Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
File:                     _GVaIVQ-z1e_o-vfeUaplWHsUvU.mft (raw, json)
Hash identifier:          4YDkKFiUQKPXXNM/s2hUTQFmaxOOyM1+B43NI+wk+ms=
Subject key identifier:   B6:61:96:55:CF:53:E8:AF:77:FE:23:29:92:FE:40:ED:52:58:DF:77
Authority key identifier: FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5
Certificate issuer:       /CN=A9151C9D/serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
Certificate serial:       27C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
Manifest number:          27B8
Signing time:             Tue 28 Jul 2026 15:43:58 +0000
Manifest this update:     Tue 28 Jul 2026 15:43:57 +0000
Manifest next update:     Tue 04 Aug 2026 15:43:57 +0000
Files and hashes:         1: _GVaIVQ-z1e_o-vfeUaplWHsUvU.crl (hash: iAwk3inPDkaziDSnZoQBnn6SQ86boQC/SY84CPQeOmc=)
                          2: A23207FEB14111E5A3B46B15C4F9AE02.roa (hash: NdTxn+HasKfGOEbIN5yYPJ4JBQuKbqVM6GqJLCJsrzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl
                          rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10185 (0x27c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151C9D, serialNumber=FC655A21543ECF57BFA3EBDF7946A99561EC52F5
        Validity
            Not Before: Jul 28 15:43:57 2026 GMT
            Not After : Aug  4 15:43:57 2026 GMT
        Subject: CN=6a68ce3e-abc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:01:53:56:28:1c:ee:24:3e:ab:33:98:6a:
                    35:9d:5a:2e:ac:c8:c7:38:43:ad:48:d2:de:66:49:
                    db:29:81:3b:50:36:df:37:7a:8d:6b:1f:51:39:77:
                    17:4b:ee:7a:25:9f:94:ff:a5:44:87:80:6b:af:48:
                    dd:3c:7f:0e:fc:13:2c:f0:cb:19:29:22:49:8b:ab:
                    89:73:35:dc:d7:ff:a4:c2:9c:ee:92:70:12:57:1f:
                    1f:92:7f:c9:c2:67:05:fa:03:e5:6d:d3:3c:aa:2b:
                    db:00:47:4c:0b:a7:3e:d3:46:c2:fb:22:c8:40:27:
                    d8:15:d8:9e:81:11:6b:1f:55:ec:4e:d1:1d:8e:09:
                    96:3a:9b:7e:ea:00:75:bb:8b:21:ff:49:90:67:2f:
                    1e:30:7c:f4:64:3d:e8:e3:dc:e3:b9:1c:73:ec:3e:
                    f1:74:c4:1d:0c:54:1e:d9:88:04:0f:18:58:a6:72:
                    9d:ab:b6:93:fc:0a:7e:18:d6:14:1e:11:e2:ce:ce:
                    03:de:af:c8:5d:4e:64:13:81:e8:78:70:40:95:62:
                    d7:e5:c5:d6:40:96:02:c7:ea:20:fe:f7:e9:4a:3d:
                    2d:e0:0f:66:44:ab:98:9e:c7:fe:c3:0e:07:d6:37:
                    ed:5c:ba:65:66:1d:d6:93:86:be:62:17:12:88:02:
                    b5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:61:96:55:CF:53:E8:AF:77:FE:23:29:92:FE:40:ED:52:58:DF:77
            X509v3 Authority Key Identifier:
                keyid:FC:65:5A:21:54:3E:CF:57:BF:A3:EB:DF:79:46:A9:95:61:EC:52:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_GVaIVQ-z1e_o-vfeUaplWHsUvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151C9D/73ACA5E4CF4511E4B6B7A211C4F9AE02/_GVaIVQ-z1e_o-vfeUaplWHsUvU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f5:f5:60:99:c4:eb:51:38:b3:e6:56:51:de:72:5d:87:96:
         0a:fb:a2:b2:3e:b2:5b:bc:54:6b:c9:d0:a8:f7:45:74:9c:1e:
         cc:25:d0:43:f4:48:f4:3d:0e:e1:65:6f:4c:40:73:af:85:4d:
         5b:ec:6e:16:5f:6d:5c:8a:2b:2b:03:7a:8a:01:ba:7c:24:10:
         fe:3f:f9:cb:0d:23:30:7c:f6:23:a1:51:cb:9f:b5:54:76:1b:
         95:22:6f:01:08:6b:ab:61:cc:df:c3:87:ea:b6:6b:49:76:45:
         ad:11:b5:8e:46:a3:76:86:7c:5f:4f:90:9f:ce:5c:d6:61:86:
         ff:c3:46:e4:b7:96:4d:b2:f3:7b:a8:d3:15:5e:ab:3a:6c:b5:
         f4:99:b9:44:9b:88:10:1c:f5:ae:47:34:2e:d5:3e:32:84:ce:
         40:51:1b:f5:5b:07:a5:e9:6e:95:c8:92:15:f2:06:b4:b4:a4:
         b5:c0:2b:60:d5:77:80:07:5d:d5:b4:0e:48:cb:a8:cf:75:95:
         20:2b:82:f6:05:83:a6:c4:6c:58:22:c2:61:46:fc:2c:ce:d9:
         a5:a8:a6:d3:c8:17:68:9c:51:9f:9b:26:99:98:12:73:8f:67:
         29:a7:a2:d2:d2:a8:ea:ef:f0:f8:21:5f:11:f7:15:3f:f9:85:
         21:39:2d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:29:46 2026 by rpki-client