Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
File:                     GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft (raw, json)
Hash identifier:          qQJbIOrMCMf6qUWCIyFpeKbG+1U3GBaLgPwPCbmAb0E=
Subject key identifier:   06:72:21:43:66:6A:30:03:06:1A:2B:74:0C:AD:CE:56:98:0D:1E:76
Authority key identifier: 19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59
Certificate issuer:       /CN=A91A470C/serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
Manifest number:          8B
Signing time:             Thu 23 Jul 2026 09:35:27 +0000
Manifest this update:     Thu 23 Jul 2026 09:35:27 +0000
Manifest next update:     Thu 30 Jul 2026 09:35:27 +0000
Files and hashes:         1: GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl (hash: kAcEwdXNJodrXOFNximdjKVm/GniTb8dslA73yBQfX4=)
                          2: 7B31D5E4CD0B11F0A1E66D5FC4F9AE02.roa (hash: NnPs85doUGI8wBjuyfyV3CMN9xCSIH8SHzO99MPJ70I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl
                          rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:35:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A470C, serialNumber=199D4BE0608A56F50480C0AD2645DAD7B6900259
        Validity
            Not Before: Jul 23 09:35:27 2026 GMT
            Not After : Jul 30 09:35:27 2026 GMT
        Subject: CN=6a61e05f-90a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:b1:56:0a:ad:76:b9:e9:7d:08:80:f9:a3:
                    c2:e3:d0:b4:8d:2b:b2:ff:56:bc:bb:d8:0c:c7:c6:
                    cb:37:93:55:34:7f:43:b5:0f:6f:45:8f:23:c1:8d:
                    ba:b1:f1:53:b6:8e:6a:81:89:9c:66:23:c0:8a:62:
                    d8:bc:3d:97:c3:73:27:5e:9f:c9:ec:b9:5b:90:5a:
                    f5:81:64:28:fb:21:d6:2c:ac:0e:f5:cf:a3:5f:9b:
                    51:6b:7f:6b:a2:b4:45:51:2d:f3:f4:2c:5b:b7:5a:
                    3d:3b:03:41:ab:0b:27:f0:5f:54:4a:fc:47:16:98:
                    18:68:63:34:fb:13:77:63:4e:45:2f:3a:10:12:90:
                    54:6b:ae:26:ad:82:8a:7f:c2:a1:3a:e3:43:99:2f:
                    91:f6:9e:84:3b:46:f8:8e:3f:d9:5d:95:0e:73:ba:
                    b7:64:f5:03:9f:07:4b:37:b8:d1:65:2d:d6:ea:1e:
                    d9:2e:fd:19:45:9a:cb:df:b9:6e:a0:ce:7f:5f:51:
                    be:44:29:4a:1c:03:68:25:dd:43:bd:c2:d3:5f:1e:
                    b9:e3:53:b5:68:0e:c3:20:f7:6c:60:8e:85:23:63:
                    20:78:35:89:9c:49:b4:ae:f9:e8:82:8f:90:dc:8c:
                    07:83:d3:f0:cb:68:f4:f5:1a:71:4e:af:f0:fe:77:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:72:21:43:66:6A:30:03:06:1A:2B:74:0C:AD:CE:56:98:0D:1E:76
            X509v3 Authority Key Identifier:
                keyid:19:9D:4B:E0:60:8A:56:F5:04:80:C0:AD:26:45:DA:D7:B6:90:02:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZ1L4GCKVvUEgMCtJkXa17aQAlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A470C/AC4D0AB4C68911F08D2BFE0AC4F9AE02/GZ1L4GCKVvUEgMCtJkXa17aQAlk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:db:b3:10:d9:6f:d4:b7:24:d3:fd:41:fa:09:f7:17:79:52:
         a0:b6:c7:43:09:13:ca:f9:c8:99:b1:93:33:32:d0:39:cd:3e:
         fa:06:2c:ae:6b:b2:aa:1f:74:e1:3b:25:c7:34:74:1f:00:0c:
         05:bd:c9:1a:77:6b:f7:11:02:7a:2d:a5:d8:68:b4:1c:1d:bc:
         4b:9a:49:4f:3f:32:62:4c:1f:e8:5b:9c:44:22:4a:ff:72:b9:
         3f:19:eb:cc:f4:f8:8a:bb:86:9c:f4:52:a4:fb:77:b8:d0:ce:
         46:5a:67:58:ac:35:73:a1:54:13:6c:cd:52:ab:ef:dd:f2:ed:
         ad:c6:c7:47:65:d5:61:e5:4f:54:9a:90:8e:43:01:13:7a:ae:
         45:d7:84:9a:b6:a2:5b:9b:b3:ba:c6:2e:58:73:53:97:cd:2d:
         25:9e:9f:2b:7b:46:3d:5a:a1:46:d0:22:35:c4:f2:9c:ea:29:
         60:7d:cc:87:f5:1a:d4:ee:a5:d7:ce:9e:c1:4a:01:11:db:73:
         c7:61:e2:41:c8:8a:d3:2b:1c:a1:39:3c:db:f0:2e:d7:27:3c:
         19:52:04:e4:45:9f:ee:cf:0f:c3:0f:b4:8d:ff:91:84:7b:51:
         89:3b:1b:3b:a1:5f:09:e5:12:ff:87:f3:73:cb:a2:a6:db:19:
         a7:11:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:14 2026 by rpki-client