Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
File:                     ggCxpefBdgW1czx0_sHvEnOz6iU.mft (raw, json)
Hash identifier:          c9afAMQ18rSsgTwR/zvo9pMlJRKuVgJkLXCQfzY6eEk=
Subject key identifier:   3A:6B:E6:74:9D:6D:2F:16:A0:6E:0B:7F:29:83:F3:F3:8A:89:B4:03
Authority key identifier: 82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25
Certificate issuer:       /CN=A911AD0C/serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
Certificate serial:       355C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
Manifest number:          355C
Signing time:             Tue 28 Jul 2026 15:22:05 +0000
Manifest this update:     Tue 28 Jul 2026 15:22:04 +0000
Manifest next update:     Tue 04 Aug 2026 15:22:04 +0000
Files and hashes:         1: ggCxpefBdgW1czx0_sHvEnOz6iU.crl (hash: Y0fxue7nViiQE6CYuwSIfWNFHe/5KE0M7A2EBGvWsTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl
                          rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13660 (0x355c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD0C, serialNumber=8200B1A5E7C17605B5733C74FEC1EF1273B3EA25
        Validity
            Not Before: Jul 28 15:22:04 2026 GMT
            Not After : Aug  4 15:22:04 2026 GMT
        Subject: CN=6a68c91d-bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:4e:eb:a4:4e:f1:d5:68:c9:07:86:10:9f:
                    81:5e:7c:d6:7f:ca:d0:08:1b:6d:4c:89:49:b4:cf:
                    36:18:af:45:23:54:a1:fc:81:04:1e:8c:22:f2:6b:
                    0c:82:2b:08:fe:a6:68:5d:5a:64:6d:d5:f4:1b:93:
                    e1:8d:2f:51:f5:26:ff:43:1f:48:9f:d8:1b:36:3f:
                    b7:92:9f:f7:e9:9e:52:30:bc:cd:cc:26:d0:86:23:
                    3d:36:4f:9f:2d:72:69:8c:a0:41:34:78:12:d0:09:
                    5c:7b:58:9e:7d:da:b0:5e:06:77:8f:4a:f9:32:eb:
                    1d:e6:44:de:16:79:2f:f6:92:0a:e6:e6:37:74:4e:
                    83:b0:4c:0f:f6:3b:8f:9c:3f:de:f5:41:f8:26:7e:
                    a4:31:1f:0b:ee:98:54:ef:17:c9:ae:78:18:a3:58:
                    7d:7e:90:d7:3f:3e:3a:66:ed:6a:8d:f6:f1:08:1a:
                    0d:a7:dd:f8:d3:55:6b:de:e2:64:06:58:fe:fe:87:
                    a0:31:a5:a6:b7:7a:c0:7f:c9:9b:43:4c:d7:8c:a8:
                    0a:02:7a:91:46:d3:da:fa:ac:45:91:c5:9e:5d:86:
                    df:5c:c7:eb:25:2c:2e:ab:e3:d3:27:75:53:0c:95:
                    67:74:ad:d1:29:98:84:f2:83:95:0d:f8:9c:19:c1:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6B:E6:74:9D:6D:2F:16:A0:6E:0B:7F:29:83:F3:F3:8A:89:B4:03
            X509v3 Authority Key Identifier:
