Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
File:                     gxqJE23hJ6AKadPgb9DTcX986Zo.mft (raw, json)
Hash identifier:          LbwZeIgwfbqhc+lu8C0D0BCxWr6TtnnCrz6caE5uyUE=
Subject key identifier:   BF:D0:75:D7:D5:46:C0:45:BD:F1:E7:03:13:6C:CA:B4:E6:86:9A:60
Authority key identifier: 83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A
Certificate issuer:       /CN=A9175964/serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
Manifest number:          0170
Signing time:             Mon 27 Jul 2026 06:37:23 +0000
Manifest this update:     Mon 27 Jul 2026 06:37:22 +0000
Manifest next update:     Mon 03 Aug 2026 06:37:22 +0000
Files and hashes:         1: gxqJE23hJ6AKadPgb9DTcX986Zo.crl (hash: 6VnOws8rv5IVm41NhgsvJoRTfc9xaQfVy2MHEr8RY30=)
                          2: ECF347EC790211F0AEB6EC56C4F9AE02.roa (hash: E21PsZKvqAxQMcepIY2F6xG6o5K8GOgDKy3j1+9uS6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=831A89136DE127A00A69D3E06FD0D3717F7CE99A
        Validity
            Not Before: Jul 27 06:37:22 2026 GMT
            Not After : Aug  3 06:37:22 2026 GMT
        Subject: CN=6a66fca3-9060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:53:55:5f:79:80:d7:6f:32:fb:6a:4b:55:
                    17:96:b6:f6:78:74:9f:a7:2a:07:a4:74:7f:6d:cb:
                    d3:2a:42:da:20:a8:4f:95:cd:1c:04:75:64:a7:7d:
                    d5:38:5a:ac:14:8e:11:a4:df:a6:90:64:34:0a:55:
                    c0:e5:c5:88:e1:77:e0:7b:a9:e8:35:1f:dd:36:2e:
                    57:c7:87:49:45:cd:39:ad:51:9f:37:6d:17:74:b4:
                    48:ee:e9:a3:ac:4b:f0:2e:95:c2:4c:bf:71:59:1a:
                    53:cd:6d:f2:d8:a4:76:54:05:16:6d:91:1c:d5:79:
                    8e:fb:f3:85:5b:dc:6b:4a:b5:61:51:61:4f:65:98:
                    cb:ff:f1:6b:7e:79:47:8c:f0:a1:84:5d:31:54:7f:
                    3e:2d:32:c6:5e:0d:09:d9:54:8b:f5:2d:a8:57:cd:
                    fe:91:b3:bd:90:e8:72:85:2a:03:94:e8:ec:87:fe:
                    5c:8b:03:f6:f1:71:c2:84:60:07:4e:e3:c3:ea:6c:
                    24:32:0f:60:e3:53:5b:c5:87:5d:b3:ab:b7:e8:90:
                    98:de:07:d4:fb:41:40:cd:8a:c3:83:ac:51:8d:54:
                    83:d3:87:16:b8:46:ba:0a:df:bc:4f:f0:bd:7e:5a:
                    09:a9:e8:53:74:42:02:fd:0e:94:63:41:78:2b:2b:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D0:75:D7:D5:46:C0:45:BD:F1:E7:03:13:6C:CA:B4:E6:86:9A:60
            X509v3 Authority Key Identifier:
                keyid:83:1A:89:13:6D:E1:27:A0:0A:69:D3:E0:6F:D0:D3:71:7F:7C:E9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gxqJE23hJ6AKadPgb9DTcX986Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/FD3E389E5B1411EFAC974461C4F9AE02/gxqJE23hJ6AKadPgb9DTcX986Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:69:86:25:ea:68:6c:61:dc:3b:89:81:02:32:cd:55:7c:1e:
