Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
File:                     _GiPuVzFIF4D5wpgXJlMXUlaszI.mft (raw, json)
Hash identifier:          9aFB3LA9o7tGnQQ1tr7+co4nekg61C3s3yeylJmb9/Y=
Subject key identifier:   E1:1B:41:F5:45:ED:72:AF:8B:10:78:35:BF:90:47:FA:4C:C7:76:C0
Authority key identifier: FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32
Certificate issuer:       /CN=A91CFD43/serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
Certificate serial:       03D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
Manifest number:          03D0
Signing time:             Thu 23 Jul 2026 01:29:25 +0000
Manifest this update:     Thu 23 Jul 2026 01:29:24 +0000
Manifest next update:     Thu 30 Jul 2026 01:29:24 +0000
Files and hashes:         1: _GiPuVzFIF4D5wpgXJlMXUlaszI.crl (hash: EW5WxgWMtGsszmRleYsffu0P15VeNf8jj4RkzIYegC8=)
                          2: 4E8DA224547711EF9EDD014DC4F9AE02.roa (hash: r5gelgjZp5B3j7+l6m368Vdh062KkVezcOMS+HcP7j0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD43, serialNumber=FC688FB95CC5205E03E70A605C994C5D495AB332
        Validity
            Not Before: Jul 23 01:29:24 2026 GMT
            Not After : Jul 30 01:29:24 2026 GMT
        Subject: CN=6a616e74-1ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:80:4a:02:2b:ac:fb:9b:8d:c6:55:66:e2:
                    6d:23:b0:67:02:54:ad:ec:99:fc:33:68:13:d4:e1:
                    19:19:c2:0c:01:f3:35:14:02:e6:44:a4:19:ee:74:
                    68:1c:98:76:d1:a9:79:54:0c:35:24:f4:15:52:de:
                    72:7d:ee:38:cf:14:84:55:8f:26:ad:0e:1a:7f:bd:
                    d6:f8:07:88:51:9d:6e:25:21:a1:51:77:01:7a:96:
                    c5:71:df:c7:06:1c:07:ce:7a:04:fa:a5:1d:fa:f3:
                    4b:63:96:34:09:51:dc:a4:28:5b:4c:6f:23:e0:f2:
                    9e:fe:fe:ad:28:69:9b:06:c0:44:d8:d6:09:33:bd:
                    5e:77:28:87:a2:da:97:55:3d:3b:b7:23:5d:de:9c:
                    70:6d:b8:7f:74:14:35:9f:3b:66:4d:ee:bc:fa:a3:
                    84:3f:6d:b0:0e:d3:e0:d6:9c:d8:b3:1d:8a:f8:7a:
                    60:57:bd:c0:7b:3e:0b:04:29:39:f8:b1:03:36:84:
                    8f:ce:5d:af:9c:e8:3e:7d:7f:00:34:33:3d:f2:3f:
                    24:df:7a:00:da:2d:2d:01:c0:15:e7:dd:04:45:6a:
                    8b:a6:a5:f3:27:bf:4c:39:9b:4a:96:8e:6b:bb:04:
                    c4:b3:32:6d:f7:b1:63:1e:e2:48:66:12:70:20:46:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:41:F5:45:ED:72:AF:8B:10:78:35:BF:90:47:FA:4C:C7:76:C0
            X509v3 Authority Key Identifier:
                keyid:FC:68:8F:B9:5C:C5:20:5E:03:E7:0A:60:5C:99:4C:5D:49:5A:B3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GiPuVzFIF4D5wpgXJlMXUlaszI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD43/7D998076DCD111ECA3AB9D36C4F9AE02/_GiPuVzFIF4D5wpgXJlMXUlaszI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:41:9b:aa:7b:36:93:0a:b7:fd:ac:02:d8:14:c6:f7:77:78:
         ff:c7:dc:41:a7:5b:67:fa:79:49:f8:fe:f6:63:f7:82:2e:5f:
         b0:b3:42:1c:6e:5d:2b:61:43:8d:5a:ed:95:42:97:08:8a:f0:
         7f:36:eb:aa:86:c7:e6:44:bb:69:ca:44:65:dc:86:34:5c:5e:
         fc:1b:96:c8:c5:6a:54:99:eb:15:52:fc:27:b6:dc:22:76:e9:
         f6:39:f6:6c:f0:8e:06:33:b1:06:d8:f1:8f:4c:20:60:3f:55:
         f0:f3:c8:f9:03:9f:b2:06:ec:d0:fb:aa:ba:fc:35:0d:ea:21:
         89:c3:1d:c8:fa:90:f1:e5:e4:ab:73:44:59:d4:8e:56:9d:c3:
         a4:5b:a1:33:95:d7:08:04:68:b9:56:b5:4c:09:26:7a:0f:3f:
         10:c7:4f:07:5e:ed:94:07:9b:db:cb:7c:44:bc:75:37:3e:23:
         de:b9:7c:b1:29:57:5b:e7:01:a8:b6:b9:53:ee:39:3b:85:20:
         e1:e2:a0:e2:ab:f8:fc:83:18:92:f0:8d:e9:73:24:5c:aa:a5:
         59:a6:81:ac:3e:21:bc:3e:fb:86:5f:c9:cb:bc:43:19:c6:b3:
         e6:8d:af:98:d9:1e:c0:6f:25:37:c1:b5:1e:7c:b0:2e:1b:6b:
         dd:17:42:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:36:58 2026 by rpki-client