Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          JqK3UE+o2mogZPcuc+Hx4E07kd1bzeFTphLBtB6DxxE=
Subject key identifier:   89:C8:C0:17:32:C6:83:E0:4D:1A:A0:25:32:2C:FC:5E:6F:C5:06:21
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          011D
Signing time:             Mon 27 Jul 2026 07:51:04 +0000
Manifest this update:     Mon 27 Jul 2026 07:51:03 +0000
Manifest next update:     Mon 03 Aug 2026 07:51:03 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: 0FdroqFa6q7t0OpH9CPaRWZhEDIh3pxHdiMEFYNMTL4=)
                          2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
                          3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
                          rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Jul 27 07:51:03 2026 GMT
            Not After : Aug  3 07:51:03 2026 GMT
        Subject: CN=6a670de8-9fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:36:e6:85:86:65:bf:23:eb:34:54:fd:00:
                    75:0f:18:af:7a:ed:c9:4f:42:63:42:0c:57:1d:bc:
                    a0:ed:f1:00:b9:62:bf:c3:14:66:55:37:27:d7:81:
                    f7:18:ba:96:f7:bd:83:52:92:35:b3:3a:45:5b:05:
                    15:b3:6a:61:f1:7f:f8:3b:0d:3f:9d:fc:00:04:f0:
                    39:d8:f8:09:33:78:ab:5e:93:c7:9b:f6:91:ef:64:
                    b0:41:11:7c:4d:04:35:07:4d:05:02:16:6e:2d:d5:
                    6a:c9:4d:28:99:af:f9:e7:3a:3b:79:ba:2d:3f:48:
                    93:b2:63:91:31:a1:56:76:93:5c:b0:37:be:d5:e6:
                    33:dd:63:72:40:fe:71:d2:69:3c:91:3d:36:14:3e:
                    c2:93:f8:21:af:84:8e:05:15:42:a7:75:15:da:e7:
                    63:43:34:7c:95:97:d9:30:88:87:52:eb:89:b7:e9:
                    e4:5c:29:ad:95:2a:51:0e:f6:bf:0d:2a:9c:30:35:
                    69:1d:88:f6:3a:ad:e5:f3:4d:32:37:58:b5:d4:4b:
                    e5:a6:e8:14:cb:b9:67:2b:8b:41:c2:4f:b1:eb:f0:
                    05:d4:69:d0:ba:4b:06:9c:7b:14:3b:0a:59:c0:06:
                    88:0e:4d:82:03:48:3a:96:1c:8b:4a:c2:9f:67:19:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C8:C0:17:32:C6:83:E0:4D:1A:A0:25:32:2C:FC:5E:6F:C5:06:21
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2a:45:b7:22:9a:22:ec:46:6a:49:73:8f:4e:8c:c1:09:5c:
         df:96:56:e2:32:55:ba:4a:9f:59:c8:73:c3:c8:7c:c0:51:a3:
         a9:ba:6b:fe:56:41:8e:f5:c9:cc:34:35:a7:00:57:5c:65:32:
         1b:b2:4c:62:91:98:d3:cc:42:9e:32:b1:53:35:73:63:8a:2e:
         34:ac:c8:7a:07:46:2a:7d:1f:31:90:95:11:89:bd:ba:0f:df:
         53:26:0a:47:fe:c2:f0:fe:c0:d1:13:76:d0:50:e3:6e:06:dc:
         95:55:9e:dc:e7:43:f0:43:0d:42:2c:67:90:5b:30:d9:3f:3a:
         f8:2a:8f:7f:84:3d:30:a7:1f:f9:68:01:f0:d1:ba:ab:ba:61:
         4a:3a:3d:7f:64:29:4f:fa:f5:6d:d2:e2:b9:ec:7b:c7:d0:c2:
         71:9b:63:d6:a4:51:41:52:93:94:0d:a0:40:de:80:25:7a:e3:
         64:45:39:3f:93:23:62:a4:af:83:c1:e8:dd:88:84:55:20:3c:
         ba:8a:35:02:69:61:f4:74:f3:75:68:03:55:a4:c0:4b:45:31:
         07:c1:38:40:58:03:02:c8:53:9f:ae:b7:b6:ed:4f:38:82:b2:
         e9:92:7c:a2:a7:fe:67:10:5e:f0:50:ca:61:64:51:c4:8f:7d:
         93:e8:09:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:17 2026 by rpki-client