Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
File:                     gvYVW7anmmgrwbbkztF-7HtUXjE.mft (raw, json)
Hash identifier:          gf8+rf1Ei6htiMSJYD9U+YJ+DHDFnZ2WfdI9yNq/IKY=
Subject key identifier:   CA:6C:A9:AE:78:6F:B4:82:FC:19:7E:E1:32:9E:2E:28:B6:95:DE:55
Authority key identifier: 82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31
Certificate issuer:       /CN=A91E5988/serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
Certificate serial:       17
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
Manifest number:          16
Signing time:             Thu 23 Jul 2026 11:05:47 +0000
Manifest this update:     Thu 23 Jul 2026 11:05:46 +0000
Manifest next update:     Thu 30 Jul 2026 11:05:46 +0000
Files and hashes:         1: gvYVW7anmmgrwbbkztF-7HtUXjE.crl (hash: tXBu3XpjdOKrzhBv1jZJVozviUDgcq1XgsKAvpptGzc=)
                          2: 62C23538662D11F1A5BC4310A247A888.roa (hash: o2DwrfThWmBts2qM7FHUBBrRqwsSlJYkQtksSisltek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl
                          rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5988, serialNumber=82F6155BB6A79A682BC1B6E4CED17EEC7B545E31
        Validity
            Not Before: Jul 23 11:05:46 2026 GMT
            Not After : Jul 30 11:05:46 2026 GMT
        Subject: CN=6a61f58b-510f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:c0:c9:0d:1f:3d:0b:8f:e9:39:3e:c7:93:
                    30:3e:ee:a1:82:88:8e:77:c3:54:07:b3:9b:c1:4b:
                    10:cf:97:3d:4b:a2:20:ad:9e:ac:5d:13:61:fe:20:
                    f4:e1:71:c4:83:47:55:c1:7a:8e:92:ce:1f:64:58:
                    fa:33:2a:f9:76:ca:75:f2:50:1d:af:c7:7c:98:4c:
                    5a:aa:8c:20:40:bb:4c:8b:2b:a5:6a:10:bc:48:30:
                    26:10:11:0e:d1:e5:1e:66:7d:ea:e8:55:f6:dd:25:
                    a8:5b:26:1f:b9:f7:1e:73:1a:24:13:41:78:2e:b4:
                    43:87:a7:55:ce:87:96:48:77:0e:c9:7a:78:8a:52:
                    86:b3:07:60:53:9f:4d:4c:a0:26:6d:ac:21:34:4d:
                    74:2c:a5:14:b1:de:46:d9:5c:c6:28:de:23:2b:ac:
                    15:db:16:ef:a8:64:73:32:23:19:d3:e7:c4:76:17:
                    d2:8d:47:8b:9f:4e:9f:1f:a1:86:b0:dd:d2:ab:33:
                    d0:ef:0a:1d:cd:d2:c1:dd:f9:1e:60:bf:d9:3c:3d:
                    66:ae:3f:99:4f:9b:4d:aa:23:d3:7e:c2:d6:93:70:
                    be:ad:be:04:11:8c:b3:60:c2:fe:3a:38:a4:04:2c:
                    da:3d:a7:1d:6c:b9:60:23:a9:f7:d3:89:7a:c6:fe:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6C:A9:AE:78:6F:B4:82:FC:19:7E:E1:32:9E:2E:28:B6:95:DE:55
            X509v3 Authority Key Identifier:
                keyid:82:F6:15:5B:B6:A7:9A:68:2B:C1:B6:E4:CE:D1:7E:EC:7B:54:5E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gvYVW7anmmgrwbbkztF-7HtUXjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5988/A316C65E662C11F1B0BAC73CA147A888/gvYVW7anmmgrwbbkztF-7HtUXjE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:55:67:e3:ad:9a:85:0a:17:a6:c0:f2:07:3a:62:e3:f6:28:
         0b:fe:8e:67:8b:05:e1:17:78:8e:4e:dd:3d:02:fc:70:8c:55:
         7d:e9:f5:71:c3:17:ec:f6:fd:4d:f7:b9:8b:c4:c9:be:bf:40:
         06:c4:26:ad:4c:7e:d6:d8:20:2e:21:b1:e9:40:eb:9e:e7:c2:
         e7:69:40:e6:4f:c5:81:af:7d:ed:fc:38:c7:1c:9f:43:35:80:
         d1:b7:61:50:2a:f8:01:e5:d3:95:30:02:22:6b:23:74:a0:bd:
         80:c2:7e:98:1a:f3:fb:78:3c:88:97:b6:3b:b5:ae:84:d6:c2:
         0e:59:2b:aa:c3:db:25:e2:59:a1:9a:db:fa:57:3b:bd:5f:f4:
         4b:bc:dd:f3:4b:3a:b2:15:5f:2e:73:44:fe:4f:de:51:73:c6:
         f1:a5:dd:20:79:e3:d2:d8:ec:bc:9c:eb:23:33:f2:c2:20:7b:
         99:2b:47:63:9e:bf:8a:cb:a7:eb:90:35:23:fe:f0:27:2e:ef:
         9f:07:07:b1:58:e1:f9:21:f9:23:e4:f9:26:94:e4:4a:f6:29:
         53:c0:d6:c7:a8:d9:0c:3b:a4:c1:b0:f5:73:81:34:af:57:bb:
         05:99:97:1e:82:fb:49:91:39:87:37:d0:5d:f8:5e:55:8d:24:
         d4:75:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:31:37 2026 by rpki-client