Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File:                     GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier:          ZFbgxYPxDbQqYUwXMYpRBuXv1DXwxqX9keW0ylraQl0=
Subject key identifier:   80:B0:36:DF:7F:A2:56:55:AE:3F:34:64:C6:AC:98:BC:29:BB:39:20
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer:       /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial:       1B07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number:          1ADB
Signing time:             Wed 22 Jul 2026 16:23:49 +0000
Manifest this update:     Wed 22 Jul 2026 16:23:49 +0000
Manifest next update:     Wed 29 Jul 2026 16:23:49 +0000
Files and hashes:         1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: 5gvhdNehEP6yw1vSgR6ZV1imWKrak/iNPIsqud8KFco=)
                          2: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
                          3: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
                          4: CF4E04A6639A11F1BC9896E97047A888.roa (hash: AHKgPDalvgbP0KjwpNMKO/iAmjTMQ6+zGyM2geiYq3Y=)
                          5: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:23:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6919 (0x1b07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
        Validity
            Not Before: Jul 22 16:23:49 2026 GMT
            Not After : Jul 29 16:23:49 2026 GMT
        Subject: CN=6a60ee95-8af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:bf:32:78:84:8c:b2:35:31:86:1d:01:32:
                    67:44:93:15:43:1c:07:4b:e7:23:13:dc:4c:5c:a4:
                    ed:4a:95:18:07:49:a3:c8:48:b2:69:1e:83:8b:8a:
                    80:e6:01:52:8c:7f:fb:6d:82:16:e1:26:5a:db:bf:
                    eb:78:7d:27:3e:20:89:79:8b:9d:ab:38:93:47:2a:
                    1e:88:c0:2d:e8:2d:87:fe:7b:19:52:0e:9b:31:4b:
                    4d:f5:31:f9:03:d3:39:88:57:a4:aa:dd:59:70:70:
                    91:31:84:99:c0:09:0a:d8:83:d6:89:4a:0e:14:b7:
                    00:d0:cc:f5:e8:bb:9d:28:f9:5e:b8:88:97:e7:2f:
                    83:d6:6c:7a:f3:03:78:43:1b:39:d1:5f:e2:a0:d7:
                    5d:2e:fa:03:f4:98:16:04:73:3f:9a:d2:fe:35:34:
                    ff:10:ed:6a:57:cf:58:29:9a:0e:93:cf:ba:d1:1c:
                    8a:b1:c9:eb:d0:cf:fa:8e:99:e4:e7:4e:8c:55:e5:
                    84:fc:55:cd:17:bf:24:7d:84:a2:10:2e:30:6e:ab:
                    fd:f9:f4:57:5b:d3:a4:53:df:85:7e:e4:09:ab:e1:
                    6f:da:76:16:b4:47:f9:ee:f0:bc:77:83:94:0e:e0:
                    4b:77:64:1e:fd:ff:ad:6c:31:fc:77:73:dc:7a:79:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B0:36:DF:7F:A2:56:55:AE:3F:34:64:C6:AC:98:BC:29:BB:39:20
            X509v3 Authority Key Identifier:
                keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:aa:4a:f3:8a:c9:ff:dd:06:22:67:85:40:1d:1e:99:f6:ae:
         d7:89:40:ce:56:1e:de:2a:3a:91:71:87:b5:56:27:a5:38:46:
         b9:f3:68:8b:6c:15:aa:2b:29:8b:e3:6d:3f:27:05:54:57:28:
         9d:a5:dc:f2:92:9a:60:5d:c4:c8:f3:76:32:3a:ee:70:a3:24:
         11:e4:89:63:3b:f0:ba:80:f7:58:31:2f:0c:37:e0:1b:85:53:
         96:e9:86:71:c5:90:d4:ea:92:ce:74:a8:d2:52:81:3f:1a:42:
         60:06:7d:a2:35:22:91:d2:37:ca:e6:3b:fc:09:b0:2c:4e:0a:
         8a:df:80:fa:d9:62:c7:8c:63:40:9c:24:73:3a:97:76:13:ce:
         bd:d4:6e:94:0f:ec:60:aa:88:ce:7a:65:96:c1:45:cd:6a:f8:
         1f:71:b7:c2:f9:29:60:86:1a:0a:25:9a:f7:d8:d1:2e:92:57:
         75:17:ea:82:95:12:39:0a:de:79:8d:03:91:16:00:64:0f:7f:
         85:26:b6:1d:17:bd:4d:b8:49:ae:35:87:79:35:52:7c:72:49:
         0a:17:4d:2f:a2:96:98:60:b6:61:6e:ca:b6:81:3e:2e:e1:b1:
         88:1f:e9:dc:cb:bc:69:ce:41:42:37:6e:2e:2b:97:ca:9c:4a:
         10:02:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:50:23 2026 by rpki-client