Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
File:                     gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json)
Hash identifier:          8+y+QlxyfCoQycmfMBCY6yuZ/ls4jXjFIVCI0u6YC3c=
Subject key identifier:   A4:78:96:15:F2:17:F8:57:8C:B9:36:76:F1:E6:BD:ED:F9:8B:D9:EE
Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
Certificate issuer:       /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Certificate serial:       072A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
Manifest number:          0720
Signing time:             Wed 22 Jul 2026 22:38:51 +0000
Manifest this update:     Wed 22 Jul 2026 22:38:50 +0000
Manifest next update:     Wed 29 Jul 2026 22:38:50 +0000
Files and hashes:         1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: 5Ff9B/kHPmU0304OhJIgHdPisCuMYYaVokyswaG8nog=)
                          2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: cDr/3Xs5cjJWfG7LyYDYX18lP6W3STlLXw7xl6t5lM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
                          rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:38:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
        Validity
            Not Before: Jul 22 22:38:50 2026 GMT
            Not After : Jul 29 22:38:50 2026 GMT
        Subject: CN=6a61467b-0598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:d2:aa:78:53:98:54:d0:7e:3b:9a:30:cc:
                    66:20:eb:3a:e4:6f:66:e2:45:ff:77:ba:0c:9f:a3:
                    1f:47:db:bc:ea:b2:11:1e:18:c9:67:a9:4a:83:43:
                    32:c4:84:73:f4:2b:27:cf:0f:60:d6:48:cf:1f:b1:
                    ae:ff:7d:05:29:77:df:a9:85:23:cc:8e:19:30:32:
                    ac:e7:8b:a6:1e:e8:e4:31:52:56:b5:34:ad:33:fd:
                    d7:6a:b3:9f:3e:cc:dd:a6:7d:d3:38:8b:94:4d:cc:
                    30:15:3a:5c:11:53:7a:d4:7c:3f:4c:b3:5b:2a:5a:
                    60:37:56:68:52:1c:d4:4c:dc:8e:e9:40:2d:9a:71:
                    ff:54:f8:33:eb:ab:5c:d0:98:7a:07:96:08:4d:bc:
                    71:69:fa:a7:7e:0d:9c:52:d4:6a:b8:37:43:92:b5:
                    39:8e:0e:3a:86:f2:d9:44:a5:83:e4:fc:bc:01:dd:
                    60:83:b7:8d:88:a0:ac:ed:f8:9c:9d:d8:0a:df:4e:
                    2d:54:b3:79:45:04:07:a4:76:b9:b1:91:20:03:70:
                    ae:6f:bf:42:a2:0f:5b:ac:86:89:4a:de:0f:13:eb:
                    5f:42:5a:be:d7:15:54:31:2f:aa:d3:c2:f5:14:e3:
                    aa:f6:92:79:e8:54:81:93:34:98:fb:ad:61:61:8f:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:96:15:F2:17:F8:57:8C:B9:36:76:F1:E6:BD:ED:F9:8B:D9:EE
            X509v3 Authority Key Identifier:
                keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:03:2d:8a:bf:47:ed:ab:ce:48:63:19:ec:44:a7:7a:96:
         2a:b7:80:db:29:cd:f1:04:5b:5a:fc:85:d2:8b:e2:84:77:19:
         f8:af:ad:8d:89:fe:f5:1e:8a:6e:1a:a0:64:c7:70:7c:f5:55:
         d9:fe:81:a0:46:d8:fd:e5:5b:71:bc:85:bf:bb:cc:be:cc:42:
         5b:b9:45:65:d4:45:6f:79:d6:83:f7:3f:39:8f:66:fe:40:77:
         b7:0c:00:be:5c:a8:9f:53:47:fe:ea:d7:b3:41:c2:01:07:4c:
         dc:c2:f8:4d:0b:bd:e4:9e:34:8e:6f:28:c4:8f:26:88:e7:e8:
         78:1a:04:47:ce:ae:4e:c3:28:f0:da:c8:59:fa:5e:3d:a2:72:
         9d:d0:78:97:14:a8:54:e8:fc:ab:d7:81:a4:e5:9c:60:9f:1e:
         34:34:07:59:cd:bf:70:90:db:37:09:ae:87:b6:ee:5a:e9:9f:
         1e:67:6d:85:8e:e1:6e:ae:b3:9d:ce:d6:40:61:0f:ef:7c:0e:
         da:d6:88:e4:bc:a2:4d:68:65:2e:3b:0a:86:70:c9:f9:1a:70:
         2d:1e:60:e9:7d:50:74:d2:72:81:54:1a:c1:37:fa:db:05:07:
         09:76:94:e5:9c:ef:91:45:a3:08:03:65:1c:17:d8:25:14:7e:
         c8:b1:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:10:29 2026 by rpki-client