Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File:                     GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier:          qd5smu2/jLd4PE26Fa4BVBt5dkUnIxhzHQ8kJedxvJA=
Subject key identifier:   7A:26:7F:6B:67:6E:2F:20:8F:82:30:C6:32:A2:B3:5C:BF:4F:6D:2A
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer:       /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial:       1EF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number:          1EE5
Signing time:             Tue 28 Jul 2026 16:07:32 +0000
Manifest this update:     Tue 28 Jul 2026 16:07:31 +0000
Manifest next update:     Tue 04 Aug 2026 16:07:31 +0000
Files and hashes:         1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: vlniWWl0ssArJ5CfAg18nIK+Txs3oPOGnFCVR0eV3Oo=)
                          2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: eTQyUMylY0vGU3HeddrGwU7l9VqbceQVt15/3Mvk3cQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7924 (0x1ef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
        Validity
            Not Before: Jul 28 16:07:31 2026 GMT
            Not After : Aug  4 16:07:31 2026 GMT
        Subject: CN=6a68d3c4-d910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:0b:7f:2c:70:27:57:03:c9:71:7f:43:19:
                    02:0a:c8:d3:7a:16:b1:8e:bd:71:fb:ad:d3:b0:ff:
                    c0:34:f8:58:db:40:c4:45:a9:55:39:b7:e8:80:78:
                    2f:89:90:ef:39:fb:d3:26:22:59:cf:79:87:cf:77:
                    f1:b1:a0:0e:0b:76:1b:aa:ea:71:7c:41:d0:45:be:
                    5a:ac:c5:27:fc:81:c2:8c:f6:3d:a7:d4:bc:b1:44:
                    6b:c2:b5:ec:0b:cf:a8:62:45:a2:4c:ac:be:30:9f:
                    e1:90:dd:e3:a5:09:fe:5d:6f:33:0c:20:f5:b5:d8:
                    54:61:e4:5b:4c:74:ac:80:5b:ee:e5:9f:6f:fa:b8:
                    24:67:7f:c9:b6:a9:f2:90:7e:c8:1c:05:d5:a6:ac:
                    5f:47:2b:49:6a:d5:fa:a3:44:d3:5b:d7:17:29:19:
                    8b:ce:80:fa:08:85:e2:da:c1:e6:d2:12:35:92:02:
                    67:6a:08:a5:d5:0b:e9:53:66:4c:fc:00:38:3b:cc:
                    bc:c7:4d:27:1c:fc:95:98:c5:be:e4:67:d6:42:da:
                    b4:5b:00:d5:86:fb:44:f4:2f:24:15:79:5f:98:cc:
                    24:46:0d:96:e2:ec:43:14:a5:88:6c:b5:67:55:34:
                    86:64:c9:50:e8:df:4b:98:03:b6:76:53:63:36:2e:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:26:7F:6B:67:6E:2F:20:8F:82:30:C6:32:A2:B3:5C:BF:4F:6D:2A
            X509v3 Authority Key Identifier:
                keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:77:86:81:2f:20:62:a6:7c:72:62:81:6a:42:a1:33:42:
         5d:6e:0f:f8:ba:a6:01:d3:26:cc:55:e4:38:f4:07:e2:42:d3:
         c5:ee:d0:8f:a8:9f:81:40:66:0e:b5:ca:40:25:8b:5e:c6:26:
         a5:6d:5b:91:cb:69:e1:56:9f:05:e2:a4:e3:6c:53:95:91:3f:
         02:1e:c5:bc:95:d9:ac:1b:f5:1f:dd:d4:41:a8:a0:97:04:56:
         3b:41:63:0b:6b:fe:c5:56:ae:39:75:74:08:3a:4b:00:62:60:
         45:c1:66:0a:75:ef:02:0b:15:f9:32:65:d5:ee:86:90:86:36:
         04:9c:47:0d:bc:31:85:c4:f2:fe:bc:00:f3:05:5b:8f:f2:fe:
         98:c4:ec:0f:c4:27:e6:f4:07:9c:0e:2f:88:96:f2:07:ab:7a:
         40:d8:88:bc:4a:b6:f9:f9:23:52:42:12:74:fb:6c:8f:fd:68:
         44:61:9b:55:4f:f9:f8:c9:46:f9:c5:66:95:25:fc:d8:51:7b:
         8b:d6:45:f6:48:3f:9b:70:d7:89:ba:ca:e2:59:48:bb:72:2e:
         ec:74:14:3b:89:8b:4e:37:b5:90:85:28:d0:c2:fa:8c:24:84:
         52:77:32:cc:b1:f7:c1:04:2a:86:cf:b8:f3:4c:97:6f:88:70:
         36:71:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:00:35 2026 by rpki-client