Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
File:                     GmByWuQEWJbjBAgwAyE-6pUmfs8.mft (raw, json)
Hash identifier:          3CGo9pIHBEbo5gHLTfFe/Toet4oVZpzEuERUfIJ0fjA=
Subject key identifier:   8D:CE:72:EB:55:52:DC:93:5B:73:E9:9B:21:46:70:20:E2:D4:28:5C
Authority key identifier: 1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF
Certificate issuer:       /CN=A91BB35A/serialNumber=1A60725AE4045896E304083003213EEA95267ECF
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
Manifest number:          022A
Signing time:             Thu 23 Jul 2026 03:57:20 +0000
Manifest this update:     Thu 23 Jul 2026 03:57:19 +0000
Manifest next update:     Thu 30 Jul 2026 03:57:19 +0000
Files and hashes:         1: GmByWuQEWJbjBAgwAyE-6pUmfs8.crl (hash: opDaiBafiu8pAJfLWXiaOp7IKGdmyQ/g0x3Uex5YSwQ=)
                          2: 1779BD7C3B2311EE91010B3EC4F9AE02.roa (hash: NX2zo596WFABHjOqY/7BHPvIqM7cOKNcg6FrWFpokQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl
                          rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB35A, serialNumber=1A60725AE4045896E304083003213EEA95267ECF
        Validity
            Not Before: Jul 23 03:57:19 2026 GMT
            Not After : Jul 30 03:57:19 2026 GMT
        Subject: CN=6a619120-4307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d5:7e:ca:40:fc:f5:f8:d8:09:e7:35:0f:32:
                    54:19:92:db:d5:35:79:5c:a8:42:de:28:12:c2:00:
                    c9:4a:f9:1a:09:54:2f:62:67:26:c9:50:12:1b:3f:
                    67:dc:8f:89:a8:16:b3:0f:5a:71:a1:76:40:fc:82:
                    6a:56:3a:83:66:70:36:9f:0c:8f:f3:05:af:6a:45:
                    b9:4f:47:67:50:25:8a:84:58:37:f6:e8:16:ef:f5:
                    d9:3b:77:9c:f5:48:d1:36:f0:27:20:ec:d6:c5:90:
                    bb:57:51:67:39:c6:8f:b5:89:c6:2b:8e:51:b5:ab:
                    e3:1f:f1:ae:92:73:ff:05:4a:1a:9d:41:9a:68:cc:
                    6a:7f:7a:ab:e0:3f:62:05:78:2f:81:2c:a5:4b:5e:
                    a6:03:d7:00:eb:58:62:ed:ce:76:44:d5:aa:ae:fc:
                    ba:5e:7f:61:24:43:ec:9c:b0:ca:5f:f7:d1:ba:94:
                    0e:d1:62:7e:fb:fc:93:46:e1:10:53:59:e0:fd:a3:
                    03:a3:b2:31:45:72:a3:e3:5f:a6:aa:08:e0:32:1b:
                    81:26:dc:d4:56:d9:79:08:5e:80:6f:77:9e:e1:08:
                    0e:cb:da:fd:18:a2:1b:c1:b9:2c:18:dc:b3:24:59:
                    c2:4a:db:31:3f:ef:04:d7:32:b1:dd:ce:0a:5a:ea:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CE:72:EB:55:52:DC:93:5B:73:E9:9B:21:46:70:20:E2:D4:28:5C
            X509v3 Authority Key Identifier:
                keyid:1A:60:72:5A:E4:04:58:96:E3:04:08:30:03:21:3E:EA:95:26:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmByWuQEWJbjBAgwAyE-6pUmfs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB35A/006CD94A3B2111EE804C6383C4F9AE02/GmByWuQEWJbjBAgwAyE-6pUmfs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:ef:2e:9e:c9:b5:63:a6:c2:b7:82:3e:a2:17:e1:3e:56:
         82:7e:9a:f4:55:5f:e3:2b:59:06:c9:b5:02:ca:d3:41:fa:0e:
         03:6d:f5:2a:1f:ab:ba:e8:81:8a:47:a0:d0:05:37:36:0a:85:
         0a:01:dc:a4:bc:4b:d1:ae:6d:6d:9b:34:28:a7:39:81:c9:6e:
         50:87:fe:73:6a:57:f0:50:88:e9:3e:0e:51:26:47:a0:a8:9d:
         bd:b3:33:48:1b:ee:d2:43:3f:e8:f7:2f:8e:68:b6:ca:0f:2e:
         08:05:22:95:fd:13:4e:0a:1e:32:94:2b:91:04:eb:55:4b:7e:
         81:a6:97:a8:d2:9a:79:5a:61:20:89:95:33:c5:9e:33:96:97:
         bb:56:11:70:b1:23:05:8f:73:20:cd:78:ee:1e:52:0b:27:75:
         94:6c:63:0e:f8:86:8f:97:0c:fd:20:08:9d:51:2e:88:14:38:
         7f:90:05:c8:ca:51:e6:d4:8b:44:de:e0:61:45:14:f9:24:3b:
         ce:59:12:8d:4c:26:f8:1b:6a:9d:24:51:36:7d:1f:9d:50:18:
         c2:db:fd:91:7c:e0:2c:10:26:bb:da:67:c0:b3:f7:56:66:5e:
         b8:df:18:fe:48:ad:ce:c7:a9:ae:2b:48:33:0f:b6:30:d0:65:
         c8:8e:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:44 2026 by rpki-client