Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
File:                     G0cdrc2RIJM1E26s9syYiChlSyo.mft (raw, json)
Hash identifier:          EYXr11HM+jz1dYK4wfzHQSTw63sXigzEggSv6a6Aq2o=
Subject key identifier:   4F:B7:1B:E0:0E:0D:EC:37:8B:5A:EB:DF:42:34:AF:2E:87:41:35:9C
Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A
Certificate issuer:       /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
Certificate serial:       0E0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
Manifest number:          0DF2
Signing time:             Fri 24 Jul 2026 18:06:52 +0000
Manifest this update:     Fri 24 Jul 2026 18:06:52 +0000
Manifest next update:     Fri 31 Jul 2026 18:06:52 +0000
Files and hashes:         1: G0cdrc2RIJM1E26s9syYiChlSyo.crl (hash: +444mGojUcUVZqMXEJ4Xa0lHsyXMQuUS+Jmk1Nzpjrg=)
                          2: 7A9CD75E23E311F0BB28EA29C4F9AE02.roa (hash: VZEltJw0vEDbOnRvRf9ELAdzaAN+QgrjbGf4Pt5gMhA=)
                          3: 06370CB2DB9211E9B70EDD2EC4F9AE02.roa (hash: QJuobED8AIYNaA07H0l+GwSOVK0e9Xo+0hZGeA9Tr5g=)
                          4: 645EF9CADB9311E988E56C33C4F9AE02.roa (hash: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl
                          rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3599 (0xe0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A
        Validity
            Not Before: Jul 24 18:06:52 2026 GMT
            Not After : Jul 31 18:06:52 2026 GMT
        Subject: CN=6a63a9bc-6553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:08:c1:5f:ce:87:7a:06:7f:f8:76:97:d9:
                    03:91:d1:17:4e:2b:a9:ff:2c:a0:6c:34:83:24:2d:
                    a4:a0:db:c3:42:ba:9c:ef:b0:e1:e1:cb:01:74:2d:
                    59:a4:ee:1b:57:e6:f3:84:db:4d:27:8b:9e:62:2d:
                    4b:e2:30:19:b0:fd:9a:18:26:ba:79:cf:34:ab:28:
                    6f:dc:44:fb:67:c3:55:c4:92:14:10:8c:da:c7:d1:
                    fe:15:88:cf:b1:1b:db:fc:af:9e:22:1f:3e:b1:bf:
                    32:69:0b:fe:8f:ef:66:3e:c4:2b:cb:f0:68:28:af:
                    5d:08:44:92:2a:bc:63:fd:9b:31:01:6b:c0:7f:2f:
                    26:bd:b3:82:dd:7a:d7:02:51:ed:03:88:dc:89:df:
                    df:42:7e:47:a6:8e:62:86:4b:14:c9:98:6e:99:fc:
                    55:94:21:7a:8b:e1:46:7e:f3:1f:20:85:72:f8:4c:
                    3a:f4:e1:40:43:c0:0c:41:4b:76:2f:c0:c4:22:7c:
                    40:c4:7f:7f:91:37:b9:ec:41:22:5b:63:7d:f0:21:
                    8f:ca:e2:ca:3d:d4:0c:b3:6d:20:5a:d3:c4:6e:ed:
                    ed:fc:7d:bb:3b:9f:d0:d6:c2:62:ec:ed:f5:ef:b4:
                    22:04:61:db:24:38:ef:73:e9:1c:8d:c4:d9:bc:99:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:1B:E0:0E:0D:EC:37:8B:5A:EB:DF:42:34:AF:2E:87:41:35:9C
            X509v3 Authority Key Identifier:
                keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cb:cf:7d:a8:43:60:d6:19:bb:66:4a:b6:4f:f2:f1:c6:9a:
         5e:0a:3a:fe:51:11:08:0a:c8:0f:6d:48:5b:a6:07:21:eb:69:
         b8:b7:4d:e7:03:ab:ae:02:e8:54:e1:12:c8:a7:80:e5:b3:94:
         4b:08:e7:65:56:bd:9b:f4:9d:ac:33:71:c9:d3:ce:38:02:ed:
         e9:57:d7:41:9b:76:54:79:8b:5a:f9:9f:3c:84:b3:3c:f4:a3:
         c8:9e:82:70:16:b7:70:cf:48:2d:e9:ac:05:1e:52:66:25:25:
         f6:97:51:3d:22:5e:db:63:70:a4:b3:f7:3e:3f:d1:37:3d:e5:
         14:ee:36:b5:8c:96:5b:60:8b:aa:26:a8:6e:b5:bc:b4:01:e9:
         ea:8f:99:08:ef:7a:0d:c8:7f:48:c8:00:b7:24:e3:d3:64:a4:
         c7:e6:fc:57:41:1c:99:9a:1b:a5:72:4a:06:15:db:84:95:33:
         d0:99:6f:ae:df:c0:bd:c7:85:65:13:38:f6:ab:f1:25:75:a3:
         5d:10:2b:47:5b:7a:58:99:b7:a6:e2:9a:e5:d3:0c:83:9d:38:
         14:4a:10:3e:38:f3:86:c9:a0:89:15:30:f5:83:20:be:36:e1:
         3e:61:54:00:1b:d7:26:99:3b:4c:5b:1d:ac:03:dc:dd:38:76:
         74:66:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:07 2026 by rpki-client