Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
File:                     gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json)
Hash identifier:          Hr5L1KVIaZrJ/6GPtkAEsH0gFh+Q9e7VZ3UFVIfsxi8=
Subject key identifier:   F4:9C:F5:07:DA:19:E2:14:76:E1:E8:CE:04:4B:E7:87:85:D3:A8:D1
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
Manifest number:          9D
Signing time:             Mon 27 Jul 2026 09:29:55 +0000
Manifest this update:     Mon 27 Jul 2026 09:29:55 +0000
Manifest next update:     Mon 03 Aug 2026 09:29:55 +0000
Files and hashes:         1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: paT+uhwJgFLzH25wM+z1SFzmQakrPPuQeETotcqcEHs=)
                          2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Jul 27 09:29:55 2026 GMT
            Not After : Aug  3 09:29:55 2026 GMT
        Subject: CN=6a672513-e4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:1a:0d:ec:b4:ae:94:8c:73:a3:e1:3e:66:
                    3b:af:24:21:69:88:c2:2b:22:ac:23:6f:7a:07:0f:
                    aa:c8:44:59:f4:84:93:85:5b:4a:c6:18:60:82:90:
                    e1:ec:e3:cb:47:d8:e5:55:9a:b3:dd:4a:22:67:7d:
                    63:e1:d4:9e:e0:8c:15:b4:85:96:51:86:9e:18:64:
                    65:b4:d0:54:d8:26:55:a0:aa:cc:5d:23:a7:c4:45:
                    90:b3:86:fa:fd:7a:8c:18:7e:b0:00:9e:4e:21:ac:
                    bc:01:0f:54:7c:04:df:33:18:78:10:42:b3:a6:29:
                    47:e7:a1:98:0e:e6:aa:73:e5:ec:60:3f:d9:7f:66:
                    dc:8b:72:ce:f0:aa:5d:01:48:45:97:b6:b7:7d:bd:
                    96:92:9f:ab:fb:2a:5d:37:b4:b1:1e:ea:29:f9:04:
                    e8:23:d4:5b:22:f7:2f:69:8a:39:ab:34:37:ad:eb:
                    48:3d:d4:e2:2e:a5:c4:58:8b:49:29:49:01:6b:dd:
                    d1:b3:64:d7:b2:83:3c:7b:0f:6a:af:47:b5:a6:06:
                    c9:e1:2d:a5:4f:fa:d7:ef:e3:58:86:13:d8:3f:14:
                    03:d8:bb:72:99:4f:c0:77:85:9e:e3:91:89:e9:e0:
                    08:51:21:5a:a1:72:0f:63:1d:13:b5:8f:68:d5:ee:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:F5:07:DA:19:E2:14:76:E1:E8:CE:04:4B:E7:87:85:D3:A8:D1
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:6d:2a:6b:8d:78:ff:35:e8:64:90:39:9f:81:2a:88:54:
         a6:f6:7c:8b:f2:76:79:a9:28:3c:b5:15:a5:22:a2:ad:a5:97:
         2f:23:83:ec:46:52:41:59:7e:e2:eb:42:20:2f:87:b1:10:9c:
         0f:84:d1:fc:db:d5:3b:de:f4:78:c1:f2:9b:eb:6b:8c:96:c3:
         bf:ae:c2:dd:1e:5f:d1:7f:11:aa:62:9a:56:7d:da:d1:ee:b2:
         fb:a1:fa:a7:e2:b0:9d:87:f8:f6:3d:70:3c:74:8c:a3:70:8d:
         b0:65:34:1b:bb:4c:c7:f0:2d:d3:86:92:ec:52:25:b0:ad:2c:
         39:07:c7:5e:61:0e:40:8a:2b:19:2b:7b:2e:15:c4:b8:30:f3:
         4c:18:38:25:83:f1:cb:b1:16:96:ed:75:f7:a8:22:16:de:4a:
         bd:43:72:60:4a:c2:d9:bf:d7:0b:8f:78:4a:71:ba:b1:64:a8:
         de:5d:00:1c:e6:71:dc:99:dd:93:2a:16:2b:a6:d1:9d:ca:ea:
         16:b8:69:68:32:f6:fc:3c:6b:d7:48:f8:2d:9e:e3:8f:56:b1:
         97:b5:91:16:3b:a6:f7:31:e9:7a:01:1b:1f:92:e1:3c:43:a4:
         cb:8a:5a:21:38:6d:9b:75:de:49:45:4c:8b:a9:6a:1b:32:a8:
         b6:2f:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:47 2026 by rpki-client