Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
File:                     GyXsWdB_k0JLkMItNOyrIq2FKpc.mft (raw, json)
Hash identifier:          HLxugBvzVyEqeMrx3mg5B0TNECaRNWME55/fH+NDUMo=
Subject key identifier:   66:37:CC:95:17:05:DB:EE:D3:84:F9:BC:C7:46:69:D2:8A:86:90:89
Authority key identifier: 1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97
Certificate issuer:       /CN=A91886EA/serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
Certificate serial:       02B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
Manifest number:          02AE
Signing time:             Mon 27 Jul 2026 02:47:36 +0000
Manifest this update:     Mon 27 Jul 2026 02:47:35 +0000
Manifest next update:     Mon 03 Aug 2026 02:47:35 +0000
Files and hashes:         1: GyXsWdB_k0JLkMItNOyrIq2FKpc.crl (hash: Ujvbseb4E2JjZm/sM7QOaKH6zj0n1vZy7pQirtO01es=)
                          2: 790195326F6411ED83BC230FC4F9AE02.roa (hash: d195UYb4Ma776b6MiFJV4Wd3T3+N6fZWCyC5k9KeQyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl
                          rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886EA, serialNumber=1B25EC59D07F93424B90C22D34ECAB22AD852A97
        Validity
            Not Before: Jul 27 02:47:35 2026 GMT
            Not After : Aug  3 02:47:35 2026 GMT
        Subject: CN=6a66c6c8-215d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:03:41:a0:09:79:c5:de:f6:02:18:51:bc:
                    60:cd:c3:23:ca:78:ce:d6:1f:f8:5f:d2:53:22:2f:
                    a4:fe:28:ff:8c:2f:a6:76:82:f3:5b:1a:ba:44:69:
                    c7:ee:9f:3c:f6:09:53:48:4c:93:5a:02:1c:43:e8:
                    fa:6d:84:b8:24:63:61:c9:e1:bc:56:b9:52:83:6e:
                    99:78:ae:de:36:a9:b7:2f:e7:90:78:3d:ed:9d:1f:
                    3b:ab:30:89:52:f7:e8:d3:c7:87:c1:67:90:39:68:
                    60:a1:0d:86:b9:d9:5e:1d:a6:38:34:00:ff:1a:f9:
                    cc:07:45:50:2b:c0:33:1b:93:0e:03:f0:fa:0c:85:
                    7e:06:e5:73:29:54:25:b7:01:bb:22:a4:3e:ee:b7:
                    17:1c:f6:8c:ec:73:fa:6f:30:42:61:8c:01:97:cf:
                    68:a8:2e:d2:b1:7a:06:f6:46:c2:1f:0f:9f:66:1b:
                    c6:22:90:58:7b:3a:c5:c3:ca:48:a2:d7:f9:34:a3:
                    f2:10:78:32:62:60:c8:2f:2d:39:3b:76:ce:ae:25:
                    a7:9c:dd:c2:bf:dc:36:57:ac:97:f1:e9:e8:e5:06:
                    0a:8c:8c:0e:69:87:93:15:75:c0:25:8e:c8:3c:ed:
                    d6:59:09:d2:09:8f:c2:a6:5c:6a:99:2c:ac:54:a4:
                    0c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:CC:95:17:05:DB:EE:D3:84:F9:BC:C7:46:69:D2:8A:86:90:89
            X509v3 Authority Key Identifier:
                keyid:1B:25:EC:59:D0:7F:93:42:4B:90:C2:2D:34:EC:AB:22:AD:85:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GyXsWdB_k0JLkMItNOyrIq2FKpc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886EA/529884E06F6011EDA5FFFF09C4F9AE02/GyXsWdB_k0JLkMItNOyrIq2FKpc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:f0:06:8d:33:2d:45:b0:40:1c:37:3f:b0:27:f6:0b:ab:
         1b:44:87:5a:09:85:aa:4b:8e:7c:54:31:fe:e6:89:85:6f:43:
         8f:1c:d1:3f:fe:6f:c1:44:12:81:e7:30:15:2e:2b:14:44:1d:
         71:9b:dc:2a:b2:a1:de:70:ec:11:24:dc:a9:8d:fe:8a:6a:16:
         c4:a8:d3:c3:2a:6d:b1:22:d8:08:e2:db:bf:f9:09:02:e4:f8:
         72:02:d1:59:ac:38:bb:d7:40:ff:47:53:29:6b:5d:0e:08:f5:
         eb:9f:37:5c:11:92:b4:f6:48:44:69:df:1e:99:c2:21:87:cf:
         fb:d3:0a:c8:28:3b:0c:e8:f8:29:6e:3e:8d:57:d2:78:73:ae:
         70:16:9f:99:b6:b4:78:c4:06:23:21:61:28:62:60:90:e9:28:
         f8:db:dd:53:60:fd:62:64:05:fd:18:47:ab:0c:2f:04:44:72:
         83:c1:aa:74:53:8d:f8:ac:c5:9e:ed:ca:42:14:2d:b4:3e:17:
         2f:cd:0d:b9:cd:67:61:0b:a5:cf:17:be:88:f2:7b:1c:f8:4e:
         a9:a2:35:66:b6:a6:72:ab:59:bf:06:45:64:64:af:d6:fe:39:
         f6:29:ab:ea:e4:21:2b:bb:05:2c:a4:f0:76:6c:5d:0b:39:47:
         3c:9c:ea:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:57 2026 by rpki-client