Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
File:                     Gn5MpKocInIldylqsFeD11WxFr0.mft (raw, json)
Hash identifier:          b1Z91X/Rub/JBtnXVfo+sX//az+VROAG/su2gTavqrA=
Subject key identifier:   70:91:01:A5:57:C3:56:9F:F4:25:E5:D5:79:05:94:62:13:6A:59:3A
Authority key identifier: 1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD
Certificate issuer:       /CN=A915803A/serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
Certificate serial:       0CB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
Manifest number:          0CA9
Signing time:             Tue 28 Jul 2026 18:46:44 +0000
Manifest this update:     Tue 28 Jul 2026 18:46:43 +0000
Manifest next update:     Tue 04 Aug 2026 18:46:43 +0000
Files and hashes:         1: Gn5MpKocInIldylqsFeD11WxFr0.crl (hash: O6Rp1pHJUPTK343V6au/G5CV9iQMg+9FW+m3/nTGjBE=)
                          2: FFDEC6C2814B11F1AD7DC42B81A30FBC.roa (hash: QaW6Ue461LZJXVee30rWUOqksOyUrqHd3FBVrBcyF3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl
                          rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915803A, serialNumber=1A7E4CA4AA1C22722577296AB05783D755B116BD
        Validity
            Not Before: Jul 28 18:46:43 2026 GMT
            Not After : Aug  4 18:46:43 2026 GMT
        Subject: CN=6a68f914-92da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:41:c3:69:3d:67:a8:fa:2c:fe:f6:9f:9d:
                    db:ee:0d:59:83:74:01:cc:b7:2d:84:f0:4a:ab:b5:
                    f5:dd:be:0f:eb:14:ae:0d:0b:54:76:36:0c:b4:7b:
                    50:38:a9:87:9a:ed:99:b2:cf:bc:6d:5c:6d:90:7e:
                    81:7d:bb:b2:24:72:32:f2:10:c1:ad:3c:78:9f:d9:
                    44:a4:a0:c5:3f:70:22:06:bd:f8:49:0a:0c:ca:86:
                    13:3b:0f:74:ef:71:06:1e:f1:f7:23:f5:fe:b9:66:
                    98:dc:34:74:2a:28:4f:b7:be:16:35:5e:73:60:9c:
                    3c:8b:c1:87:b3:3a:4c:0e:67:4e:de:1a:78:c3:54:
                    6a:8f:ca:53:bb:b8:4f:ef:35:f4:cb:eb:82:bf:dd:
                    c9:97:3b:f1:e5:33:d8:35:a0:32:14:39:5e:46:52:
                    de:ff:00:86:ed:55:86:f4:e7:2d:48:3c:32:91:55:
                    f3:5f:1f:c1:af:af:ce:0a:d5:61:0e:2d:12:2e:a9:
                    df:6e:74:3e:9e:92:b2:9f:d6:65:05:2b:24:e5:48:
                    18:33:9d:c8:fa:03:fc:33:19:7a:f1:f1:51:af:86:
                    ac:29:e4:16:ce:85:d7:9a:0d:de:44:5a:3b:cb:21:
                    2d:9e:17:11:30:2c:e8:5d:19:77:1f:d2:7c:89:15:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:91:01:A5:57:C3:56:9F:F4:25:E5:D5:79:05:94:62:13:6A:59:3A
            X509v3 Authority Key Identifier:
                keyid:1A:7E:4C:A4:AA:1C:22:72:25:77:29:6A:B0:57:83:D7:55:B1:16:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gn5MpKocInIldylqsFeD11WxFr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915803A/8CBD97861E5111EAAF0BEB5CC4F9AE02/Gn5MpKocInIldylqsFeD11WxFr0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:02:35:ff:76:ea:3c:31:d4:fb:60:3d:b6:67:f9:f9:c0:82:
         95:1f:b0:40:94:ad:38:f6:de:b0:b8:4b:0c:c2:27:f4:41:c9:
         93:44:ee:2d:ff:f6:fb:d0:78:79:9a:44:bf:7d:9b:dd:6e:14:
         f1:ff:7a:2e:67:41:03:7d:79:69:c1:0a:85:8a:a3:41:d0:60:
         e3:c9:2c:52:42:19:a5:26:f9:13:19:c2:eb:e3:e8:ea:9f:15:
         ae:8d:ad:87:c1:d1:3a:e9:03:f0:a5:1e:e2:c5:c2:61:75:00:
         7a:56:cc:ec:37:97:8c:1f:69:c5:98:cf:ec:3b:68:74:f2:73:
         25:7c:32:5b:ac:ff:90:c8:fc:48:04:d4:18:0e:dd:ec:dd:d2:
         29:d8:81:46:c2:2a:1e:71:c7:b2:73:39:75:e4:56:90:67:81:
         79:a0:76:6f:9c:27:ee:72:5a:03:24:d3:47:f9:dc:22:58:bd:
         35:14:9a:e3:9f:95:c8:44:3a:42:81:3e:63:2c:1d:14:c7:1b:
         af:5d:e4:e0:95:f9:05:5b:6e:c5:68:62:40:40:13:72:c0:83:
         fa:3a:f9:7f:2a:f9:eb:27:d6:c5:d8:f8:2d:88:0c:76:19:a3:
         03:b6:c5:d5:08:d0:02:7f:bf:e9:8b:42:0a:ab:fc:42:3e:6c:
         80:38:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:01:34 2026 by rpki-client