Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
File:                     GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json)
Hash identifier:          vHpAg2RCbv9M5rzCQ0bnFM/7N5l2YP7e+AHxwb/g9c0=
Subject key identifier:   D7:71:51:8F:61:8B:41:AA:16:6B:77:42:71:11:73:C3:7D:86:76:D5
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Certificate issuer:       /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial:       CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
Manifest number:          C7
Signing time:             Mon 27 Jul 2026 09:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:55 +0000
Manifest next update:     Mon 03 Aug 2026 09:00:55 +0000
Files and hashes:         1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: 5HCHf/TZc3zuhrb1AxjW/NySzH8uWUOyveskZg3aj/Q=)
                          2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: Ht+AYFRYgTia5PfBCXy1G2MKk6pS05Kn+q7rQOjqmks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
                          rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
        Validity
            Not Before: Jul 27 09:00:55 2026 GMT
            Not After : Aug  3 09:00:55 2026 GMT
        Subject: CN=6a671e47-2d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:14:b0:db:cc:6b:ce:53:70:ce:ed:7c:61:1a:
                    39:8f:71:31:09:95:5a:87:65:85:67:ba:e6:37:4c:
                    fb:ab:01:52:99:79:d6:35:72:5f:d2:51:3c:93:1e:
                    bd:5d:29:68:26:a0:9b:c1:23:ce:57:94:01:f9:6b:
                    37:7d:65:b3:cd:6d:8c:a1:f7:b6:e7:97:16:e8:2a:
                    cb:c3:6f:e3:18:40:49:07:d4:20:ad:ea:89:2f:dd:
                    27:94:37:18:b5:9a:60:98:61:19:d8:68:0d:5c:3b:
                    93:cd:fe:ea:80:a4:87:6e:6a:4a:50:2f:22:34:20:
                    0e:c5:6f:a6:8e:bc:9c:eb:41:ad:54:ca:98:2e:69:
                    b8:7c:aa:eb:73:7d:f1:01:4d:96:ae:70:01:14:36:
                    93:7f:4d:d5:51:e4:df:29:06:38:73:a9:08:40:0d:
                    99:ba:2a:87:b6:d0:47:c1:ac:ce:23:c5:ca:9b:0a:
                    44:05:79:70:96:5f:9b:ef:59:31:af:3e:25:8a:15:
                    ad:1e:80:a6:8d:48:98:d8:a6:80:42:60:22:62:31:
                    d9:13:9b:e3:e4:97:9c:13:51:59:37:12:3b:14:08:
                    24:a2:f7:82:47:fa:9e:15:a5:3f:a0:a8:95:17:e2:
                    5d:fd:06:84:6e:80:c6:ad:53:1d:6e:39:09:a6:d2:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:51:8F:61:8B:41:AA:16:6B:77:42:71:11:73:C3:7D:86:76:D5
            X509v3 Authority Key Identifier:
                keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ca:29:81:8e:0a:6b:fc:1b:27:42:88:9b:68:d7:59:93:a6:
         32:db:1c:82:d6:bd:d3:ff:96:3e:c0:d0:5b:45:90:d5:98:a5:
         28:7b:7f:ff:b4:79:23:09:78:f9:c1:5f:fa:31:9c:89:47:1d:
         5d:47:fe:83:b9:70:72:1c:74:b9:73:40:f2:8b:3a:c3:30:e8:
         23:27:2e:63:4a:25:b6:8f:aa:97:3e:bf:80:56:68:d0:c6:64:
         b5:e8:6c:25:94:99:da:e6:cc:64:44:c3:45:53:39:53:d9:a8:
         3b:47:11:39:5d:0f:95:df:1f:ad:34:ec:f1:b1:e5:d4:6f:da:
         48:44:fb:7d:6a:85:7f:55:5b:cf:0c:b5:9e:07:d5:0c:d5:6a:
         00:13:ce:66:f8:5b:a9:ef:a5:f6:7d:97:91:f3:28:9f:8f:85:
         af:51:6d:7a:71:33:c5:9a:3e:a1:8b:a2:15:27:f8:ac:d0:a1:
         9c:4d:b9:46:04:e5:20:01:af:f9:e9:1b:f1:99:55:94:b2:0d:
         8b:3b:f3:f5:54:af:86:71:0e:c2:90:5c:2d:22:92:c9:34:dd:
         ac:80:8f:72:8e:8a:fd:be:bc:6b:9e:78:43:35:76:df:f1:b9:
         cc:32:dd:98:83:38:53:1e:7d:d6:c7:3f:ba:45:dc:9e:7a:84:
         89:87:85:78
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODg0MkUxMTAvBgNVBAUTKDE5QTA0MzgxOTlGREZFMjREQ0Y4NTY2MkE0OEJEQjU3
NTFFMUI1RDkwHhcNMjYwNzI3MDkwMDU1WhcNMjYwODAzMDkwMDU1WjAYMRYwFAYD
VQQDEw02YTY3MWU0Ny0yZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhSw28xrzlNwzu18YRo5j3ExCZVah2WFZ7rmN0z7qwFSmXnWNXJf0lE8kx69
XSloJqCbwSPOV5QB+Ws3fWWzzW2Mofe255cW6CrLw2/jGEBJB9QgreqJL90nlDcY
tZpgmGEZ2GgNXDuTzf7qgKSHbmpKUC8iNCAOxW+mjryc60GtVMqYLmm4fKrrc33x
AU2WrnABFDaTf03VUeTfKQY4c6kIQA2ZuiqHttBHwazOI8XKmwpEBXlwll+b71kx
rz4lihWtHoCmjUiY2KaAQmAiYjHZE5vj5JecE1FZNxI7FAgkoveCR/qeFaU/oKiV
F+Jd/QaEboDGrVMdbjkJptIyYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdxUY9h
i0GqFmt3QnERc8N9hnbVMB8GA1UdIwQYMBaAFBmgQ4GZ/f4k3PhWYqSL21dR4bXZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODQyRS82MTk5QkQ1NDVE
RUUxMUYwOEZBQTJCNkRDNEY5QUUwMi9HYUJEZ1puOV9pVGMtRlppcEl2YlYxSGh0
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhQkRnWm45X2lUYy1GWmlwSXZiVjFIaHRkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
ODQyRS82MTk5QkQ1NDVERUUxMUYwOEZBQTJCNkRDNEY5QUUwMi9HYUJEZ1puOV9p
VGMtRlppcEl2YlYxSGh0ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAecopgY4Ka/wbJ0KIm2jXWZOmMtscgta90/+WPsDQW0WQ1ZilKHt//7R5Iwl4
+cFf+jGciUcdXUf+g7lwchx0uXNA8os6wzDoIycuY0olto+qlz6/gFZo0MZktehs
JZSZ2ubMZETDRVM5U9moO0cROV0Pld8frTTs8bHl1G/aSET7fWqFf1Vbzwy1ngfV
DNVqABPOZvhbqe+l9n2XkfMon4+Fr1FtenEzxZo+oYuiFSf4rNChnE25RgTlIAGv
+ekb8ZlVlLINizvz9VSvhnEOwpBcLSKSyTTdrICPco6K/b68a554QzV23/G5zDLd
mIM4Ux591sc/ukXcnnqEiYeFeA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:30 2026 by rpki-client