Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          mJXzO4WS5xpLCVb05HnKzErZHIOBsY98TzJXvLDJ8T8=
Subject key identifier:   D8:31:0C:C6:00:56:0B:50:B8:26:95:D5:A2:FC:19:B9:40:54:31:25
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          0148
Signing time:             Thu 23 Jul 2026 06:56:00 +0000
Manifest this update:     Thu 23 Jul 2026 06:55:59 +0000
Manifest next update:     Thu 30 Jul 2026 06:55:59 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: 768CkzJXO2nQKlAxDpvSuJW1x18YkLO1Jg7YjK5aHx8=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: Jul 23 06:55:59 2026 GMT
            Not After : Jul 30 06:55:59 2026 GMT
        Subject: CN=6a61bb00-62ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:49:69:8d:ce:f0:35:01:ce:18:03:12:f0:0f:
                    d2:37:6f:26:27:8c:28:8d:8b:90:1c:e3:ea:0c:ed:
                    f7:bb:77:21:92:d9:35:1b:63:6b:4b:45:ba:08:cd:
                    b5:3e:4a:40:0c:32:88:d8:55:62:e7:f9:f5:b5:61:
                    8f:90:7c:07:0f:70:89:60:5f:73:82:88:08:db:56:
                    e5:06:ed:50:bb:4b:4e:3a:6c:42:35:f5:8e:87:3d:
                    fc:8b:95:83:f2:84:0b:c5:21:11:da:10:50:9d:08:
                    e8:7a:66:1a:c8:90:53:53:a1:34:0f:87:c8:a0:e1:
                    50:8c:b1:81:cc:9a:27:c4:8e:2e:4f:bb:2f:f0:42:
                    22:c7:bc:79:2b:c1:dd:a0:d6:da:09:a0:8f:fc:a7:
                    8b:62:03:d5:f1:8c:ce:44:8b:c7:14:24:d0:ef:74:
                    84:76:f2:6f:51:62:fc:2f:2d:85:e6:cd:8f:01:7d:
                    ee:d0:d7:66:2c:0c:96:07:6b:07:b4:f2:bf:0c:87:
                    6d:1b:6b:ad:ec:04:6c:b6:4c:a4:e7:70:4a:45:41:
                    c2:06:a0:e4:a6:c7:cd:02:3e:d3:9b:5d:5f:4a:74:
                    97:9e:38:34:95:e7:75:38:97:8e:af:53:00:a0:e0:
                    e0:80:af:7c:6d:19:4f:07:ca:38:61:7e:d5:a8:7b:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:0C:C6:00:56:0B:50:B8:26:95:D5:A2:FC:19:B9:40:54:31:25
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a6:12:52:36:01:a6:49:9e:f3:d2:c5:b4:27:95:e2:b2:16:
         c6:5a:d9:78:14:f9:95:b5:96:f0:4a:af:ef:2c:d9:34:b5:bd:
         10:08:4a:90:19:db:6c:c1:44:95:9c:53:69:7b:b9:bb:1f:cf:
         01:22:cb:f7:0c:82:59:8c:08:dc:0b:2e:a3:f8:2f:d6:b9:9d:
         47:29:40:6d:80:0f:f7:e6:07:5f:e8:40:0d:da:08:cc:d6:9a:
         a6:aa:f9:fb:40:bc:fa:b9:64:65:ce:53:e4:cb:91:2b:2c:16:
         2c:09:2f:c3:b2:5d:b4:0d:57:22:16:ef:25:18:2e:66:16:0f:
         61:76:31:fd:59:05:69:cd:38:c9:aa:29:3c:f1:40:84:2c:38:
         fb:ab:40:ac:3c:c5:2b:82:2f:4c:0f:54:1c:bd:e5:f9:74:f6:
         1b:7c:3c:90:92:1c:37:40:71:ad:42:4e:b6:8e:ec:72:e2:66:
         c8:ae:e2:f5:10:fb:9b:7c:ce:6d:cb:e1:61:45:9d:23:8b:7a:
         5b:35:56:18:80:93:63:a5:d8:be:62:3d:4f:b9:53:9d:c5:30:
         52:e8:60:30:ec:cf:0c:d7:70:40:3e:7b:32:c9:6c:62:4d:92:
         99:3c:1d:86:82:f5:0f:4a:36:71:46:6a:69:de:7d:4b:56:29:
         45:e5:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:13 2026 by rpki-client