Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File:                     gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier:          4uChPrme8bG/C1hB8KfDt5ZcUxRNwFZ0yWkxinTqkA0=
Subject key identifier:   64:BC:6B:79:50:1E:EC:03:2C:3B:3A:49:9D:38:02:8D:05:C1:FA:8D
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer:       /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number:          0853
Signing time:             Wed 22 Jul 2026 21:27:33 +0000
Manifest this update:     Wed 22 Jul 2026 21:27:33 +0000
Manifest next update:     Wed 29 Jul 2026 21:27:33 +0000
Files and hashes:         1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: zSAqZMz6PPZ2xKmp2b9ski4fCdaV28+5//eoPESji/8=)
                          2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: QgpTu41sM6G7HXGpsEzpZ01ASqr1eYUm5aigZVfQiCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
                          rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
        Validity
            Not Before: Jul 22 21:27:33 2026 GMT
            Not After : Jul 29 21:27:33 2026 GMT
        Subject: CN=6a6135c5-4a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:36:8e:7a:2b:da:2b:a3:c7:2c:16:34:0c:
                    7e:fa:f2:5c:e8:11:e7:69:68:80:10:cf:17:74:49:
                    81:87:4f:07:d2:c2:74:b6:05:17:22:01:18:fe:65:
                    42:2c:28:a1:3c:26:0f:f7:bb:23:15:a0:02:7e:76:
                    97:4b:7e:aa:68:d0:34:d6:a4:66:b9:c8:15:a8:56:
                    20:6d:07:84:c7:d8:2c:a6:12:e6:28:cd:ff:9a:76:
                    6c:a0:c9:90:b8:aa:78:03:32:e0:c1:a5:97:1c:e8:
                    ff:c8:5a:da:0f:b0:d1:d1:6a:06:ec:c0:ab:ae:fb:
                    70:66:e9:f6:79:22:21:79:19:cc:42:50:05:8b:a5:
                    7b:bf:7b:71:9e:6f:f6:e6:7e:1e:82:6f:93:a7:c2:
                    a4:71:c6:d2:2b:8d:7e:fd:bb:79:9c:93:e2:06:33:
                    8d:1d:c8:2a:a6:ed:2e:01:0a:54:41:78:86:64:1f:
                    2b:28:94:ae:59:27:6f:a8:84:22:e0:89:6c:ff:37:
                    73:ba:f3:d6:3d:57:7e:e8:3f:be:49:34:f2:be:46:
                    50:e7:07:b9:7f:40:ab:a0:d8:20:bb:a3:af:49:95:
                    40:9f:58:55:f4:9c:d7:82:e7:05:98:ee:dd:a2:b6:
                    d7:04:ef:79:ac:58:be:a5:58:f6:a6:f8:79:f5:0b:
                    76:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:6B:79:50:1E:EC:03:2C:3B:3A:49:9D:38:02:8D:05:C1:FA:8D
            X509v3 Authority Key Identifier:
                keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:f5:82:14:86:36:fb:89:06:fc:d9:86:14:4e:1b:7f:76:
         4b:5f:f8:b2:12:aa:2c:30:5a:ec:6f:cf:35:a7:93:78:4d:65:
         48:1c:71:68:cd:6c:a8:c3:12:0e:6e:99:cc:01:37:0e:fe:3b:
         8b:16:a4:ea:be:d1:91:d5:e6:4f:de:50:63:5c:a2:4e:8b:88:
         23:1a:2b:22:22:7a:5f:1a:7d:e7:9d:e4:d1:5f:5f:1d:9b:2a:
         eb:e7:d7:de:d8:4f:1e:74:3a:de:79:fb:f3:5d:92:1f:e1:3a:
         20:96:c5:1c:41:35:52:38:99:fb:38:d2:81:20:01:20:3c:4b:
         a9:08:9f:72:d5:df:0b:42:6c:58:95:4c:0c:d4:11:bc:63:eb:
         86:81:0e:ad:de:58:38:9a:dc:83:14:5c:a6:ed:2d:c0:20:63:
         a7:1a:22:9f:d0:64:c7:77:c5:54:67:71:25:86:bf:19:47:db:
         ac:c7:88:d3:10:74:4b:b9:cd:66:1a:9f:7e:a6:19:b2:90:75:
         19:85:98:97:9c:08:d8:9f:e4:02:11:19:cc:5e:6d:65:4b:7f:
         bb:c0:52:b7:75:62:21:6b:e9:fe:d7:91:b0:fd:de:eb:e5:e9:
         8a:15:c8:1c:e1:8d:0b:f5:75:20:ec:8c:97:35:74:82:9f:18:
         3b:8b:f2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:44 2026 by rpki-client