Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File:                     Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier:          5tSsu8gdyeY+vIz3uOkU+CGOkORltM3S81p0T4AVICo=
Subject key identifier:   6E:8F:0A:9F:35:2A:02:BF:70:9F:A6:C9:51:1F:1D:D0:C3:81:1B:A3
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer:       /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial:       0816
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number:          0800
Signing time:             Wed 22 Jul 2026 21:51:53 +0000
Manifest this update:     Wed 22 Jul 2026 21:51:52 +0000
Manifest next update:     Wed 29 Jul 2026 21:51:52 +0000
Files and hashes:         1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: vTf8CYj9nlA0j9gAdMLpyxSZ9V3LeZ0VABc6ICTq+mY=)
                          2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
                          rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
        Validity
            Not Before: Jul 22 21:51:52 2026 GMT
            Not After : Jul 29 21:51:52 2026 GMT
        Subject: CN=6a613b79-8a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:00:db:7d:79:83:fb:74:9c:74:9e:3b:d5:
                    32:63:af:ce:52:52:66:8f:d8:2e:d2:ae:96:22:95:
                    d7:e3:b7:8d:ee:54:e5:10:7a:02:6b:2b:3f:71:6f:
                    28:fc:83:d3:ac:39:f7:75:43:0f:81:cf:b2:83:48:
                    76:09:1a:7b:ac:90:80:53:71:2d:5b:65:5e:72:12:
                    f3:40:8f:b5:09:86:08:ed:ab:3c:42:ee:7c:df:4f:
                    09:d3:87:b4:43:24:62:8d:95:ea:c5:86:24:a4:33:
                    4b:10:62:23:6a:7a:7b:1f:94:44:66:bc:e9:18:22:
                    3a:da:91:c7:5d:d2:d2:84:dc:49:c0:8d:e1:94:bc:
                    17:8d:a4:d7:f9:0a:3b:a1:73:9c:02:58:5d:7b:e4:
                    35:f4:50:df:ef:ab:06:1a:68:53:8e:d5:9b:55:18:
                    46:59:9e:99:a5:9e:30:af:50:71:9c:16:03:b2:85:
                    a4:33:9d:91:04:83:b1:e4:f1:ee:5a:87:e0:e5:ab:
                    a6:8e:7f:4c:9e:d7:2e:75:5e:46:a4:ea:f2:f7:c9:
                    6a:82:0d:48:68:b9:f7:ad:c0:d3:6a:cc:6b:f1:8f:
                    2b:b6:6a:bd:51:f3:af:33:68:a7:4e:8c:7f:09:7c:
                    24:aa:da:4d:8a:f7:77:e7:cb:10:a0:6f:0d:e2:84:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8F:0A:9F:35:2A:02:BF:70:9F:A6:C9:51:1F:1D:D0:C3:81:1B:A3
            X509v3 Authority Key Identifier:
                keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:6c:90:7b:63:ee:5d:a1:cc:02:9e:a9:47:cb:13:ce:7b:
         52:1e:e8:bb:29:52:e8:4c:87:65:40:c7:5a:85:30:0e:3d:80:
         f3:ae:e6:03:35:76:92:dc:d1:28:6b:c0:5b:39:1c:29:04:b0:
         a1:00:fa:37:7f:5c:62:35:e9:36:59:fe:12:02:df:75:ac:b5:
         66:b1:9f:9d:c4:86:48:1a:81:48:aa:67:08:2b:60:bc:34:e3:
         d8:38:1f:e1:4e:a7:ab:d9:ff:3e:c0:6d:6b:dc:1e:44:49:62:
         6a:fc:a2:fa:32:60:c1:91:83:36:4e:4b:07:b9:09:a7:2a:7e:
         11:e4:47:fc:25:da:f2:0d:31:43:4e:b3:73:41:64:58:11:ea:
         50:ce:17:c2:16:8a:b2:fe:b2:3d:87:37:5b:05:81:ef:e2:28:
         48:e0:b7:b7:32:41:38:21:b8:ef:40:fc:c5:ce:25:7a:f3:0a:
         2b:8e:06:20:89:0e:d6:d4:6f:ea:7a:8d:0b:a9:33:bb:2b:df:
         ec:20:7c:ec:5f:45:8c:d0:8e:fc:86:e6:0b:8a:a0:f1:8f:c9:
         41:44:fc:4e:0f:e6:59:1d:67:ba:d3:3a:9b:5b:99:21:26:cf:
         86:3d:26:be:24:b6:94:93:c1:d7:60:06:72:bd:2e:fc:09:82:
         45:b7:f2:ae
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDM4MzQxMTAvBgNVBAUTKDFBMEQwQkZBMTkxOTExRjg1NUI1QkFCREZBMDNCOUMw
N0ZERDIyODIwHhcNMjYwNzIyMjE1MTUyWhcNMjYwNzI5MjE1MTUyWjAYMRYwFAYD
VQQDEw02YTYxM2I3OS04YTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngcA2315g/t0nHSeO9UyY6/OUlJmj9gu0q6WIpXX47eN7lTlEHoCays/cW8o
/IPTrDn3dUMPgc+yg0h2CRp7rJCAU3EtW2VechLzQI+1CYYI7as8Qu58308J04e0
QyRijZXqxYYkpDNLEGIjanp7H5REZrzpGCI62pHHXdLShNxJwI3hlLwXjaTX+Qo7
oXOcAlhde+Q19FDf76sGGmhTjtWbVRhGWZ6ZpZ4wr1BxnBYDsoWkM52RBIOx5PHu
Wofg5aumjn9MntcudV5GpOry98lqgg1IaLn3rcDTasxr8Y8rtmq9UfOvM2inTox/
CXwkqtpNivd358sQoG8N4oR0MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6PCp81
KgK/cJ+myVEfHdDDgRujMB8GA1UdIwQYMBaAFBoNC/oZGRH4VbW6vfoDucB/3SKC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzgzNC84QkMyRURCMDNB
NDExMUVCODNCNTdGMTRDNEY5QUUwMi9HZzBMLWhrWkVmaFZ0YnE5LWdPNXdIX2RJ
b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dnMEwtaGtaRWZoVnRicTktZ081d0hfZElvSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MzgzNC84QkMyRURCMDNBNDExMUVCODNCNTdGMTRDNEY5QUUwMi9HZzBMLWhrWkVm
aFZ0YnE5LWdPNXdIX2RJb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAf6ZskHtj7l2hzAKeqUfLE857Uh7ouylS6EyHZUDHWoUwDj2A867mAzV2ktzR
KGvAWzkcKQSwoQD6N39cYjXpNln+EgLfday1ZrGfncSGSBqBSKpnCCtgvDTj2Dgf
4U6nq9n/PsBta9weREliavyi+jJgwZGDNk5LB7kJpyp+EeRH/CXa8g0xQ06zc0Fk
WBHqUM4XwhaKsv6yPYc3WwWB7+IoSOC3tzJBOCG470D8xc4levMKK44GIIkO1tRv
6nqNC6kzuyvf7CB87F9FjNCO/IbmC4qg8Y/JQUT8Tg/mWR1nutM6m1uZISbPhj0m
viS2lJPB12AGcr0u/AmCRbfyrg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:24 2026 by rpki-client