Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
File:                     gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft (raw, json)
Hash identifier:          0JigAQgw5+0J9187WaBgySRtc0MED0hzaiX5eqfQihE=
Subject key identifier:   93:EE:E4:9D:42:BE:FF:D8:C4:B0:E9:68:10:EF:F8:66:90:44:D1:54
Authority key identifier: 80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A
Certificate issuer:       /CN=A91936BE/serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
Certificate serial:       08F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
Manifest number:          08DD
Signing time:             Tue 28 Jul 2026 20:47:49 +0000
Manifest this update:     Tue 28 Jul 2026 20:47:49 +0000
Manifest next update:     Tue 04 Aug 2026 20:47:49 +0000
Files and hashes:         1: gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl (hash: W3+qrFYmGXV+YtBR5wblj2EZiIuWrdnn1z5HG5Zw5Qw=)
                          2: 538866F6E44B11EAA31DD984C4F9AE02.roa (hash: a1CNS+aw2qVdCSuRRm//a5IPz4YXPjTaG+Ec6by8sVk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl
                          rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91936BE, serialNumber=8021B16B92421F77B7260E97E6AD8C1D24BD299A
        Validity
            Not Before: Jul 28 20:47:49 2026 GMT
            Not After : Aug  4 20:47:49 2026 GMT
        Subject: CN=6a691575-4c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:d3:1f:b2:9c:69:b1:2e:10:47:af:d3:e1:
                    5a:98:4f:e8:29:3e:83:5b:e0:75:b5:c3:c7:ef:b4:
                    93:37:1e:f4:d8:cb:12:e4:78:81:66:89:84:9f:f7:
                    2a:50:f9:dd:14:6d:69:5c:5a:04:35:03:d0:81:9b:
                    64:7a:88:43:ab:c5:56:c4:9f:a1:cb:10:04:39:4d:
                    02:a9:06:d7:d9:bb:34:43:56:53:37:50:61:8d:8f:
                    40:ec:cd:61:43:df:10:b3:16:07:38:66:72:3f:a2:
                    a3:51:64:d8:92:54:27:82:cb:50:aa:97:06:ce:52:
                    d7:1e:dd:0d:4b:9d:76:32:0c:aa:a5:01:dd:ee:b3:
                    11:5d:d0:fc:09:2f:7d:42:c2:24:17:01:79:33:3e:
                    4e:dd:11:79:b0:2f:ee:34:37:3e:a5:91:06:99:f7:
                    39:f3:47:ba:dc:4d:08:66:6c:c4:9d:ed:af:43:2e:
                    ff:a9:56:b4:08:86:41:1c:3a:1c:c9:15:69:59:2e:
                    6e:f9:f4:20:85:1c:e7:9d:fa:2c:ca:40:d5:50:d6:
                    2d:d8:dc:4c:5f:7b:0a:f8:85:61:ce:ea:18:c6:e9:
                    31:45:bf:3d:57:e9:ed:35:5f:82:45:a9:50:69:f6:
                    89:b8:f8:1e:23:dd:ad:45:73:84:bc:5c:7c:3e:cd:
                    88:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:E4:9D:42:BE:FF:D8:C4:B0:E9:68:10:EF:F8:66:90:44:D1:54
            X509v3 Authority Key Identifier:
                keyid:80:21:B1:6B:92:42:1F:77:B7:26:0E:97:E6:AD:8C:1D:24:BD:29:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91936BE/CA06668CE44811EA810B0380C4F9AE02/gCGxa5JCH3e3Jg6X5q2MHSS9KZo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:43:c3:49:aa:e2:fa:ec:62:b3:43:01:fe:77:9c:55:83:83:
         ec:13:c9:cf:22:12:26:03:fb:66:db:47:91:20:90:01:ac:fb:
         3e:b1:8e:b4:e8:3f:42:23:30:88:11:c8:68:36:50:1a:f9:08:
         c8:0a:af:43:30:af:5a:97:77:19:23:b6:47:d0:3a:f9:e0:7f:
         ee:c4:87:19:84:b0:07:32:f1:cd:53:38:d9:7c:a2:10:72:32:
         3c:8e:97:7e:a9:00:d9:bc:93:45:9a:50:52:5a:90:6e:f1:36:
         de:01:5c:57:1c:1b:d5:7b:a4:4d:3c:1e:ff:4d:7d:87:93:c4:
         b6:e4:ae:97:4a:72:f4:d3:df:72:43:c8:a3:24:f7:37:ec:9f:
         4e:7e:62:85:53:74:51:0c:e7:55:21:30:b7:ae:ab:e2:f0:3b:
         f9:02:32:c0:8d:af:41:55:62:b6:45:31:3a:dc:a8:b8:a3:a4:
         3f:ca:96:4d:28:40:97:64:69:11:ed:d6:c0:c2:e1:5d:06:26:
         b0:7c:10:9d:e5:4c:9e:87:19:58:45:1f:c1:a9:6b:e1:a0:ab:
         a8:9b:5f:c3:72:a9:a5:69:94:1f:3e:53:a7:1f:26:da:35:4b:
         46:44:87:13:6e:7c:6a:42:0f:dc:20:86:23:01:fb:53:27:99:
         10:fe:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:17:14 2026 by rpki-client