Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
File:                     gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json)
Hash identifier:          gA1/4uF0cMHfsoNrRO7c8kyTOivaKNswPx4WT82b3NQ=
Subject key identifier:   3F:64:18:9E:9D:36:54:58:E9:8C:17:91:2B:E7:6B:E8:A7:66:55:E3
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Certificate issuer:       /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial:       0E12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
Manifest number:          0DEA
Signing time:             Tue 28 Jul 2026 18:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:25 +0000
Manifest next update:     Tue 04 Aug 2026 18:00:25 +0000
Files and hashes:         1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: jlfga5050yMT9l47jvkhB6hV0oioG/A6NZ8PVDQDeck=)
                          2: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 2Wh9GEwPkIT3ersV2cUdA77BiYM2ozOHXH7e19XrJGE=)
                          3: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: c6Bxsf4/9YtF+57E7R8e7VzwUukKAS9p7Ji/ny3xUY8=)
                          4: 677F3316E02711E9AB669750C4F9AE02.roa (hash: Rx39rgdKBA7zdcc962yiNhgXGCpK5LRJSU4D4pU54RA=)
                          5: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: B3wAK97jhUd9WZXrgCNdwLjXUkDVCtHuNCOpZHTWsx4=)
                          6: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=)
                          7: AD727D903F8111F1AAE343DCAF833773.roa (hash: 6/Bw7aE+CShp5tga2BPNlQn9ZAcE3QdhOoOj6cEOvU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
                          rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3602 (0xe12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
        Validity
            Not Before: Jul 28 18:00:25 2026 GMT
            Not After : Aug  4 18:00:25 2026 GMT
        Subject: CN=6a68ee3a-b211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:6e:b1:52:30:2d:f1:a1:5f:f2:0a:2f:7a:
                    31:de:62:bc:8f:e1:b9:a1:9a:99:15:ea:46:0d:98:
                    60:a1:7f:71:9f:2a:7b:1b:5e:39:32:3f:55:60:37:
                    96:8d:a9:47:f2:b7:89:f4:a3:63:57:4b:78:87:56:
                    b5:81:9f:d7:c2:54:7f:b3:b3:c3:66:07:38:22:ea:
                    c0:a7:50:91:1f:37:ef:91:e2:b0:0d:34:2f:5b:61:
                    61:1f:ad:9d:bc:ed:87:d8:b2:ca:01:e7:b8:49:82:
                    a3:97:9f:12:48:80:71:ae:f3:d9:d1:8d:9d:f4:7d:
                    ae:56:64:a2:fd:86:52:ac:3c:7b:1a:38:58:d7:33:
                    ed:2a:99:3c:54:57:ba:df:af:4a:1e:5e:6f:97:50:
                    44:c7:49:ad:a0:9e:46:f7:f5:21:ce:a8:89:c3:d4:
                    1c:2a:06:61:9f:c1:de:42:39:f0:f8:a9:d0:56:c0:
                    92:5e:5e:1f:4b:78:1a:f9:b8:5b:23:89:06:1c:49:
                    95:c7:36:f6:ca:df:28:a4:c2:c7:f8:e3:ab:1c:9f:
                    2f:1e:c2:44:84:be:ad:14:74:66:25:c2:66:86:29:
                    ad:9a:02:25:bf:ea:b1:6a:a9:e7:74:91:b4:37:d2:
                    54:7e:30:dd:e2:9c:d5:6c:25:84:0d:a7:31:eb:25:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:18:9E:9D:36:54:58:E9:8C:17:91:2B:E7:6B:E8:A7:66:55:E3
            X509v3 Authority Key Identifier:
                keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:df:ed:be:d9:22:d5:91:37:25:89:eb:b1:82:68:1e:5e:63:
         ff:5c:ed:06:d5:d2:d9:0c:5f:16:a0:2d:83:dc:35:46:b9:be:
         18:45:c4:ef:6d:ed:23:65:de:1d:df:c2:fb:28:c1:0e:ca:36:
         56:17:cb:44:6a:91:a5:1b:af:2e:30:d6:89:d3:7f:3f:00:76:
         84:54:11:ad:d3:b4:9b:ca:62:91:9f:3b:31:b2:db:5d:87:88:
         b8:ae:73:33:6d:53:f3:49:c6:86:d4:ac:23:cf:c2:7f:82:82:
         84:b2:57:79:0d:ff:20:f1:93:30:28:68:2e:e1:b1:87:f9:12:
         3c:6c:18:bf:86:e9:46:e7:ca:54:2a:40:22:ff:1c:4d:07:13:
         b8:62:57:73:3f:81:90:70:48:81:b5:74:54:4a:f7:ae:d6:c8:
         61:4f:15:4f:85:cf:21:6d:72:f6:5d:99:9d:ad:6f:a5:aa:ab:
         33:de:86:07:e9:53:d6:d4:8b:e9:ac:f2:6e:fe:df:4d:cf:fc:
         6e:1d:48:7d:19:df:e4:95:75:f2:1e:65:14:b1:47:43:0d:4f:
         68:45:2e:93:22:00:83:da:59:4d:55:ac:e8:64:87:ed:b1:75:
         ac:6b:fa:51:e4:29:e8:22:5d:20:c9:74:21:63:8d:42:ae:fd:
         bd:7c:25:84
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx
QTk1MjgyODYwHhcNMjYwNzI4MTgwMDI1WhcNMjYwODA0MTgwMDI1WjAYMRYwFAYD
VQQDEw02YTY4ZWUzYS1iMjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZdusVIwLfGhX/IKL3ox3mK8j+G5oZqZFepGDZhgoX9xnyp7G145Mj9VYDeW
jalH8reJ9KNjV0t4h1a1gZ/XwlR/s7PDZgc4IurAp1CRHzfvkeKwDTQvW2FhH62d
vO2H2LLKAee4SYKjl58SSIBxrvPZ0Y2d9H2uVmSi/YZSrDx7GjhY1zPtKpk8VFe6
369KHl5vl1BEx0mtoJ5G9/UhzqiJw9QcKgZhn8HeQjnw+KnQVsCSXl4fS3ga+bhb
I4kGHEmVxzb2yt8opMLH+OOrHJ8vHsJEhL6tFHRmJcJmhimtmgIlv+qxaqnndJG0
N9JUfjDd4pzVbCWEDacx6yWM3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9kGJ6d
NlRY6YwXkSvna+inZlXjMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw
MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I
MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANt/tvtki1ZE3JYnrsYJoHl5j/1ztBtXS2QxfFqAtg9w1Rrm+GEXE723tI2Xe
Hd/C+yjBDso2VhfLRGqRpRuvLjDWidN/PwB2hFQRrdO0m8pikZ87MbLbXYeIuK5z
M21T80nGhtSsI8/Cf4KChLJXeQ3/IPGTMChoLuGxh/kSPGwYv4bpRufKVCpAIv8c
TQcTuGJXcz+BkHBIgbV0VEr3rtbIYU8VT4XPIW1y9l2Zna1vpaqrM96GB+lT1tSL
6azybv7fTc/8bh1IfRnf5JV18h5lFLFHQw1PaEUukyIAg9pZTVWs6GSH7bF1rGv6
UeQp6CJdIMl0IWONQq79vXwlhA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:18:32 2026 by rpki-client