Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
File:                     ghbCCBg3GK6QL0P2htUqRHMUc5g.mft (raw, json)
Hash identifier:          6FvSkOGvch7j0LAOhmX6+B/nJ2cjDxiZGELmR9UWKig=
Subject key identifier:   1A:D9:00:96:6E:6F:91:08:D3:F9:7A:11:B7:46:60:E5:30:CE:4B:83
Authority key identifier: 82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
Certificate issuer:       /CN=A91B85E7/serialNumber=8216C208183718AE902F43F686D52A4473147398
Certificate serial:       1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
Manifest number:          19
Signing time:             Thu 23 Jul 2026 11:02:21 +0000
Manifest this update:     Thu 23 Jul 2026 11:02:21 +0000
Manifest next update:     Thu 30 Jul 2026 11:02:21 +0000
Files and hashes:         1: ghbCCBg3GK6QL0P2htUqRHMUc5g.crl (hash: Lpyz+PwtKnYsTiph1U53NTI2/yHgbjrUoIdT9ntKh9M=)
                          2: CCFC8F4A608611F181B017396F47A888.roa (hash: NX7Ssb4nWxHkVFaOlDGe8x1QhapCEO7PXneQ/Q5Nq70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
                          rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85E7, serialNumber=8216C208183718AE902F43F686D52A4473147398
        Validity
            Not Before: Jul 23 11:02:21 2026 GMT
            Not After : Jul 30 11:02:21 2026 GMT
        Subject: CN=6a61f4bd-78fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:1b:cc:90:d1:70:cf:2b:ed:d0:50:0e:72:
                    6c:82:da:b4:46:ab:9e:9a:54:6b:47:6a:60:19:f7:
                    5c:be:eb:b6:d7:04:1f:05:10:65:28:63:d5:2d:2a:
                    7f:2d:fc:7e:40:db:e5:c0:2d:fe:88:b6:99:a2:97:
                    85:38:5f:b7:1d:74:42:e1:15:e9:6f:79:b8:1f:df:
                    64:f0:a1:e4:3e:3b:26:ef:c9:3e:71:5f:72:c3:6a:
                    f3:43:d8:77:bd:45:a9:53:dd:9a:a4:f0:55:4f:c1:
                    d7:be:a8:83:00:ac:08:9f:98:df:fd:4f:ff:45:a0:
                    68:2b:53:f3:15:84:fe:10:5e:aa:37:7c:3a:b6:dc:
                    a0:10:88:bc:28:7d:fc:62:91:bd:25:2c:2d:d4:13:
                    5f:6e:33:6a:4f:a3:9a:a7:66:37:5f:3c:42:f4:24:
                    02:08:e7:76:cd:f9:c5:80:00:a1:bd:d5:70:80:0f:
                    ce:93:1d:24:65:80:b3:ba:d2:20:42:20:1b:7f:e9:
                    07:e1:09:31:e5:a9:8b:4c:64:dc:74:70:b3:de:62:
                    c4:d4:3b:5f:69:b7:31:11:36:59:22:b8:cd:d4:2b:
                    11:09:7f:44:4a:7a:43:b8:d8:22:fa:62:6d:1f:6d:
                    7a:61:18:fd:c0:f6:4b:29:df:e1:3b:24:01:7d:ad:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D9:00:96:6E:6F:91:08:D3:F9:7A:11:B7:46:60:E5:30:CE:4B:83
            X509v3 Authority Key Identifier:
                keyid:82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:8a:74:65:06:10:b4:2d:29:6c:32:29:0e:29:6a:a8:d0:
         50:a4:ba:80:ca:b3:97:8c:5d:9f:19:a1:d1:86:71:8f:56:64:
         ea:70:1b:97:ac:07:70:3f:51:b5:9d:25:f0:49:e4:2d:7d:0d:
         e9:40:2d:95:4a:e4:d0:9a:e4:b3:9c:8b:cc:48:36:04:b8:f0:
         2b:e0:74:73:ae:bc:47:bf:8e:e2:93:40:c9:bf:2b:0f:cf:72:
         50:e5:96:51:7d:ac:45:d8:07:62:46:63:9b:ae:50:45:a2:6b:
         31:f3:41:04:e2:f7:72:e9:c3:6f:9b:2c:e6:eb:f0:4b:b2:90:
         79:f6:b7:f3:4f:61:71:b2:9d:4d:8b:a4:1f:a0:f8:60:b6:45:
         e0:34:a0:34:76:68:32:c8:7f:d1:85:c1:8c:08:da:4e:dd:bb:
         7f:55:80:02:64:3c:63:19:24:5a:59:89:84:00:0e:49:02:de:
         52:c3:1b:06:a4:fc:d5:38:81:24:ca:0f:ef:82:44:ce:45:ff:
         e0:03:8b:f6:d2:2b:23:06:55:3c:af:d9:8e:f2:e7:fe:36:27:
         24:0b:79:dd:43:98:17:d0:8f:86:b2:a4:4d:f4:5f:d6:72:42:
         36:aa:44:2e:f6:a1:db:92:25:13:ff:47:47:7b:4d:1a:78:30:
         36:4d:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:59 2026 by rpki-client