Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
File:                     gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft (raw, json)
Hash identifier:          ZRWWL+pVzIfbZBQdN2CWkjqgx9OzYJSGK0Ir6mAjcW4=
Subject key identifier:   D2:9C:BD:82:EB:E1:59:AF:D5:73:78:19:A4:62:85:81:F5:2C:82:68
Authority key identifier: 81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B
Certificate issuer:       /CN=A9160602/serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
Certificate serial:       0289
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
Manifest number:          0282
Signing time:             Mon 27 Jul 2026 03:12:33 +0000
Manifest this update:     Mon 27 Jul 2026 03:12:33 +0000
Manifest next update:     Mon 03 Aug 2026 03:12:33 +0000
Files and hashes:         1: gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl (hash: Hp09YrPuY42I9Ltnfne7O0VS3lhtlZsVrcGBK7qtdaA=)
                          2: 2DF8935CAFB411ED8D33ED1FC4F9AE02.roa (hash: +5NtTIbwxadnHyBDEpFgjHeGeTXoY+U2ZLT+JTTuGQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl
                          rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160602, serialNumber=818359BCA0F673B7816003FBB89B6537A948075B
        Validity
            Not Before: Jul 27 03:12:33 2026 GMT
            Not After : Aug  3 03:12:33 2026 GMT
        Subject: CN=6a66cca1-bb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:06:79:61:6d:79:dd:40:02:d6:47:70:77:
                    87:9b:4e:08:db:ca:4c:8f:65:7f:0a:99:a4:e6:5b:
                    25:d7:52:68:60:28:f4:53:1b:fe:59:9d:d9:aa:79:
                    96:07:9d:e2:d2:55:47:48:93:48:b2:97:98:ff:d5:
                    62:a6:35:46:4c:81:7b:9b:7b:dd:e5:93:87:ba:72:
                    75:71:af:ff:8e:ca:10:ea:c3:03:b6:9f:15:8d:d2:
                    e8:4f:40:b7:95:41:57:50:08:71:49:7a:b9:ed:13:
                    f7:6f:4c:14:bb:bf:5d:0d:d3:91:d1:90:f3:e9:fb:
                    20:fb:cb:fa:41:df:ed:8a:d6:66:1e:fa:16:2a:b4:
                    d8:e2:05:2c:3d:01:4e:59:1b:42:c0:23:36:10:ed:
                    a2:87:96:42:31:20:f3:07:c1:6e:fe:e2:43:2c:57:
                    c5:bd:39:e1:7f:5a:6b:b0:aa:72:6d:df:8e:58:fd:
                    82:43:9f:bf:6d:87:7b:d9:eb:6d:92:86:4c:f7:2a:
                    01:19:71:b0:07:f7:28:53:b3:35:b8:33:1e:7a:65:
                    cf:54:3b:11:45:2c:d3:81:bc:4a:65:56:c5:2c:ca:
                    d9:3d:21:07:85:8e:82:5c:c6:5a:42:50:75:51:bf:
                    b3:1d:d0:0f:91:a1:a8:0e:12:8f:c3:ff:27:63:b9:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9C:BD:82:EB:E1:59:AF:D5:73:78:19:A4:62:85:81:F5:2C:82:68
            X509v3 Authority Key Identifier:
                keyid:81:83:59:BC:A0:F6:73:B7:81:60:03:FB:B8:9B:65:37:A9:48:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYNZvKD2c7eBYAP7uJtlN6lIB1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160602/FBCC897CAFB011EDB2F2041BC4F9AE02/gYNZvKD2c7eBYAP7uJtlN6lIB1s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:fa:8f:00:8e:83:ea:0e:63:f6:40:a4:73:05:9a:64:54:
         48:71:a5:1b:23:97:fc:e2:65:02:6b:ed:3d:63:d8:00:17:8a:
         36:a6:23:9c:68:28:e1:27:e4:75:57:f4:4b:82:65:08:fb:4a:
         71:b1:66:e9:42:8c:a6:39:28:ed:40:cc:b9:ee:c3:6a:eb:41:
         bc:90:5c:2b:73:63:60:e5:c5:ad:05:04:6e:ad:3a:05:4e:8d:
         0c:55:83:b4:ac:84:a8:5e:88:61:54:34:a6:cc:86:0a:a1:28:
         a7:5b:34:3e:c8:f2:d1:1d:fe:fa:00:14:10:38:35:96:64:58:
         c7:59:38:4c:a8:49:76:cc:27:3c:5b:e5:63:62:46:4b:08:44:
         2e:09:21:1a:14:2d:fd:1a:0d:fd:f7:77:ab:0d:7a:24:3f:a4:
         8b:13:4b:39:6d:87:e9:6e:e1:1b:27:47:b5:a2:00:ea:4d:11:
         6b:20:5a:9b:3a:84:85:f4:72:5d:bf:95:57:ab:63:0c:26:b3:
         e1:0c:0f:cf:07:79:79:96:18:e6:de:9b:ae:dd:ac:48:b1:8c:
         6a:d8:88:43:a8:36:a6:79:1f:9b:80:46:8c:9f:26:98:fc:56:
         c9:70:db:94:4d:95:f1:cc:fc:01:dc:f2:39:4c:5c:c7:fc:74:
         8d:c5:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:15 2026 by rpki-client