Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
File:                     gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft (raw, json)
Hash identifier:          b+JgoImCAs/y6jgDWa+AgPZXw5uWGPaNFvg5ZvHe3so=
Subject key identifier:   CF:7D:30:D1:13:6A:0A:60:69:D0:15:E5:2B:C6:81:03:C7:BE:0B:FE
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Certificate issuer:       /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
Manifest number:          D3
Signing time:             Thu 23 Jul 2026 08:56:48 +0000
Manifest this update:     Thu 23 Jul 2026 08:56:48 +0000
Manifest next update:     Thu 30 Jul 2026 08:56:48 +0000
Files and hashes:         1: gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl (hash: XUNlyGqSqjuWAFKn/ZfptBayOVwtypDoK6wVL+kAcTU=)
                          2: D9D5455006AD11F1A15422A90B3D8C67.roa (hash: 9mXmmqDvRyQw4N2RkVpMeSLK2aerK/OHjHDytxXqiIA=)
                          3: EC5F60DE06AD11F1867726090C3D8C67.roa (hash: nWqctYtbDtMJU/kc9czMkUyA2gqVdNX2ibrrsgmDvlM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
        Validity
            Not Before: Jul 23 08:56:48 2026 GMT
            Not After : Jul 30 08:56:48 2026 GMT
        Subject: CN=6a61d750-6a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:4c:f6:3f:43:8c:e1:fb:73:4d:77:60:86:
                    a3:db:29:73:7b:8e:d3:d9:c9:46:c9:12:e5:77:7a:
                    5d:fd:c7:49:f9:66:c5:f1:57:b7:da:09:d3:95:00:
                    2d:e3:ec:3a:6c:2a:10:66:7b:0f:b4:c6:9b:0a:b6:
                    87:e0:03:0b:f0:83:00:68:d0:de:25:91:6c:32:f9:
                    74:2d:bf:ab:d0:7d:28:5d:f3:a7:d9:b4:cf:a4:a2:
                    55:60:7e:0d:8f:ca:e9:70:55:09:03:85:06:58:19:
                    ff:40:16:54:f4:3e:22:60:59:52:ca:54:03:63:de:
                    b5:07:4d:66:d5:7d:1a:ca:eb:21:c1:2f:e0:21:90:
                    03:cd:08:16:77:4e:3d:bf:62:d8:7f:25:43:a0:b5:
                    c3:66:aa:0e:fd:06:46:58:55:a9:9a:0e:52:35:c1:
                    02:7d:83:a2:aa:fe:20:76:a4:1b:ea:85:1b:c5:48:
                    98:32:f4:2a:c4:3b:13:3d:97:d3:6c:8b:f5:ad:03:
                    6a:25:dc:88:21:31:3d:7d:b0:36:18:9d:1a:47:cd:
                    ee:15:69:17:bf:b2:f7:17:e0:f7:bf:87:d6:0b:06:
                    7d:6a:0b:af:07:2c:c1:f0:d8:03:e9:39:02:fe:37:
                    fb:8c:5d:68:ef:67:40:5e:da:2a:2b:8f:9e:d8:81:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7D:30:D1:13:6A:0A:60:69:D0:15:E5:2B:C6:81:03:C7:BE:0B:FE
            X509v3 Authority Key Identifier:
                keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:51:12:8f:83:eb:ea:7d:b5:71:30:9d:30:48:2e:ce:3c:03:
         af:84:88:a3:2a:41:72:4d:9c:df:4e:14:bc:64:13:b4:2d:6f:
         1d:f0:79:98:39:ed:d3:c8:c9:bd:44:80:22:6a:69:d8:cd:d0:
         50:1a:da:8f:a1:0b:8a:16:86:45:68:ed:d1:28:02:8b:a2:f4:
         3f:69:7a:fe:5b:f8:72:9d:e1:f1:aa:4f:93:cb:8b:21:b5:58:
         da:ca:cc:ce:9b:ee:56:4a:16:16:b9:79:c3:4a:ac:39:1d:f6:
         33:2c:af:8f:80:e1:3b:cf:91:38:09:a4:91:3e:72:2e:25:de:
         57:a6:81:b1:a6:b9:87:32:57:2b:a1:d2:5a:63:cf:9a:66:58:
         eb:a7:f8:bd:11:5d:77:95:fa:65:ef:a9:7a:91:98:71:61:5f:
         2d:2f:ef:f0:92:7e:67:30:88:bc:3a:ab:f2:f3:32:d0:b8:d2:
         76:96:69:35:28:de:f1:f1:b2:3f:46:d5:29:68:6a:7b:a7:97:
         87:a4:16:00:f5:d6:fa:bf:32:53:7d:d1:2d:85:a2:0b:e7:a7:
         ef:eb:a2:01:70:aa:02:c8:95:21:37:32:88:15:68:02:c5:3a:
         f9:56:0f:91:e5:4c:8b:3d:a0:13:a8:08:0d:76:89:ec:fb:9c:
         07:26:0b:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUEwRjcxMTAvBgNVBAUTKDgyQ0ExMDREQzVGMkFGRjUzM0ZCRjY4Q0YyOThGNDBG
QkQ0ODFGMDQwHhcNMjYwNzIzMDg1NjQ4WhcNMjYwNzMwMDg1NjQ4WjAYMRYwFAYD
VQQDEw02YTYxZDc1MC02YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt01M9j9DjOH7c013YIaj2ylze47T2clGyRLld3pd/cdJ+WbF8Ve32gnTlQAt
4+w6bCoQZnsPtMabCraH4AML8IMAaNDeJZFsMvl0Lb+r0H0oXfOn2bTPpKJVYH4N
j8rpcFUJA4UGWBn/QBZU9D4iYFlSylQDY961B01m1X0ayushwS/gIZADzQgWd049
v2LYfyVDoLXDZqoO/QZGWFWpmg5SNcECfYOiqv4gdqQb6oUbxUiYMvQqxDsTPZfT
bIv1rQNqJdyIITE9fbA2GJ0aR83uFWkXv7L3F+D3v4fWCwZ9aguvByzB8NgD6TkC
/jf7jF1o72dAXtoqK4+e2IHKAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM99MNET
agpgadAV5SvGgQPHvgv+MB8GA1UdIwQYMBaAFILKEE3F8q/1M/v2jPKY9A+9SB8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTBGNy8wRDhDQzlENjc2
NkMxMUYwOUZDQTE5MkRDNEY5QUUwMi9nc29RVGNYeXJfVXotX2FNOHBqMEQ3MUlI
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dzb1FUY1h5cl9Vei1fYU04cGowRDcxSUh3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTBGNy8wRDhDQzlENjc2NkMxMUYwOUZDQTE5MkRDNEY5QUUwMi9nc29RVGNYeXJf
VXotX2FNOHBqMEQ3MUlId1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAu1ESj4Pr6n21cTCdMEguzjwDr4SIoypBck2c304UvGQTtC1vHfB5mDnt08jJ
vUSAImpp2M3QUBraj6ELihaGRWjt0SgCi6L0P2l6/lv4cp3h8apPk8uLIbVY2srM
zpvuVkoWFrl5w0qsOR32Myyvj4DhO8+ROAmkkT5yLiXeV6aBsaa5hzJXK6HSWmPP
mmZY66f4vRFdd5X6Ze+pepGYcWFfLS/v8JJ+ZzCIvDqr8vMy0LjSdpZpNSje8fGy
P0bVKWhqe6eXh6QWAPXW+r8yU33RLYWiC+en7+uiAXCqAsiVITcyiBVoAsU6+VYP
keVMiz2gE6gIDXaJ7PucByYLPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:01 2026 by rpki-client