Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
File:                     gaZX6qx1VMq3oaKI9bP-7dilzEs.mft (raw, json)
Hash identifier:          0TmjWfVZsiMUeMwZuU1tMVI4iuhhLKh5SfUUNulmB8Y=
Subject key identifier:   ED:DE:37:79:B8:E5:FA:8C:18:48:95:C9:6A:48:33:24:65:FC:4C:CE
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Certificate issuer:       /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
Manifest number:          CE
Signing time:             Mon 27 Jul 2026 06:07:19 +0000
Manifest this update:     Mon 27 Jul 2026 06:07:18 +0000
Manifest next update:     Mon 03 Aug 2026 06:07:18 +0000
Files and hashes:         1: gaZX6qx1VMq3oaKI9bP-7dilzEs.crl (hash: w31XdV0GULRqXkgj9NYq9o7ZKtC/9nnOMwlBRozrigM=)
                          2: A78653B2561F11F09624D128C4F9AE02.roa (hash: tZlTWUfKWexoieRyMVExBKlmUH5v/oDQJXIDDrcReSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
        Validity
            Not Before: Jul 27 06:07:18 2026 GMT
            Not After : Aug  3 06:07:18 2026 GMT
        Subject: CN=6a66f596-b937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:50:67:23:81:21:99:47:3d:ac:a4:78:61:
                    fb:b0:7d:ee:cc:5d:c5:64:2d:1f:0c:25:b1:86:15:
                    4f:b1:3f:fb:c8:97:8a:39:f6:50:1c:cc:02:96:42:
                    2a:90:a3:6e:7a:a8:81:9a:12:a6:50:ad:59:2d:da:
                    11:38:e8:78:bc:a6:83:66:76:37:8e:06:7d:6d:ba:
                    0c:25:fe:57:d6:11:c4:e7:bc:05:c5:ec:4c:10:8a:
                    c2:44:39:b4:d8:88:35:56:33:a0:f6:cb:55:9d:e1:
                    a7:85:f2:d4:80:5a:4a:59:1e:98:96:8b:8d:eb:b5:
                    c2:a7:dc:a2:02:1b:05:f1:a7:8e:40:48:38:14:61:
                    5f:f2:73:d1:5a:5e:66:23:55:38:ec:7c:b7:b2:ae:
                    1a:b0:d9:0d:d6:ef:27:eb:af:c9:6b:f1:64:06:b5:
                    18:38:47:13:e2:f0:7f:f7:9e:f6:78:84:73:69:73:
                    ac:cb:ee:19:d1:45:8c:1d:47:06:b9:1f:97:0b:0d:
                    51:b4:9c:cb:9e:97:1b:d2:d9:c3:66:bb:fd:84:50:
                    fc:87:2a:da:e6:81:9f:9a:0b:ff:3c:03:9e:2d:a1:
                    79:9b:ec:be:07:5d:22:2a:d4:f5:af:52:22:31:15:
                    24:ab:80:c2:4b:97:2b:0f:5f:94:65:fd:a6:c7:79:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:37:79:B8:E5:FA:8C:18:48:95:C9:6A:48:33:24:65:FC:4C:CE
            X509v3 Authority Key Identifier:
                keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:5b:6a:13:f2:3b:c5:9e:df:ca:1a:ad:c9:59:21:48:83:12:
         94:c5:b4:74:3a:32:51:fe:3d:1f:c1:2c:67:0c:f6:98:13:8a:
         de:19:0e:b4:d7:86:a5:37:0a:05:7c:f5:94:ea:bf:38:fb:48:
         da:2a:0a:c0:10:c2:98:67:fe:9f:38:87:9c:94:2f:06:d0:7b:
         55:bd:ae:df:8c:23:e7:2b:62:34:ad:2e:73:a2:85:1c:e6:18:
         26:a5:b9:ec:a6:a2:aa:cf:35:a0:48:ad:71:ad:ab:4f:a2:c9:
         00:e6:04:9f:29:db:35:19:e9:50:2c:50:93:3d:f1:a9:07:b9:
         67:ba:4f:d4:cb:9d:0e:08:35:a9:d3:f0:a1:b6:db:6e:5f:d0:
         40:0f:ec:0d:c5:a1:ae:e7:4f:00:15:06:d8:1d:89:66:8f:d8:
         00:cb:4e:cb:b4:08:73:66:02:d8:db:2f:09:ce:ea:42:a7:46:
         68:49:02:bc:cf:9b:ed:46:11:65:f6:4f:32:c7:e5:e8:64:52:
         06:f1:b9:49:6f:b9:df:45:67:98:ef:2a:3d:b0:d9:41:89:95:
         45:76:13:56:62:4d:d7:f4:97:b2:bd:6c:64:a2:66:d9:ac:75:
         da:03:5c:ca:81:2a:83:f4:0d:51:7c:fc:5f:7a:ad:c0:e4:8b:
         38:69:a1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:43 2026 by rpki-client