Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
File:                     gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json)
Hash identifier:          wj5z85j32o78rFjlbSM6sBDZsBnKdZHBVXNZasdBUe0=
Subject key identifier:   73:1B:83:B5:B5:79:ED:59:F0:54:62:FE:37:2A:D9:BA:A6:46:9D:A4
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Certificate issuer:       /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
Manifest number:          EB
Signing time:             Mon 27 Jul 2026 08:30:06 +0000
Manifest this update:     Mon 27 Jul 2026 08:30:05 +0000
Manifest next update:     Mon 03 Aug 2026 08:30:05 +0000
Files and hashes:         1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: 750YdhJKjGfeDeOUoHXGISOkJ+aJaCsRPUJdT9cVdpY=)
                          2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: ytK8wWdrYPra1E/l8xXWI1AT8E/6aAB7MEKN1b5tfbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
        Validity
            Not Before: Jul 27 08:30:05 2026 GMT
            Not After : Aug  3 08:30:05 2026 GMT
        Subject: CN=6a67170d-50e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:86:20:91:71:22:b9:46:a9:32:96:a2:c3:
                    04:9c:b8:ae:c2:d0:b6:1a:5d:b8:6b:03:b4:84:1f:
                    b8:cf:35:f9:f9:9b:2d:48:bb:b3:55:be:a6:31:ce:
                    c6:32:44:4d:c5:99:3f:07:9f:e9:d6:02:64:4f:eb:
                    a0:a0:cb:23:45:b7:b6:b1:d9:09:e8:0e:04:23:36:
                    ce:fa:35:4b:d0:38:a3:95:14:47:f1:27:2a:c9:62:
                    d5:59:87:ba:c3:2b:be:c2:bd:7e:2a:80:d9:9b:de:
                    b4:63:2f:98:1e:7e:6f:8f:99:73:ba:3f:13:64:8c:
                    95:d5:27:8d:a2:a2:f3:8e:b9:66:0f:36:11:b6:f9:
                    3c:f7:72:65:2e:68:85:5e:14:35:79:90:99:50:d6:
                    66:dd:b5:7d:a7:99:42:ea:d7:a0:3b:f5:cf:36:0d:
                    d9:ec:ef:e8:25:86:87:51:a5:a8:17:39:7f:6a:d2:
                    ed:8e:93:de:24:08:a8:85:11:9e:a8:56:fd:d1:6b:
                    ca:76:aa:36:33:bb:6b:a9:12:81:2b:a0:fc:10:78:
                    2a:33:6e:e0:9b:e1:38:c8:88:18:eb:21:e8:75:06:
                    68:e1:f3:5b:8c:c2:2c:57:4f:4e:6f:22:bb:e9:25:
                    c1:5f:44:0e:9b:c5:2f:64:84:59:53:55:c1:a3:d9:
                    38:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:83:B5:B5:79:ED:59:F0:54:62:FE:37:2A:D9:BA:A6:46:9D:A4
            X509v3 Authority Key Identifier:
                keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cd:ef:ac:a4:af:95:17:2f:4f:b4:e1:4a:38:b8:7f:8f:ed:
         1b:cb:19:fb:ba:bb:69:3b:4d:ee:74:0f:f0:09:c0:06:c8:a5:
         0e:cf:de:0e:36:55:bb:29:87:b4:a3:55:c9:b8:0a:46:43:42:
         b2:6e:dc:96:98:70:1c:aa:96:a7:00:32:38:c2:b5:1c:9f:34:
         eb:d3:0e:6a:b7:89:f1:c1:5a:69:09:ee:0e:90:51:2c:ae:cf:
         3c:74:61:22:bf:78:1f:f4:26:03:f6:e7:65:c2:a9:fe:79:14:
         15:be:6f:18:60:e1:42:3b:0f:23:0c:14:5f:35:42:ea:bf:fb:
         f9:ef:d3:3c:44:c7:10:9f:09:67:92:c8:a0:77:99:6c:79:3f:
         d9:37:78:30:96:79:27:2d:c5:28:8c:b8:02:be:81:4f:41:d9:
         82:3f:cb:4f:0d:5b:23:c9:a2:5a:77:00:eb:72:62:13:24:4c:
         eb:8d:c7:74:e7:cc:1f:03:42:97:d0:2c:08:47:e4:4c:00:53:
         c8:42:e4:69:bb:c7:9d:51:d8:e1:10:b5:5f:2f:2e:83:b0:c0:
         9d:cc:5d:50:18:32:b3:d1:eb:d1:fc:5c:3f:3d:74:b0:92:bb:
         66:c0:13:c5:4c:51:5a:0c:8e:d5:fd:e9:0c:a0:03:56:a7:b1:
         fc:f4:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:41 2026 by rpki-client