Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File:                     ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier:          9Nha3Z2kedZkwkkpQC8+AU/Wi+vSr6jjCIoBoFxEB5Y=
Subject key identifier:   F5:6A:16:3C:24:40:A2:B1:04:67:4A:99:91:88:7E:26:6A:F4:CB:1E
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       06EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number:          06E5
Signing time:             Wed 22 Jul 2026 22:54:33 +0000
Manifest this update:     Wed 22 Jul 2026 22:54:33 +0000
Manifest next update:     Wed 29 Jul 2026 22:54:33 +0000
Files and hashes:         1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: la7OTKoDEMMn1yAeqtrGgOYVAEDjw3Bm7rnIHE2C58M=)
                          2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: OC1wYvk7HdnATgeP8AW3eH45pm98AkZGK4N7Ka/dybY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: Jul 22 22:54:33 2026 GMT
            Not After : Jul 29 22:54:33 2026 GMT
        Subject: CN=6a614a29-681d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:e2:5f:06:4a:ec:6d:1f:94:4c:a6:dd:f7:
                    8c:2b:c6:50:59:8d:29:b8:f6:89:06:3b:0b:2c:ff:
                    3f:88:5c:bb:1b:cc:e2:8d:de:6b:6f:e5:83:69:74:
                    66:b4:ed:4a:9e:2b:cc:05:30:9b:18:30:63:9a:73:
                    d2:81:5a:e9:f0:68:5b:d2:6e:3b:f1:67:7f:ba:d1:
                    19:e9:36:61:d0:03:7b:04:e6:d4:7e:d5:d6:83:5a:
                    80:ea:ee:af:27:43:23:ed:51:d4:a6:8c:58:a4:12:
                    21:9b:1c:87:7d:33:b7:93:54:4e:f3:ec:8d:71:24:
                    3b:1a:9b:f3:2f:96:af:4b:2e:b9:f2:1f:3e:f5:70:
                    60:bf:8b:25:39:7b:70:dc:ac:67:59:5c:34:ce:82:
                    3c:f5:0d:75:ea:0b:61:1c:0e:8d:2d:e3:c2:6a:dc:
                    72:ad:91:60:2b:13:93:2e:27:23:67:22:5c:3c:ae:
                    ba:1d:9b:cc:bb:e1:70:ba:0e:c7:22:f3:15:39:05:
                    2c:3c:07:95:28:58:9c:c0:0b:2d:a1:77:88:3c:37:
                    43:12:7d:ed:3c:38:61:73:e8:34:1e:ec:42:a4:9d:
                    9e:2b:3b:18:24:bf:e9:c1:b8:9e:3a:d7:97:7b:98:
                    54:40:0e:c5:0e:d7:2c:32:ca:83:b4:f8:33:4e:2e:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:16:3C:24:40:A2:B1:04:67:4A:99:91:88:7E:26:6A:F4:CB:1E
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:28:ce:8d:4a:d4:36:76:ab:4a:22:d2:21:55:8f:41:bf:a2:
         76:d0:3e:79:f0:32:e3:87:8a:eb:93:a5:94:94:26:71:eb:a8:
         65:b4:5a:52:fa:e4:45:23:31:f5:af:d7:d1:96:a9:2f:7f:af:
         0b:c0:b3:94:25:50:84:67:f4:69:8f:e7:7d:b5:8b:7e:94:ee:
         4e:5b:5b:e9:34:a0:0e:01:70:23:9b:16:10:fc:b5:a6:49:19:
         fc:2e:f8:2f:38:f0:51:51:41:72:36:7d:03:25:7f:42:44:3e:
         d0:db:2c:76:44:fc:92:1f:93:1d:42:51:3d:a6:86:3f:5f:37:
         db:e6:48:c2:81:2d:38:12:ca:75:d9:11:d0:16:37:33:53:4d:
         74:f4:c1:13:7f:2b:f5:b3:5d:0f:0b:fb:32:c3:66:db:34:06:
         ab:a2:92:a3:ed:28:60:e8:f2:c4:e1:0e:b0:54:df:6c:08:fd:
         dc:ed:44:9f:71:16:e4:1a:33:7a:1b:16:9b:40:61:db:5e:55:
         b3:6a:48:b0:23:8e:f5:06:89:cc:75:be:2a:17:a8:76:3e:e4:
         ca:a7:0f:9a:d6:bd:34:4e:05:8e:4a:bc:94:3f:d3:b8:d0:76:
         f3:c0:96:6b:18:40:f1:e0:db:07:d9:fa:93:e1:4e:5f:1a:9a:
         ea:ea:2a:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM3NzcxMTAvBgNVBAUTKDgyMTRGNTFBOTgxNDQxRjE1RkI5MTIyMjVGRDdEMDJG
Qjk0M0FFMzUwHhcNMjYwNzIyMjI1NDMzWhcNMjYwNzI5MjI1NDMzWjAYMRYwFAYD
VQQDEw02YTYxNGEyOS02ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApR3iXwZK7G0flEym3feMK8ZQWY0puPaJBjsLLP8/iFy7G8zijd5rb+WDaXRm
tO1KnivMBTCbGDBjmnPSgVrp8Ghb0m478Wd/utEZ6TZh0AN7BObUftXWg1qA6u6v
J0Mj7VHUpoxYpBIhmxyHfTO3k1RO8+yNcSQ7GpvzL5avSy658h8+9XBgv4slOXtw
3KxnWVw0zoI89Q116gthHA6NLePCatxyrZFgKxOTLicjZyJcPK66HZvMu+Fwug7H
IvMVOQUsPAeVKFicwAstoXeIPDdDEn3tPDhhc+g0HuxCpJ2eKzsYJL/pwbieOteX
e5hUQA7FDtcsMsqDtPgzTi4sGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVqFjwk
QKKxBGdKmZGIfiZq9MseMB8GA1UdIwQYMBaAFIIU9RqYFEHxX7kSIl/X0C+5Q641
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzc3Ny83Nzk3NjBCQUEz
RTUxMUVCQTE4RTkzN0VDNEY5QUUwMi9naFQxR3BnVVFmRmZ1UklpWDlmUUw3bERy
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doVDFHcGdVUWZGZnVSSWlYOWZRTDdsRHJqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Qzc3Ny83Nzk3NjBCQUEzRTUxMUVCQTE4RTkzN0VDNEY5QUUwMi9naFQxR3BnVVFm
RmZ1UklpWDlmUUw3bERyalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUSjOjUrUNnarSiLSIVWPQb+idtA+efAy44eK65OllJQmceuoZbRaUvrkRSMx
9a/X0ZapL3+vC8CzlCVQhGf0aY/nfbWLfpTuTltb6TSgDgFwI5sWEPy1pkkZ/C74
LzjwUVFBcjZ9AyV/QkQ+0NssdkT8kh+THUJRPaaGP1832+ZIwoEtOBLKddkR0BY3
M1NNdPTBE38r9bNdDwv7MsNm2zQGq6KSo+0oYOjyxOEOsFTfbAj93O1En3EW5Boz
ehsWm0Bh215Vs2pIsCOO9QaJzHW+Kheodj7kyqcPmta9NE4Fjkq8lD/TuNB288CW
axhA8eDbB9n6k+FOXxqa6uoqXw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:50 2026 by rpki-client