Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft
File:                     GLHIjO5o9jwhzWoMsbgx1db11s8.mft (raw, json)
Hash identifier:          8i8yqfazHvZgsHAAqGj6XjGkUqsKLj3kkqQ3Ctuf8Go=
Subject key identifier:   E9:80:06:9F:68:AD:2A:62:B4:9D:92:6E:EF:64:9A:3F:78:14:D1:1E
Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF
Certificate issuer:       /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF
Certificate serial:       1CE5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft
Manifest number:          1CD7
Signing time:             Wed 22 Jul 2026 16:14:09 +0000
Manifest this update:     Wed 22 Jul 2026 16:14:09 +0000
Manifest next update:     Wed 29 Jul 2026 16:14:09 +0000
Files and hashes:         1: GLHIjO5o9jwhzWoMsbgx1db11s8.crl (hash: uGXgFwhghiKxXO+57LL9R9gGvuFRvBr8uNm4DC+F3SA=)
                          2: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (hash: 2yvcCZV+pN9jEg/q9+iV+9Rfav7HZxuqjuwplpogEBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl
                          rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:14:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7397 (0x1ce5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF
        Validity
            Not Before: Jul 22 16:14:09 2026 GMT
            Not After : Jul 29 16:14:09 2026 GMT
        Subject: CN=6a60ec51-9f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:89:63:3f:64:56:1f:7b:ac:07:97:f4:43:
                    31:3f:db:5f:83:56:af:41:02:bf:da:f7:1a:f5:3e:
                    17:1f:8e:1e:b1:e3:ee:63:b6:10:29:de:ab:a2:1a:
                    e4:a6:88:3a:be:4a:4a:2d:1f:80:cf:d2:79:82:ca:
                    35:62:85:a4:6b:9c:38:d2:c4:25:83:cb:df:42:37:
                    98:62:1d:7b:8d:b4:43:e5:a9:ce:5f:e7:a2:fe:4a:
                    b0:dc:a5:70:d2:69:34:31:d8:29:3b:69:ff:23:31:
                    26:d4:5d:a7:7d:39:8f:78:42:95:8e:da:b0:87:49:
                    1e:47:c0:1b:f5:da:9a:d0:90:83:08:b2:72:61:3d:
                    62:d9:5f:fa:2d:53:be:cc:80:b2:b6:ef:22:7b:f7:
                    6e:a6:09:7b:a9:f9:92:80:d2:a8:4b:4e:83:99:f4:
                    45:81:cf:92:ec:64:34:4f:8b:49:75:f4:2e:dd:4a:
                    a1:f1:77:29:ae:c1:29:62:4e:f1:3d:63:e8:6b:f3:
                    5f:cf:97:d2:65:6c:b0:54:93:9c:9a:a5:e9:0d:71:
                    47:14:c9:f7:f1:f2:2c:a7:84:e4:ec:8e:13:8f:70:
                    1f:d0:b9:fd:2e:4a:54:db:b9:3c:07:ca:d9:bf:a0:
                    e5:2c:95:73:fd:04:e4:8c:04:07:cd:91:ef:f0:45:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:06:9F:68:AD:2A:62:B4:9D:92:6E:EF:64:9A:3F:78:14:D1:1E
            X509v3 Authority Key Identifier:
                keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:e0:00:17:ef:b3:83:f7:77:52:8b:9f:db:8d:55:30:3b:
         5c:00:05:d8:19:70:9f:2c:81:b2:cf:46:3d:90:99:fc:3e:96:
         d2:ca:ea:d5:28:5b:be:c6:5e:a7:8d:b8:ef:d5:70:a1:91:56:
         de:ef:c4:06:24:4c:ec:93:73:1c:4d:d7:8f:cb:9b:df:3b:ac:
         da:ca:a4:99:3d:43:4d:d5:4d:29:26:a2:90:da:d5:6e:fc:11:
         8d:4b:bd:39:1d:28:1b:b7:fc:cc:41:d4:86:8e:90:cd:93:f2:
         1f:7b:94:dd:72:af:d6:1d:58:82:04:35:99:eb:99:4c:73:83:
         de:3b:bf:86:e4:ed:44:72:08:6d:30:f4:66:f4:ba:08:73:64:
         cb:26:65:53:cb:a0:2e:84:b8:34:df:ee:c6:5d:00:22:12:bb:
         79:b3:77:b3:4a:37:bd:bf:14:f9:66:ba:9f:bf:30:11:71:48:
         4d:91:b7:c3:53:b2:ce:82:05:35:c3:76:c9:b8:1f:17:62:c9:
         70:7c:ce:c0:02:98:1a:1a:bc:7e:c0:9d:b5:66:e1:f3:89:66:
         d6:3b:f3:8d:05:66:4b:d0:23:a8:41:fa:e9:fb:e7:fc:70:41:
         dd:9d:46:a4:1a:b2:41:28:fd:69:57:6f:b1:97:52:3a:bc:3e:
         f9:47:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:00:55 2026 by rpki-client