Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
File:                     GRFX6ZVM7IiQxhjMBybwB06RDio.mft (raw, json)
Hash identifier:          +8zeWGIJH4BV3L3EcKfh4ckeFTYLoh0+x53mywSKbnI=
Subject key identifier:   BB:D1:07:68:A8:CF:54:39:88:57:61:19:EA:18:2A:A0:F2:2B:5C:E7
Authority key identifier: 19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A
Certificate issuer:       /CN=A916FA49/serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
Certificate serial:       15A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
Manifest number:          1597
Signing time:             Mon 27 Jul 2026 07:10:52 +0000
Manifest this update:     Mon 27 Jul 2026 07:10:51 +0000
Manifest next update:     Mon 03 Aug 2026 07:10:51 +0000
Files and hashes:         1: GRFX6ZVM7IiQxhjMBybwB06RDio.crl (hash: /Y0qu/RmHKgH5opRIuFyItsto9gSEW+lj5kS1rw8r5k=)
                          2: bhWGfk3q90_CSqK6l-lcC9hV2X8.asa (hash: VbjNJyebUy1OXBd0XLl+rJs17wRiHqgllNz0GJHm4kw=)
                          3: 0448C04E5CC211E8AC07E63AC4F9AE02.roa (hash: x7YXjzD8EFzf7N4rbQoqJB4eYFt5aSsAHJp7OOa/HsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl
                          rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5542 (0x15a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916FA49, serialNumber=191157E9954CEC8890C618CC0726F0074E910E2A
        Validity
            Not Before: Jul 27 07:10:51 2026 GMT
            Not After : Aug  3 07:10:51 2026 GMT
        Subject: CN=6a67047c-66f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:85:4c:9d:fe:b9:b5:66:91:bb:9e:db:5b:dd:
                    9c:ec:17:b1:7e:ca:e2:6b:1a:15:3a:a0:e4:03:39:
                    3e:22:ac:12:91:1c:54:65:12:4e:7f:ee:2d:ff:35:
                    21:03:e9:cd:cf:3d:7f:9f:9b:73:6b:91:9f:5b:30:
                    92:b4:5d:cd:2a:58:fc:30:58:bb:ca:e1:31:c1:00:
                    61:a4:4b:d7:27:48:8b:47:4c:6f:4f:87:15:17:f5:
                    9c:ff:7b:5a:cc:f4:e3:92:59:e0:84:46:32:70:22:
                    3f:e2:a8:d5:e6:f0:88:a9:3a:08:ea:f1:90:0c:73:
                    00:9a:ed:44:53:88:78:b9:73:65:bf:41:3e:8f:f3:
                    fc:70:0e:2e:b0:21:00:23:89:7e:f6:88:c5:d8:a5:
                    ce:dc:3b:71:26:02:96:12:45:f4:bb:5e:69:1e:e2:
                    02:26:30:41:ae:9f:a6:dd:b6:e5:6b:c4:d5:df:fd:
                    60:f7:16:58:63:31:47:23:88:36:d9:fd:9e:a1:6b:
                    7d:02:d8:7f:07:f3:1e:04:9e:fb:0f:fe:33:36:54:
                    e4:00:b6:ae:c5:ff:79:00:7b:0c:21:af:a8:2e:82:
                    26:cd:ee:7a:6d:8c:61:69:58:96:2f:76:b2:64:af:
                    22:6e:b1:b8:d5:1a:44:0c:4f:07:2e:47:94:dd:23:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:07:68:A8:CF:54:39:88:57:61:19:EA:18:2A:A0:F2:2B:5C:E7
            X509v3 Authority Key Identifier:
                keyid:19:11:57:E9:95:4C:EC:88:90:C6:18:CC:07:26:F0:07:4E:91:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GRFX6ZVM7IiQxhjMBybwB06RDio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA49/702D81245CC111E89A36B837C4F9AE02/GRFX6ZVM7IiQxhjMBybwB06RDio.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:8b:98:05:45:7c:8d:b9:38:54:18:11:a6:49:77:ce:f5:
         ce:56:b6:28:f4:ea:69:f0:32:f8:7a:18:50:db:ae:50:f5:77:
         1d:f8:3f:0e:81:55:2b:d8:6f:81:8c:24:ae:4e:51:f5:f3:97:
         01:04:22:b7:c3:40:10:ba:7d:54:30:51:be:f5:14:7a:4f:6a:
         d0:7f:95:32:37:d1:c4:8b:dc:90:cd:ef:20:6f:67:a6:98:d6:
         ef:a2:12:7a:c0:c3:2c:07:77:1b:36:b2:69:3c:a4:6d:e5:e4:
         f4:b9:8c:a6:9b:da:fe:74:92:c0:81:b7:82:b7:20:da:02:24:
         a9:c2:fc:6e:52:51:9b:a2:6c:44:65:70:4c:47:56:8e:01:fd:
         a0:6f:d3:00:ed:a8:3e:d9:de:44:8c:eb:a4:d5:67:c9:ae:8a:
         86:70:0c:0e:c3:8b:82:8a:22:d1:1a:4e:76:3b:f5:16:07:3e:
         be:4f:7e:14:85:62:2c:9b:d8:56:cb:23:c6:49:26:dc:b2:1c:
         64:c6:cf:7f:c0:01:26:fa:14:87:11:3d:70:aa:43:d7:05:ee:
         c7:e5:cc:6f:47:fe:16:8b:32:73:eb:8a:bd:e1:31:c1:21:7b:
         74:d9:e7:6b:74:5d:d1:50:95:81:05:81:6d:a1:ec:23:fe:02:
         4c:19:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:59 2026 by rpki-client