Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File:                     GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier:          k1ZV62K3u+Hj9nugtmNUcWjlwQmpFfmNPFZA5aqJhkw=
Subject key identifier:   F5:15:CB:2F:CB:08:27:AB:BF:4E:15:84:7E:7F:E7:64:5E:E0:5D:AD
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer:       /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number:          042B
Signing time:             Mon 27 Jul 2026 01:20:29 +0000
Manifest this update:     Mon 27 Jul 2026 01:20:29 +0000
Manifest next update:     Mon 03 Aug 2026 01:20:29 +0000
Files and hashes:         1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: rNv/feV6AJ5WtKPRJqROa7IQ0XNDi2gHMsnIgNQKPl4=)
                          2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=)
                          3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: OdmIKnh99XTg8Hh9/TQirH8XV5FGfwwJr9IPq/Zw7no=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
                          rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
        Validity
            Not Before: Jul 27 01:20:29 2026 GMT
            Not After : Aug  3 01:20:29 2026 GMT
        Subject: CN=6a66b25d-a75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:83:64:9f:38:cd:74:ca:51:60:95:1f:df:
                    3e:df:de:f6:03:09:39:9f:f2:b1:b2:23:3d:1d:ce:
                    44:10:bf:6c:d8:83:f6:93:39:5d:ee:3f:cc:27:e9:
                    c9:44:8a:d8:fd:b0:f3:67:3d:eb:ef:cb:42:d7:9e:
                    a1:79:ab:0f:20:62:83:76:e3:bd:d8:76:e8:89:a7:
                    c2:2c:9a:7c:62:63:44:2a:55:ad:b5:f2:ec:45:37:
                    e4:74:19:62:69:14:71:a5:c0:9f:3a:d7:99:ba:fb:
                    f3:44:fc:44:c5:61:79:66:42:ed:61:b0:27:b7:a2:
                    43:4e:e7:69:60:43:93:10:bf:d2:e9:d8:ef:44:db:
                    42:53:d7:8d:0b:84:53:62:0b:cc:10:6e:dd:2f:61:
                    f5:bc:90:87:a7:b4:bf:29:f5:54:a5:c6:09:21:e4:
                    f4:66:e0:75:f0:34:fd:a0:c1:9f:53:b3:26:97:89:
                    cf:45:34:48:88:19:4b:43:ee:7c:ca:fb:f0:26:91:
                    88:93:01:8b:21:ec:6d:87:8b:2f:0b:86:cd:89:2d:
                    e7:e5:86:9b:c1:14:dd:6d:67:63:a8:cc:5f:3c:1c:
                    c0:e6:9d:92:94:08:5d:0e:0d:42:95:2c:a4:cc:09:
                    e6:80:ab:c9:dd:f8:12:ec:af:bb:f7:22:27:e9:d6:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:15:CB:2F:CB:08:27:AB:BF:4E:15:84:7E:7F:E7:64:5E:E0:5D:AD
            X509v3 Authority Key Identifier:
                keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c6:5a:9d:0e:5a:20:06:7c:23:f5:45:d1:86:1b:85:3e:dd:
         6c:ea:c7:fe:46:76:0b:f9:9c:33:f6:0b:76:49:a3:e5:d2:10:
         cd:55:1e:71:73:ac:12:22:ac:fd:a0:ab:e1:02:49:0c:3c:2e:
         9a:3d:64:f1:b5:2a:61:53:0e:42:61:82:f7:2b:8a:c5:1a:30:
         a7:f8:4d:38:2c:1e:bd:a7:fd:a1:96:e4:59:ca:2b:d1:d1:b8:
         2b:19:5d:a5:af:a3:41:84:50:86:63:bd:4d:bc:85:bb:70:9f:
         58:0d:bb:4b:fd:a8:df:56:5d:ef:dc:15:48:b0:96:a9:fc:3e:
         84:85:79:bb:2d:0a:fe:7e:d7:10:b1:b7:ff:59:a6:48:46:a3:
         b6:07:e1:8c:06:c3:21:e0:35:69:1c:20:26:11:32:1a:cc:ae:
         73:09:c9:02:fb:2d:aa:b5:65:f5:4c:61:c7:1a:8d:82:07:5b:
         40:6f:68:5a:a8:57:6c:7c:f3:fc:4c:f5:ea:95:a7:c2:e4:ed:
         aa:0d:7b:a4:5a:e6:0a:7f:b5:64:5f:d4:ea:98:8f:b2:29:98:
         70:ff:84:1b:db:2f:79:ac:cb:56:14:b7:f2:f5:06:33:2a:1e:
         42:95:42:f1:57:e7:8d:ef:be:4f:69:0c:f6:68:c6:83:10:8c:
         f8:e4:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:29:24 2026 by rpki-client