         c1:8a:37:4e:f4:8e:aa:1a:dd:6b:57:d5:a1:a9:26:f2:99:14:
         1a:60:b2:12:f5:7b:88:a5:53:cf:96:90:c7:46:1f:21:bc:40:
         2e:53:59:74:84:93:f2:4a:7d:9c:7d:56:83:be:b5:b0:1c:39:
         56:e6:84:86:72:e8:68:74:fc:48:a9:d9:4b:1d:07:89:55:7d:
         82:9b:04:02:04:0e:62:c8:42:82:0b:ef:c2:97:e5:38:d5:78:
         a2:f3:59:ac:4c:e1:1e:ad:57:4c:6c:5c:2f:1e:fa:4c:ae:cc:
         4d:3b:8e:f6:d6:fd:f7:bd:96:57:01:b2:66:d7:df:8d:92:53:
         16:23:09:0c:31:0f:7a:e7:28:e0:70:6a:00:7f:d1:29:41:81:
         42:91:66:86:e2:3a:66:04:8e:a8:51:c3:40:e6:7e:6a:0d:7a:
         63:87:56:1b:21:73:00:31:c2:e0:90:e2:af:c1:7a:01:d2:f3:
         37:ac:da:55:f8:b5:47:d9:6b:e6:85:90:d7:ff:79:39:c8:32:
         e3:64:e6:99:4a:34:0d:4c:31:17:59:1f:0e:64:ad:42:12:ca:
         87:28:81:ac:43:61:67:bd:d8:3b:67:30:0e:38:43:d1:ba:e1:
         c4:1f:fb:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU5NjQxMTAvBgNVBAUTKDgzMUE4OTEzNkRFMTI3QTAwQTY5RDNFMDZGRDBEMzcx
N0Y3Q0U5OUEwHhcNMjYwNzI3MDYzNzIyWhcNMjYwODAzMDYzNzIyWjAYMRYwFAYD
VQQDEw02YTY2ZmNhMy05MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzyNTVV95gNdvMvtqS1UXlrb2eHSfpyoHpHR/bcvTKkLaIKhPlc0cBHVkp33V
OFqsFI4RpN+mkGQ0ClXA5cWI4Xfge6noNR/dNi5Xx4dJRc05rVGfN20XdLRI7umj
rEvwLpXCTL9xWRpTzW3y2KR2VAUWbZEc1XmO+/OFW9xrSrVhUWFPZZjL//FrfnlH
jPChhF0xVH8+LTLGXg0J2VSL9S2oV83+kbO9kOhyhSoDlOjsh/5ciwP28XHChGAH
TuPD6mwkMg9g41NbxYdds6u36JCY3gfU+0FAzYrDg6xRjVSD04cWuEa6Ct+8T/C9
floJqehTdEIC/Q6UY0F4Kyu0rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/QddfV
RsBFvfHnAxNsyrTmhppgMB8GA1UdIwQYMBaAFIMaiRNt4SegCmnT4G/Q03F/fOma
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GRDNFMzg5RTVC
MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2QUthZFBnYjlEVGNYOTg2
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d4cUpFMjNoSjZBS2FkUGdiOURUY1g5ODZaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTk2NC9GRDNFMzg5RTVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9neHFKRTIzaEo2
QUthZFBnYjlEVGNYOTg2Wm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlmmGJepobGHcO4mBAjLNVXwewYo3TvSOqhrda1fVoakm8pkUGmCyEvV7iKVT
z5aQx0YfIbxALlNZdIST8kp9nH1Wg761sBw5VuaEhnLoaHT8SKnZSx0HiVV9gpsE
AgQOYshCggvvwpflONV4ovNZrEzhHq1XTGxcLx76TK7MTTuO9tb9972WVwGyZtff
jZJTFiMJDDEPeuco4HBqAH/RKUGBQpFmhuI6ZgSOqFHDQOZ+ag16Y4dWGyFzADHC
4JDir8F6AdLzN6zaVfi1R9lr5oWQ1/95Ocgy42TmmUo0DUwxF1kfDmStQhLKhyiB
rENhZ73YO2cwDjhD0brhxB/7OQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:52 2026 by rpki-client