Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          UG3qIk8dbOiRm2i0Spq8o8YD/9WzXTi09t7XXVqqQYM=
Subject key identifier:   55:A8:9F:59:1D:85:73:D5:2E:D0:5F:1D:D3:54:68:41:56:65:2C:C5
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       0530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04D9
Signing time:             Mon 27 Jul 2026 00:55:37 +0000
Manifest this update:     Mon 27 Jul 2026 00:55:37 +0000
Manifest next update:     Mon 03 Aug 2026 00:55:37 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: QFXGfj6cLkxSS9VdY3XMcbdx4LbsVrI0CdRvZ+LSmxU=)
                          2: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          4: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          5: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
                          7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          8: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
                          9: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Jul 27 00:55:37 2026 GMT
            Not After : Aug  3 00:55:37 2026 GMT
        Subject: CN=6a66ac89-be52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1a:6f:6f:01:b8:a2:d0:bc:b6:f0:60:4f:a2:
                    4d:e4:76:11:f0:31:fc:5f:16:95:86:b1:1f:df:67:
                    c2:64:79:d0:23:da:2e:02:33:ee:7c:ca:d9:0c:92:
                    a2:fd:55:02:c7:b3:99:3d:42:ef:43:ae:b9:da:8e:
                    9b:d5:fd:24:db:aa:d5:b7:e3:ea:27:1b:7e:0b:ae:
                    e3:14:bd:e1:d1:c4:9f:90:74:1c:fc:25:27:ca:a7:
                    d0:43:a7:93:70:7a:e1:1e:7b:59:8c:ff:e1:eb:ec:
                    89:f6:b9:24:e6:18:d3:66:55:c3:c3:7a:0f:e7:f9:
                    89:37:7a:9c:91:20:30:e6:f8:c0:38:49:68:82:5a:
                    6d:64:22:2e:0a:64:08:fa:c5:67:6f:73:77:79:23:
                    f2:d4:a3:fb:e5:54:95:c3:f0:71:7c:aa:d8:02:97:
                    a2:7f:56:16:fb:6b:76:d5:41:84:42:ce:54:e4:ba:
                    c4:74:f9:e8:4b:dd:c5:e6:43:34:30:a8:69:2c:85:
                    ab:20:9a:d2:fd:00:64:5b:6a:18:7a:51:13:11:df:
                    72:5d:a9:a3:e3:c8:01:62:bb:83:de:a7:04:12:9e:
                    2c:74:81:81:ed:74:d6:8b:5f:28:80:4d:8b:02:13:
                    d1:80:91:a9:63:9f:50:15:0b:69:e8:47:c2:c9:25:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:9F:59:1D:85:73:D5:2E:D0:5F:1D:D3:54:68:41:56:65:2C:C5
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:3c:f5:af:6b:5c:27:24:a4:98:7c:5a:1c:59:22:e1:7f:
         dd:ae:0d:27:c9:e9:cc:97:0e:fb:3b:c1:96:0a:14:4c:13:0c:
         6b:9e:c5:ab:8a:14:22:ae:f8:d3:37:15:14:24:f5:83:f7:e7:
         a7:1f:c6:a8:d6:7a:12:bc:9c:08:21:3c:29:2d:e7:95:32:b9:
         95:d3:6e:68:24:f8:eb:da:9a:42:0a:af:28:43:9a:4a:42:d8:
         21:d4:9d:fb:b6:7a:e4:a5:16:b1:bd:b2:e3:6f:34:21:ca:5f:
         c8:cf:1c:42:d2:e9:23:aa:f1:d5:01:90:7d:cc:1b:1f:4a:62:
         b2:5b:27:76:0b:4b:66:98:99:c6:14:2d:ae:fb:94:cc:ff:a2:
         0d:76:03:bc:24:ef:51:fa:40:d8:be:7a:bc:b6:8b:ab:2f:a2:
         99:78:2a:aa:02:a0:c6:ff:dd:af:4d:a1:8d:89:6e:22:88:64:
         f3:8d:ba:5c:09:d1:69:88:82:26:b0:ae:fa:4b:e0:f0:f9:8d:
         dc:a1:8d:04:7f:8c:80:1e:3d:99:2b:81:2d:39:05:32:0c:26:
         1b:0d:66:97:42:68:b0:56:5f:af:12:5e:d5:cf:c7:d6:9c:42:
         38:4b:ae:ba:24:67:50:47:ba:9c:28:b5:73:97:cf:5c:a2:3e:
         46:9c:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:05 2026 by rpki-client