Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File:                     gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier:          IcOK7YEtHTpI2+EkMhhHvsXDYVhW2+eOnYuSd3eVLw4=
Subject key identifier:   FE:FA:28:42:D8:BB:89:29:7D:A3:7C:B7:4A:10:8A:B1:02:1B:D5:EC
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer:       /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number:          024A
Signing time:             Wed 29 Jul 2026 03:25:31 +0000
Manifest this update:     Wed 29 Jul 2026 03:25:30 +0000
Manifest next update:     Wed 05 Aug 2026 03:25:30 +0000
Files and hashes:         1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: pfirMjr7tUuSQbber2ORunurI6BIBJRNp0fi1vpXpqI=)
                          2: 6A3BE658401B11F080319527C4F9AE02.roa (hash: G0vlI3Y4+8WgZsJeIBEokHzCEUdmWiGvtc5JLb9JKsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:25:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
        Validity
            Not Before: Jul 29 03:25:30 2026 GMT
            Not After : Aug  5 03:25:30 2026 GMT
        Subject: CN=6a6972ab-c19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:0a:38:42:a6:93:6a:fd:8a:d4:d0:0a:9e:
                    99:0b:2e:d0:28:52:e3:5b:8b:b7:74:9f:41:06:1a:
                    4c:40:2a:07:54:18:2f:7c:0d:c9:96:11:a3:87:03:
                    4a:c7:c2:04:4b:3e:55:92:9b:e5:d3:70:8d:7a:dd:
                    2e:16:5f:83:ef:c9:fd:db:56:ec:3f:81:fd:a3:01:
                    c4:27:e0:7f:d2:39:f3:50:dc:1d:7b:8b:08:80:22:
                    8c:1a:44:b1:7e:dd:e2:0a:b7:7a:6f:19:44:e2:ff:
                    03:eb:5a:07:7b:25:3c:91:67:1e:4b:a8:ed:87:42:
                    7f:b8:75:84:93:12:8f:af:93:a6:71:05:c7:43:22:
                    df:36:3b:0d:df:e7:6e:e5:f3:61:a6:18:3a:c3:50:
                    53:21:12:f3:d0:94:1e:63:2b:8e:df:2c:fb:76:52:
                    81:f5:7e:80:e5:36:30:83:54:12:4c:23:4a:3a:9c:
                    0f:e0:8f:d4:92:57:55:fb:62:5a:a4:fa:d0:6b:88:
                    2d:bd:b6:2c:13:39:37:ee:d4:e0:a3:d9:f2:e2:15:
                    2d:77:70:74:30:72:2c:b9:30:0c:77:3b:24:0c:da:
                    25:29:65:d6:6a:e1:c9:c5:12:99:ad:fa:2e:e9:d2:
                    18:09:13:ee:9b:c2:80:7a:15:24:cf:5b:d4:1c:c3:
                    ec:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:28:42:D8:BB:89:29:7D:A3:7C:B7:4A:10:8A:B1:02:1B:D5:EC
            X509v3 Authority Key Identifier:
                keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:0d:35:66:22:c1:c8:29:d2:a0:e1:53:7f:bd:02:45:34:
         8a:92:b7:a1:ee:99:f7:22:e8:b3:89:0c:4f:31:17:5b:0f:a0:
         c0:b7:53:1b:69:d0:36:1b:32:2b:81:57:e7:33:21:fa:86:d8:
         e6:4c:36:41:6d:8f:9e:a4:dc:26:17:a2:c5:a6:12:6f:ab:29:
         e9:83:8d:4c:49:fb:16:24:ae:aa:5c:16:ac:d6:5c:55:84:16:
         c0:9f:a6:da:0a:4d:22:ba:a5:00:20:18:f0:b8:63:c7:b7:76:
         5e:40:a8:00:cc:0b:49:dd:27:85:66:a2:ef:2f:25:e1:a8:01:
         f6:d7:46:32:df:1c:c2:27:49:1f:e0:9b:20:95:c2:87:e5:14:
         72:4b:c1:49:8d:43:b6:ec:f7:eb:71:c8:ca:9f:20:8b:a7:57:
         7c:d6:79:79:db:08:b8:fc:c7:85:6e:f1:ef:25:34:93:f0:19:
         b2:bb:28:84:13:39:6c:ad:b9:46:ab:03:f4:c4:18:7c:cf:6e:
         01:03:59:bf:4d:0e:46:7e:7e:c4:ad:be:e1:39:b9:6c:bc:07:
         cf:52:98:b8:05:e1:78:71:64:ab:8b:96:36:46:21:9e:5b:96:
         35:db:fa:e8:01:8c:eb:35:ce:0f:6a:de:f5:8c:c5:3f:6d:95:
         ed:ab:38:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRUUxMTAvBgNVBAUTKDgyNkUzOEVDNzFGMkE0ODVCNEIyNEVGRUNFODQ2MzI1
MEE4NEEwQkMwHhcNMjYwNzI5MDMyNTMwWhcNMjYwODA1MDMyNTMwWjAYMRYwFAYD
VQQDEw02YTY5NzJhYi1jMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtycKOEKmk2r9itTQCp6ZCy7QKFLjW4u3dJ9BBhpMQCoHVBgvfA3JlhGjhwNK
x8IESz5Vkpvl03CNet0uFl+D78n921bsP4H9owHEJ+B/0jnzUNwde4sIgCKMGkSx
ft3iCrd6bxlE4v8D61oHeyU8kWceS6jth0J/uHWEkxKPr5OmcQXHQyLfNjsN3+du
5fNhphg6w1BTIRLz0JQeYyuO3yz7dlKB9X6A5TYwg1QSTCNKOpwP4I/UkldV+2Ja
pPrQa4gtvbYsEzk37tTgo9ny4hUtd3B0MHIsuTAMdzskDNolKWXWauHJxRKZrfou
6dIYCRPum8KAehUkz1vUHMPstQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP76KELY
u4kpfaN8t0oQirECG9XsMB8GA1UdIwQYMBaAFIJuOOxx8qSFtLJO/s6EYyUKhKC8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS80QkNDNDQ0NDA5
QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9nbTQ0N0hIeXBJVzBzazctem9SakpRcUVv
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dtNDQ3SEh5cElXMHNrNy16b1JqSlFxRW9Mdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBFRS80QkNDNDQ0NDA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi9nbTQ0N0hIeXBJ
VzBzazctem9SakpRcUVvTHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyoNNWYiwcgp0qDhU3+9AkU0ipK3oe6Z9yLos4kMTzEXWw+gwLdTG2nQNhsy
K4FX5zMh+obY5kw2QW2PnqTcJheixaYSb6sp6YONTEn7FiSuqlwWrNZcVYQWwJ+m
2gpNIrqlACAY8Lhjx7d2XkCoAMwLSd0nhWai7y8l4agB9tdGMt8cwidJH+CbIJXC
h+UUckvBSY1Dtuz363HIyp8gi6dXfNZ5edsIuPzHhW7x7yU0k/AZsrsohBM5bK25
RqsD9MQYfM9uAQNZv00ORn5+xK2+4Tm5bLwHz1KYuAXheHFkq4uWNkYhnluWNdv6
6AGM6zXOD2re9YzFP22V7as4cQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:39:55 2026 by rpki-client