Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
File:                     gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft (raw, json)
Hash identifier:          ilJmlnBzJtabc4MvTUT/53oup9i32jEKZgP4oZTd+C4=
Subject key identifier:   F8:1E:6D:36:1D:61:F5:44:51:07:C8:81:15:2D:08:B5:E4:86:02:8E
Authority key identifier: 83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93
Certificate issuer:       /CN=A915FA57/serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
Manifest number:          32
Signing time:             Wed 29 Jul 2026 10:13:05 +0000
Manifest this update:     Wed 29 Jul 2026 10:13:05 +0000
Manifest next update:     Wed 05 Aug 2026 10:13:05 +0000
Files and hashes:         1: gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl (hash: Een53lhuK/IyvNRS+e2M+J/8hOMVcd5jGun3EeRQcNs=)
                          2: 5A303E7A3D4611F1994807ACA2833773.roa (hash: 75E46ZIZqwC0x2k0YHhHlFPjqIaUQxrI06tnum4Jygk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl
                          rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 09:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FA57, serialNumber=831942291E5F45722B56FC4A9B6C0815FDA8B993
        Validity
            Not Before: Jul 29 10:13:05 2026 GMT
            Not After : Aug  5 10:13:05 2026 GMT
        Subject: CN=6a69d231-8de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:56:9e:de:a7:af:87:8f:69:85:a9:5d:54:
                    27:ca:65:c4:9e:12:4e:ad:05:65:45:ad:15:86:67:
                    16:2c:8d:82:cd:22:31:96:e6:70:d6:60:68:6e:6e:
                    da:c9:de:42:6c:92:d4:34:a3:e6:1b:e7:f0:4a:93:
                    73:7c:00:69:25:e7:a8:50:40:84:d1:a7:c7:a7:28:
                    55:3b:3d:3e:54:fd:9f:51:21:c9:7e:11:fa:28:f5:
                    85:2a:62:04:9c:fe:bc:75:d3:74:84:b6:a9:c7:41:
                    3e:41:df:4c:6f:fc:5d:1a:10:d8:87:3b:19:c5:7d:
                    b6:48:88:a5:cd:ab:41:07:53:b0:2a:96:d9:59:3d:
                    86:8e:c6:cf:ce:b2:55:24:48:eb:66:27:c8:80:de:
                    29:14:68:d7:fe:95:3b:48:33:5b:a3:5f:80:69:23:
                    56:0c:b2:6e:ae:55:90:c3:75:3b:bf:42:44:ee:a2:
                    c3:9c:f2:c0:13:d9:40:7f:a4:9c:15:e9:0a:fe:3f:
                    1a:66:7c:d7:09:53:99:32:6d:eb:e3:36:02:8f:be:
                    87:16:7a:44:db:b9:9a:66:b4:8c:35:8a:6d:c1:ae:
                    a4:d5:32:b7:ec:a4:e2:27:a2:78:86:c2:6f:5b:8d:
                    24:9f:17:83:d0:33:6d:eb:88:b1:cd:36:72:8a:e4:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1E:6D:36:1D:61:F5:44:51:07:C8:81:15:2D:08:B5:E4:86:02:8E
            X509v3 Authority Key Identifier:
                keyid:83:19:42:29:1E:5F:45:72:2B:56:FC:4A:9B:6C:08:15:FD:A8:B9:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxlCKR5fRXIrVvxKm2wIFf2ouZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA57/8D880E523D4511F18272093AA2833773/gxlCKR5fRXIrVvxKm2wIFf2ouZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:bf:6a:52:13:0e:89:28:e0:06:dd:f4:19:3d:4f:ec:2c:
         cb:07:33:8b:1b:51:82:c1:f9:42:06:8a:ef:e3:ab:b8:fc:ad:
         0b:e6:31:c0:4c:4e:17:23:ea:12:22:54:7d:7e:fe:45:72:d3:
         24:a1:10:5c:c7:cf:92:9a:b9:72:16:ef:10:3b:a4:f9:fb:bb:
         ee:35:cb:cf:a1:ad:84:9c:5c:e4:dd:9d:58:7e:ba:68:81:1b:
         b9:dd:ad:10:74:59:0e:4d:48:a4:3b:b0:f9:70:04:8a:14:4a:
         02:9b:da:1c:12:7a:f6:e9:85:d0:ef:20:59:5b:a2:0c:bf:3c:
         6d:a5:ac:3e:c4:d3:7c:d4:f8:7a:4f:56:b9:60:23:52:2e:60:
         a3:e3:e2:c0:a0:24:8e:4a:59:48:f4:42:c6:23:d1:26:9a:a4:
         ec:3e:7b:e3:ff:d0:73:95:77:6a:bb:c9:7b:a4:dd:21:2c:5d:
         65:2f:9c:02:b0:ce:ad:42:cd:04:3b:59:12:8f:e5:d9:87:2e:
         77:9c:eb:3f:82:80:5d:72:dd:35:6c:b3:1b:dc:ab:0a:8a:9d:
         aa:de:d5:81:39:38:ff:c2:a0:3f:79:98:82:0e:8d:3a:db:ea:
         2b:80:90:b7:1a:d8:80:25:28:11:78:4b:d5:bc:15:18:20:97:
         e9:88:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:43 2026 by rpki-client