Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
File:                     G4GY4pfs-4-1GveWJNO2hKH5tR0.mft (raw, json)
Hash identifier:          d5sIfPu3A3SvqtFonJeCZ525lFdHj6SSz5wZXnMf56c=
Subject key identifier:   87:AD:A9:54:93:9B:7F:C9:8C:58:91:19:2A:EE:41:4C:C3:2D:04:4E
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Certificate issuer:       /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial:       2370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
Manifest number:          2348
Signing time:             Tue 28 Jul 2026 15:54:55 +0000
Manifest this update:     Tue 28 Jul 2026 15:54:54 +0000
Manifest next update:     Tue 04 Aug 2026 15:54:54 +0000
Files and hashes:         1: G4GY4pfs-4-1GveWJNO2hKH5tR0.crl (hash: r7D/UnzfUZk6x7yO7gozh6dZs7i5QtZhl10GVOamk/4=)
                          2: 27CF6BE84EED11EF8D4BE30CC4F9AE02.roa (hash: 7peUVHRk+PQhJWC3EgfTO1c+QPolVUXxC238dGIMM0g=)
                          3: EDB5F114A63711EF89F3B833C4F9AE02.roa (hash: nrDtqZzOKVXo2gMciyi4gICGgYqAvv6VbbsJk7cKje8=)
                          4: EBEA51DC4EE311EFA1615635C4F9AE02.roa (hash: NWJw87iGPcBaGP0PIOvFnWY4dzwoZ1iihk/1tJetYcM=)
                          5: 27BCA4ECCCAD11F0B8832177C4F9AE02.roa (hash: jEoMcnbvl//p7lD0lzYAw/Hc1FlVvhd843cxzq1inSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
                          rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9072 (0x2370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
        Validity
            Not Before: Jul 28 15:54:54 2026 GMT
            Not After : Aug  4 15:54:54 2026 GMT
        Subject: CN=6a68d0cf-a888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:9a:d7:ae:19:a7:6c:58:c4:bc:ea:c0:ab:
                    70:60:be:03:ac:9c:e7:91:af:c6:87:01:75:33:26:
                    53:f2:b1:e5:ec:16:e8:bd:3c:8f:0b:0b:24:c1:c1:
                    2f:0a:38:81:8e:d7:50:84:45:ab:c1:e6:df:10:99:
                    6a:f0:78:c0:eb:7d:9d:10:ab:e9:16:b2:62:c1:26:
                    9b:d3:31:9d:bc:e8:30:1d:fd:4b:d8:dc:41:17:11:
                    b7:2e:0f:07:12:f4:e8:fb:4b:e6:03:9f:10:63:7c:
                    3a:72:22:30:23:59:d7:7c:4b:bb:00:23:93:0f:9e:
                    fd:d0:79:7c:5e:23:a5:15:42:cb:a0:e9:c5:3c:b0:
                    13:5f:55:11:c5:80:7e:98:ef:d7:26:e3:7d:7c:fa:
                    88:94:d0:bf:e4:5f:e8:58:06:ff:4d:f6:37:53:f2:
                    95:d2:93:43:14:29:f4:06:2a:52:15:a2:71:66:92:
                    55:74:22:c2:40:61:a8:35:d9:fb:03:cf:cd:bb:7f:
                    99:5a:d7:8c:30:45:e6:5d:01:26:50:f9:75:95:fa:
                    a5:ca:f4:c0:2a:fe:ab:3d:27:d1:4c:70:09:a4:e9:
                    c3:da:7a:47:41:26:54:27:40:a6:9c:05:78:80:fe:
                    17:ce:5f:7c:37:39:e2:65:83:0c:a2:4f:b0:bd:d9:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AD:A9:54:93:9B:7F:C9:8C:58:91:19:2A:EE:41:4C:C3:2D:04:4E
            X509v3 Authority Key Identifier:
                keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:79:93:d8:18:9f:ad:22:1d:52:85:07:74:0f:ab:e7:c3:
         79:4f:48:ff:1f:a5:04:37:b2:d2:fe:fc:de:8e:0e:04:89:32:
         3c:f0:0d:31:7a:b6:fe:08:d8:d2:de:e3:d2:5c:df:dc:62:2f:
         74:ec:a2:df:92:15:80:7c:57:02:0c:1b:82:79:23:f0:d6:2b:
         ab:a3:5f:bc:bc:a1:72:f9:4b:fa:f8:48:6a:9a:41:5a:77:21:
         1b:23:32:ae:92:85:35:83:96:e6:e4:00:5b:6d:66:f7:6d:8a:
         8d:c9:f4:89:08:66:f9:98:b9:48:ed:49:be:e6:0c:e9:78:b1:
         40:80:bf:37:f7:5b:98:82:5f:82:68:4a:17:7a:8f:40:1f:33:
         61:94:46:7a:b3:5d:0a:9c:f4:6b:b7:5d:0c:cb:57:77:d5:85:
         d1:f6:4f:99:c5:91:84:61:8f:17:6c:0f:c0:a0:f9:7c:c4:ba:
         6f:bf:49:e1:ff:46:14:f7:42:0a:fd:ca:8d:7e:45:9b:90:fe:
         4f:e4:99:6a:29:87:f0:f6:bc:23:ab:25:e1:ad:0b:bd:22:db:
         c7:d4:39:3c:b5:a1:7e:8e:4a:3b:0e:27:9b:f7:b4:ad:f5:c0:
         57:bf:0f:90:71:cb:dd:12:8a:ea:63:ed:71:58:3f:1e:9e:57:
         d7:48:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:07 2026 by rpki-client