                keyid:82:00:B1:A5:E7:C1:76:05:B5:73:3C:74:FE:C1:EF:12:73:B3:EA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggCxpefBdgW1czx0_sHvEnOz6iU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD0C/1B0B358E1DAB11E28A7F00A808B02CD2/ggCxpefBdgW1czx0_sHvEnOz6iU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:b8:98:ad:27:e1:ae:cf:52:bc:90:2a:ad:61:a3:01:9d:
         cc:3e:46:e3:38:f8:e5:ab:4d:24:53:dc:95:bf:18:8e:51:8f:
         94:08:a6:fa:40:b2:06:d4:82:a5:51:93:0f:6d:d0:a3:48:45:
         59:22:d3:7d:05:14:ad:36:d1:28:14:69:ab:d6:f7:a1:80:72:
         0c:9a:fc:9c:c3:ad:dc:0c:88:bf:2e:f6:93:7b:b1:0d:91:36:
         13:0e:24:6d:33:32:45:fb:61:68:43:19:bd:e3:9f:8a:98:52:
         77:f0:3d:63:e9:45:c8:65:78:c0:24:89:0e:62:cc:ac:eb:66:
         ef:dd:c5:1c:14:fb:19:08:de:02:7f:21:6b:39:9c:91:91:95:
         05:46:2c:ac:cb:25:c0:fd:2e:08:21:f4:63:7c:5f:05:1a:05:
         79:45:bd:8f:b7:12:e2:b3:8f:31:42:01:60:1d:54:86:eb:d1:
         38:07:7d:f1:07:52:3a:6e:65:23:48:97:8f:02:7d:99:3a:7d:
         67:ec:e2:ce:be:1f:cd:e6:1c:c2:27:dc:f6:79:44:5a:e5:67:
         44:f2:56:04:1c:e9:2a:79:19:ac:af:f5:3e:1c:72:41:7b:6c:
         ee:d0:7b:6e:eb:1e:0f:c6:1e:d8:39:5e:7d:48:9c:9e:79:db:
         5b:da:c6:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFEMEMxMTAvBgNVBAUTKDgyMDBCMUE1RTdDMTc2MDVCNTczM0M3NEZFQzFFRjEy
NzNCM0VBMjUwHhcNMjYwNzI4MTUyMjA0WhcNMjYwODA0MTUyMjA0WjAYMRYwFAYD
VQQDEw02YTY4YzkxZC1iZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvsxO66RO8dVoyQeGEJ+BXnzWf8rQCBttTIlJtM82GK9FI1Sh/IEEHowi8msM
gisI/qZoXVpkbdX0G5PhjS9R9Sb/Qx9In9gbNj+3kp/36Z5SMLzNzCbQhiM9Nk+f
LXJpjKBBNHgS0Alce1iefdqwXgZ3j0r5Musd5kTeFnkv9pIK5uY3dE6DsEwP9juP
nD/e9UH4Jn6kMR8L7phU7xfJrngYo1h9fpDXPz46Zu1qjfbxCBoNp93401Vr3uJk
Blj+/oegMaWmt3rAf8mbQ0zXjKgKAnqRRtPa+qxFkcWeXYbfXMfrJSwuq+PTJ3VT
DJVndK3RKZiE8oOVDficGcEztwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpr5nSd
bS8WoG4LfymD8/OKibQDMB8GA1UdIwQYMBaAFIIAsaXnwXYFtXM8dP7B7xJzs+ol
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQwQy8xQjBCMzU4RTFE
QUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRnVzFjengwX3NIdkVuT3o2
aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnQ3hwZWZCZGdXMWN6eDBfc0h2RW5PejZpVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUQwQy8xQjBCMzU4RTFEQUIxMUUyOEE3RjAwQTgwOEIwMkNEMi9nZ0N4cGVmQmRn
VzFjengwX3NIdkVuT3o2aVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAemK4mK0n4a7PUryQKq1howGdzD5G4zj45atNJFPclb8YjlGPlAim+kCyBtSC
pVGTD23Qo0hFWSLTfQUUrTbRKBRpq9b3oYByDJr8nMOt3AyIvy72k3uxDZE2Ew4k
bTMyRfthaEMZveOfiphSd/A9Y+lFyGV4wCSJDmLMrOtm793FHBT7GQjeAn8hazmc
kZGVBUYsrMslwP0uCCH0Y3xfBRoFeUW9j7cS4rOPMUIBYB1UhuvROAd98QdSOm5l
I0iXjwJ9mTp9Z+zizr4fzeYcwifc9nlEWuVnRPJWBBzpKnkZrK/1PhxyQXts7tB7
buseD8Ye2DlefUicnnnbW9rG7w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:56:44 2026 by rpki-client