Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
File:                     GzpBGgdaXbGixkL41KG8PLW8uxw.mft (raw, json)
Hash identifier:          UXCJGws+x3OkGH0EP7h3kFZhEq6OVKZfRiNTfkIFNec=
Subject key identifier:   C6:CF:66:29:4C:87:27:F3:78:D4:BF:18:F3:28:F6:B8:75:E0:3C:A0
Authority key identifier: 1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C
Certificate issuer:       /CN=A916C3CC/serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
Manifest number:          02CD
Signing time:             Mon 27 Jul 2026 02:29:18 +0000
Manifest this update:     Mon 27 Jul 2026 02:29:17 +0000
Manifest next update:     Mon 03 Aug 2026 02:29:17 +0000
Files and hashes:         1: GzpBGgdaXbGixkL41KG8PLW8uxw.crl (hash: LWP4hPLkAJFad+Xm/CMV2azRGKSrZntI8HVUUf9gZlQ=)
                          2: F1F8A98442D811ED854B9670C4F9AE02.roa (hash: OIapcLyZFM+hQRAVWMttZwkt/KgLVw6oa519ZpxWQ4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl
                          rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C3CC, serialNumber=1B3A411A075A5DB1A2C642F8D4A1BC3CB5BCBB1C
        Validity
            Not Before: Jul 27 02:29:17 2026 GMT
            Not After : Aug  3 02:29:17 2026 GMT
        Subject: CN=6a66c27e-66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:ef:7a:6e:4a:8c:7f:97:8b:6a:7e:60:c6:
                    77:80:9b:95:ef:fc:77:ae:bc:d5:df:4d:61:9b:56:
                    29:11:a6:b0:44:77:ca:54:d8:13:88:65:20:8a:cd:
                    b8:6e:63:72:88:55:23:05:79:e7:b1:77:e7:e1:48:
                    52:eb:c6:a2:bc:71:3f:c9:b9:22:7b:64:b8:5c:c6:
                    c1:54:8d:81:4a:d0:54:cc:e9:84:47:28:eb:a2:65:
                    d0:29:f6:5b:14:89:b0:7a:ff:08:0c:18:2c:b6:6b:
                    1e:ac:8a:4c:66:fb:1c:37:41:23:33:ae:e5:20:16:
                    4c:34:a6:34:7c:62:46:b7:21:76:3e:fa:9c:56:1a:
                    ce:75:da:1c:40:39:75:15:ec:df:3f:50:73:16:5c:
                    39:82:d2:eb:59:70:c8:c1:89:bf:58:b5:c0:b8:5f:
                    2f:7d:53:e6:92:d6:2d:8c:c4:f6:a8:36:69:23:3e:
                    6f:df:2f:70:53:3c:f4:99:c1:d7:6f:a6:68:f6:f5:
                    29:fe:62:e5:f7:a2:6c:ec:03:96:85:f9:ee:6e:56:
                    13:fc:04:b1:b0:a7:b3:15:10:cf:ce:cf:c3:35:9b:
                    e2:50:d5:ba:69:60:0a:01:fa:77:19:06:89:82:00:
                    b4:0f:10:35:c0:68:19:2b:eb:23:9d:5b:58:24:af:
                    7e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CF:66:29:4C:87:27:F3:78:D4:BF:18:F3:28:F6:B8:75:E0:3C:A0
            X509v3 Authority Key Identifier:
                keyid:1B:3A:41:1A:07:5A:5D:B1:A2:C6:42:F8:D4:A1:BC:3C:B5:BC:BB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzpBGgdaXbGixkL41KG8PLW8uxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C3CC/4A14740442D411EDA1260E6AC4F9AE02/GzpBGgdaXbGixkL41KG8PLW8uxw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:05:86:ed:36:ed:cc:cb:c0:e8:e3:2a:f7:51:99:c8:be:9c:
         06:d5:c7:00:64:7b:c4:b8:fe:d6:5a:c0:0d:f1:0f:a5:7d:fa:
         b1:c3:40:53:23:a4:ff:e7:4d:88:74:61:70:df:02:a2:66:6d:
         43:c8:02:04:86:9c:92:b9:79:5a:f7:7b:b9:4e:e0:fa:9a:d1:
         b6:30:d1:8e:f0:72:f4:ad:7a:ee:f6:3b:b2:8e:b9:78:8b:71:
         46:45:46:50:55:7d:18:30:c7:29:70:7f:ad:18:f9:46:e0:e4:
         f3:b0:ad:fb:a8:52:d8:f6:75:d5:f5:aa:f5:3a:c1:4e:51:d3:
         89:b0:47:6e:15:39:0c:91:3e:4b:4d:41:84:99:14:35:4a:a0:
         7b:23:4f:61:86:e0:15:d1:34:b7:80:41:76:9b:77:0e:89:01:
         15:16:34:a4:ac:7d:d9:c1:d4:81:e2:2b:c4:d9:9e:a5:e4:9d:
         90:67:46:78:5c:c5:20:06:e8:2d:ea:a2:06:67:1f:e2:d4:4c:
         40:e4:42:be:b5:a6:3c:8c:90:4d:c7:a7:a5:10:9c:d3:54:c2:
         48:d1:3f:99:a3:5d:93:39:01:b6:02:cb:e6:9b:e3:e6:58:9a:
         a5:ba:44:c7:f1:a1:ad:f7:30:b6:a9:0f:52:0a:c0:e1:0a:cd:
         8f:c1:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:55 2026 by rpki-client