Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
File:                     GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json)
Hash identifier:          kHrN+HurXhRvBF3mwdauIEagsklRDEoRnUTV16uOWe8=
Subject key identifier:   E0:EF:84:18:3D:7C:C9:9E:6C:99:FA:94:F9:8B:62:8D:A3:83:95:FA
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Certificate issuer:       /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial:       05B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
Manifest number:          05AD
Signing time:             Tue 28 Jul 2026 23:46:41 +0000
Manifest this update:     Tue 28 Jul 2026 23:46:40 +0000
Manifest next update:     Tue 04 Aug 2026 23:46:40 +0000
Files and hashes:         1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: ErrPpcbMcJUmhqsLYk203LA0d8p/Rh43Tx2qzbHxl10=)
                          2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: v2hZ59ja2UU2McZ0+iZGCOqhJExzjUDbBoc152csioY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
                          rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
        Validity
            Not Before: Jul 28 23:46:40 2026 GMT
            Not After : Aug  4 23:46:40 2026 GMT
        Subject: CN=6a693f60-4a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6a:d9:d2:aa:d4:87:d0:0b:f6:76:81:57:e7:
                    fb:f4:67:93:0a:57:cc:b2:a6:00:e0:64:b2:34:bb:
                    7c:f1:24:eb:a6:9b:3d:49:ba:84:7f:92:11:a0:2d:
                    d9:e0:c4:67:df:f2:67:f1:a2:28:21:e5:99:19:4e:
                    30:39:bc:11:dd:5a:e5:bb:53:40:a0:ca:4b:fb:3e:
                    50:12:19:00:6f:52:ac:5a:36:c5:db:84:99:43:a9:
                    2c:c4:d3:3c:5d:8a:0b:2f:40:3c:18:a3:56:a9:d8:
                    ff:db:4e:2f:db:bf:e1:ad:31:41:e8:70:88:8a:47:
                    de:43:5c:27:7a:7c:92:03:dd:34:3b:d1:b1:9d:53:
                    bc:6e:5f:55:e9:75:57:94:cb:9c:74:0b:de:13:bf:
                    35:92:54:57:81:ac:0c:bc:98:13:58:44:f7:c8:29:
                    ff:e9:fb:2f:40:d5:d8:76:16:a7:fa:4e:77:95:60:
                    f7:d0:60:82:c0:69:2c:55:09:85:76:dc:0a:b6:9c:
                    a5:9b:43:f3:74:8a:f7:9a:25:dd:8d:28:c5:bc:82:
                    37:d7:ca:21:4e:6a:3f:c2:23:c6:f4:fb:ef:f8:65:
                    c3:e7:5f:50:44:4a:69:36:d7:e5:ef:f2:c6:d6:ec:
                    20:27:85:3a:a0:0d:ea:89:50:97:eb:64:66:fd:54:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EF:84:18:3D:7C:C9:9E:6C:99:FA:94:F9:8B:62:8D:A3:83:95:FA
            X509v3 Authority Key Identifier:
                keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:2e:cf:eb:ba:90:08:26:37:25:e3:e4:3e:3f:08:6e:a2:
         fa:2b:ac:90:73:38:9d:87:76:08:30:80:7d:3e:f2:58:07:f9:
         d0:e0:f2:2d:a2:03:fb:05:fe:19:ba:75:16:ec:86:cc:33:a5:
         76:cc:55:bd:aa:8e:59:58:17:28:5a:46:67:61:52:8b:4a:90:
         d5:cb:dc:1c:40:de:66:cb:40:46:58:50:03:74:d4:c8:35:cd:
         ba:8b:0d:f5:b0:c5:36:47:af:b2:1a:f5:1e:fe:69:df:d7:c3:
         2b:6c:16:7c:10:b7:0a:bc:70:a6:fa:90:36:68:0c:8a:41:5f:
         6c:3e:a8:6e:d7:c5:bb:ad:ce:be:86:80:30:30:cc:58:7f:0d:
         81:75:2a:c6:5e:be:bc:c6:b8:3b:9c:2a:9e:f6:a0:f8:51:a8:
         db:a6:df:2e:0d:32:c4:e5:8c:33:c5:0f:4b:5a:c4:b5:3a:e7:
         0d:47:83:4c:92:7f:c0:de:3d:88:7b:d7:cc:b0:64:a4:7b:a0:
         ba:98:a7:e5:c9:d5:5c:fd:b5:77:b5:05:65:81:cd:c6:a3:9f:
         a1:1f:f2:21:2d:e9:b3:34:e9:ba:c7:de:1d:a9:4b:49:46:fb:
         4b:2d:55:e9:19:34:de:77:3f:98:00:19:38:a1:62:25:19:db:
         d5:46:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:22:24 2026 by rpki-client