Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File:                     gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier:          0LvrsThGx64wzDOBVLrR+hF4MkCGKv6kTBEi2jDcqr4=
Subject key identifier:   BF:35:F0:8C:0A:1E:CB:7F:44:53:29:2A:01:E0:51:7C:92:F8:24:19
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer:       /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number:          0142
Signing time:             Wed 29 Jul 2026 06:48:34 +0000
Manifest this update:     Wed 29 Jul 2026 06:48:34 +0000
Manifest next update:     Wed 05 Aug 2026 06:48:34 +0000
Files and hashes:         1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: x0oQVhXYvH7UsFfFw+UwIuJFQbdzB/v0+qPkE249shc=)
                          2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: fKB1wROuPCiOAs2iiH8T0iD/fbxHacro6VdzGc7766Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 06:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
        Validity
            Not Before: Jul 29 06:48:34 2026 GMT
            Not After : Aug  5 06:48:34 2026 GMT
        Subject: CN=6a69a242-6b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:37:40:19:ce:be:dc:7e:dc:ae:78:dc:0a:
                    d5:74:c0:4e:99:27:9f:54:ae:fc:44:a1:6e:cb:d0:
                    09:6c:2d:7b:bd:71:1d:25:8e:0f:7b:22:59:86:0e:
                    38:3d:29:05:8b:b3:00:96:75:4c:80:c0:ae:b6:78:
                    f6:68:cf:93:93:35:64:2f:66:67:87:36:43:9b:af:
                    85:3e:1f:08:96:9c:3d:b0:91:2e:af:56:7c:82:3e:
                    aa:03:26:5b:b1:b5:53:79:a1:8a:bc:7d:c0:dd:a9:
                    1f:af:00:c7:67:18:dc:0e:29:64:79:fc:00:ef:0f:
                    04:22:51:c9:25:5e:a4:4e:3c:6a:24:c3:be:87:6b:
                    eb:ca:88:06:ce:08:f7:07:ac:ac:41:35:37:1b:5e:
                    ed:70:13:23:fb:2e:52:99:7e:39:82:d3:36:da:ea:
                    65:1d:08:cb:88:f3:a9:19:20:68:e3:5e:95:c5:fe:
                    59:d9:ec:01:a0:79:7a:e3:16:0b:24:9b:3b:b8:e0:
                    af:3d:d3:bf:d8:57:2e:56:e8:57:3e:03:4d:d2:57:
                    18:c4:a9:24:0f:03:36:48:ae:69:6c:c8:1d:1b:6c:
                    02:a4:39:43:96:17:40:5e:00:ed:df:0e:61:d9:20:
                    b3:21:6b:ee:d0:e9:ec:b8:8e:b2:47:f9:73:d2:d8:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:35:F0:8C:0A:1E:CB:7F:44:53:29:2A:01:E0:51:7C:92:F8:24:19
            X509v3 Authority Key Identifier:
                keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:84:a0:4f:34:97:d7:f4:ae:d9:63:10:42:22:75:b0:fb:b3:
         7a:5d:5c:ba:3e:3d:03:45:13:cf:0e:ab:ee:56:b7:be:4d:0a:
         57:44:62:93:c1:2a:63:91:90:3b:1e:a7:ba:3c:5d:f9:e6:89:
         27:df:5e:65:78:63:6b:82:ac:5e:37:17:44:fe:25:40:0f:c2:
         2c:3e:69:13:1b:2f:5c:a9:3a:63:88:e4:82:7e:04:58:32:3d:
         3c:52:fa:68:b4:14:93:79:a4:d0:a4:e9:7b:00:94:4b:cb:df:
         1d:1a:98:54:e3:04:e6:b8:a0:b9:28:88:96:6c:7c:f6:3c:e4:
         e3:52:5e:41:c7:b0:29:42:78:6a:ef:87:b0:4a:3a:53:25:f0:
         a4:89:b3:1a:98:33:5e:ab:84:81:7d:ce:c8:90:d6:64:38:dc:
         76:98:12:fb:1d:32:18:1b:73:12:af:04:8b:eb:f4:81:49:9c:
         db:eb:5c:74:02:0b:cb:75:bf:2c:5f:b9:b5:58:92:5f:c3:7f:
         27:dc:d0:bd:2a:3c:88:4e:12:95:97:09:bd:6a:71:b6:96:65:
         55:ce:b2:1a:72:af:dc:09:0f:a1:ab:ee:31:2c:0f:39:b1:7a:
         cd:61:9b:09:d2:ed:94:c8:3b:0c:d7:3d:02:a6:93:3a:15:9b:
         2f:75:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:28:19 2026 by rpki-client