Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
File:                     GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json)
Hash identifier:          NHrEsP4TcYSwxMnHu6yqJTg5UtbuH6AmLVvwJZkDYag=
Subject key identifier:   FF:E1:B3:AA:93:19:83:3A:62:0A:D9:B2:F5:9F:3F:CC:F4:E7:01:A2
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Certificate issuer:       /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
Manifest number:          C9
Signing time:             Wed 29 Jul 2026 08:17:09 +0000
Manifest this update:     Wed 29 Jul 2026 08:17:09 +0000
Manifest next update:     Wed 05 Aug 2026 08:17:09 +0000
Files and hashes:         1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: Eg4ivLN/sKXsdgDWPCBdM6+4+9ReaeqROYRIjszXjnU=)
                          2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: ObOITIzgGgqGBPGudigAZ1pn1ycFYqSZSvvOBF2J+iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
        Validity
            Not Before: Jul 29 08:17:09 2026 GMT
            Not After : Aug  5 08:17:09 2026 GMT
        Subject: CN=6a69b705-0631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:56:d2:68:02:26:32:0e:bc:37:da:a3:1a:
                    6f:64:cf:35:12:4b:41:4b:96:78:24:4a:32:c6:2c:
                    1c:f8:6d:3a:05:11:41:5f:95:1c:24:cd:e1:dc:87:
                    de:28:a0:90:ea:81:5c:1a:a2:c4:d6:4a:2e:e4:41:
                    94:73:4f:00:03:2d:aa:0a:be:da:e6:75:db:74:95:
                    c5:d5:44:f2:7b:de:e1:fb:23:27:16:26:cd:ea:62:
                    a9:ab:c1:25:46:24:af:75:76:8f:49:50:b8:c7:ae:
                    f1:f0:4b:b7:85:ef:94:9a:c6:4d:02:00:d0:9a:89:
                    80:ea:ce:43:2c:c1:0c:19:94:2e:3a:8e:14:d6:42:
                    9b:02:b1:b4:63:98:4a:ba:10:a9:8d:0f:94:a0:89:
                    21:f6:06:fc:66:50:92:d5:9f:a6:67:98:d5:96:ef:
                    33:8c:48:8c:69:50:5e:f1:74:e0:ef:67:43:04:a4:
                    81:d0:57:2f:cf:8c:a1:e4:71:7b:70:7c:97:40:73:
                    b4:cf:e2:38:f0:81:9c:d4:85:06:e5:11:f8:28:21:
                    d0:6e:38:51:2e:83:ec:c2:08:21:af:d5:30:d6:a4:
                    2a:5d:14:07:6d:2c:38:dd:a6:54:7b:4c:11:02:30:
                    d4:51:ab:dc:1a:14:7f:59:d4:97:4f:32:2e:fd:60:
                    0a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E1:B3:AA:93:19:83:3A:62:0A:D9:B2:F5:9F:3F:CC:F4:E7:01:A2
            X509v3 Authority Key Identifier:
                keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:0b:d6:3e:71:70:22:0a:a7:dc:9f:b0:65:af:b7:2d:9b:
         62:9f:0b:de:09:13:2f:8b:00:30:4e:db:a2:75:4c:d5:f7:b3:
         70:6f:48:84:77:93:90:e1:a3:a3:ea:2e:5e:c1:1b:f1:5a:cd:
         20:ae:7f:70:4e:2d:a4:d9:b5:94:8f:dc:da:93:1b:07:f7:71:
         f2:d4:67:f7:87:d0:91:85:58:e0:f5:5a:cb:42:6a:6c:63:a7:
         3e:d9:ef:dc:9b:ec:72:a0:9a:ff:8c:71:a1:b3:04:20:e5:43:
         69:31:b4:6d:7c:55:a4:89:2c:8c:00:29:78:8d:ec:5f:7f:e8:
         a8:0d:19:69:26:33:31:d3:1f:dc:9f:34:bb:1b:37:c6:2f:c3:
         3f:99:b2:55:0f:ca:98:47:3e:1d:bd:2c:ee:00:8e:e1:2d:38:
         d6:13:1c:9d:1e:7d:a7:6a:59:57:15:07:6c:ca:ec:b2:bd:f5:
         61:e7:5b:c8:2f:b0:36:20:73:99:3f:78:06:bb:04:f3:8c:69:
         ad:78:e0:31:95:a9:60:5a:cd:bc:bb:04:90:78:86:4c:b4:c5:
         6e:ac:b7:92:a0:66:af:28:d3:fe:54:65:08:32:b2:b1:42:79:
         f7:bc:82:18:3a:d6:8b:b9:f5:fd:53:82:75:aa:21:20:87:ca:
         8c:87:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:53 2026 by rpki-client