:93:52:4e:69:3a:60:44:
         5b:9c:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:12:28 2026 by rpki-client