Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
File:                     GzrH1RWNTKzSxkYfuudARZrT7CU.mft (raw, json)
Hash identifier:          PRSC+yEMcBIQDkR92XBTP0ItJNKcjjjpstavVj9NwJY=
Subject key identifier:   01:7B:6A:F1:82:B0:95:FC:91:9B:44:4A:BF:16:82:AA:E9:BA:DD:81
Authority key identifier: 1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25
Certificate issuer:       /CN=A9198A90/serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
Manifest number:          0C
Signing time:             Mon 27 Jul 2026 11:33:49 +0000
Manifest this update:     Mon 27 Jul 2026 11:33:48 +0000
Manifest next update:     Mon 03 Aug 2026 11:33:48 +0000
Files and hashes:         1: GzrH1RWNTKzSxkYfuudARZrT7CU.crl (hash: GlssMrKSkLdEAPa8cMcF83KSHtp2/vSuBm6Zvtx8GCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl
                          rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198A90, serialNumber=1B3AC7D5158D4CACD2C6461FBAE740459AD3EC25
        Validity
            Not Before: Jul 27 11:33:48 2026 GMT
            Not After : Aug  3 11:33:48 2026 GMT
        Subject: CN=6a67421c-7cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:c4:58:73:0d:d1:b9:98:21:35:6d:cd:5f:
                    16:54:a3:70:bf:99:4d:34:f4:6e:30:b4:0b:16:1a:
                    77:30:97:c1:3b:bb:e4:73:02:8b:e9:74:47:1b:26:
                    08:56:9f:c1:a9:7b:d1:66:8c:25:e1:e9:46:a9:29:
                    f1:e6:63:0a:3b:01:27:58:46:d7:ae:40:ec:c8:cb:
                    05:e9:5c:fc:b4:af:fd:32:f8:d1:81:2c:a4:a1:f3:
                    d2:7e:ba:8a:01:bf:7d:6a:97:17:bc:9e:6e:48:2b:
                    32:6f:ef:18:6f:30:a4:33:15:1e:1a:99:d8:9a:8c:
                    ad:ac:7b:d9:46:b0:ca:56:94:01:0c:18:d2:5f:3b:
                    ee:78:37:20:b4:4b:64:b1:35:a6:aa:a0:8f:a5:d6:
                    6a:79:0b:f1:8c:c6:78:5c:0f:0b:fb:85:e7:54:1c:
                    64:ef:7a:13:af:c7:8d:39:17:37:d5:7e:6c:23:6a:
                    33:33:3b:60:ff:cb:f4:21:d8:a6:4d:d4:b6:7a:05:
                    d9:f9:5b:8c:a8:66:d9:a5:31:a2:d1:6c:51:1c:f9:
                    59:d9:d4:c1:90:73:7b:05:a8:55:99:aa:d2:54:de:
                    6a:64:29:bf:65:f8:da:87:23:bf:b7:b9:8c:0d:f6:
                    16:62:f0:d4:9f:8c:f8:e6:b9:16:47:46:38:6c:ce:
                    6d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:6A:F1:82:B0:95:FC:91:9B:44:4A:BF:16:82:AA:E9:BA:DD:81
            X509v3 Authority Key Identifier:
                keyid:1B:3A:C7:D5:15:8D:4C:AC:D2:C6:46:1F:BA:E7:40:45:9A:D3:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GzrH1RWNTKzSxkYfuudARZrT7CU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/57C7E22E7B9311F1A6E76D196FA30FBC/GzrH1RWNTKzSxkYfuudARZrT7CU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:0e:af:ff:82:a5:41:dc:f9:dc:0c:69:37:10:c7:ff:1b:
         c3:eb:6f:51:47:b8:4d:ab:4d:bf:76:73:85:3a:78:b0:d1:4b:
         f4:5f:13:85:f8:ee:b6:86:22:78:a1:14:cb:e3:3c:66:1d:8b:
         4b:97:3a:c1:5e:63:a7:ff:7e:8e:9c:99:21:d9:0b:0b:fc:4e:
         de:5a:90:06:d8:0b:41:24:f1:c8:d8:18:83:dc:b3:4a:20:e8:
         6f:b6:88:41:46:91:7e:37:7a:68:6a:f1:d0:1f:22:dc:86:55:
         6b:5c:11:8a:c1:11:0e:a8:a3:fb:88:08:39:81:db:17:53:65:
         87:8c:fb:49:b1:08:2b:c8:4a:21:51:05:73:7b:60:d5:19:03:
         e6:72:2f:f0:9b:be:68:72:29:05:bd:5c:de:74:23:80:02:7c:
         45:a0:f8:23:98:1c:0f:17:53:3e:71:99:2a:63:6e:9a:08:f4:
         fe:50:ec:a1:73:73:7e:58:f3:52:9b:ee:58:89:a1:8b:0b:12:
         70:9e:de:50:ac:4b:6c:92:95:b0:3a:b6:98:ec:9c:e0:16:3e:
         9f:00:67:98:ab:13:14:7b:89:29:a2:91:7f:71:af:c6:42:63:
         b6:4f:59:81:0d:ac:23:30:be:c4:c5:d3:44:72:87:db:02:ce:
         4d:14:13:52
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEE5MDExMC8GA1UEBRMoMUIzQUM3RDUxNThENENBQ0QyQzY0NjFGQkFFNzQwNDU5
QUQzRUMyNTAeFw0yNjA3MjcxMTMzNDhaFw0yNjA4MDMxMTMzNDhaMBgxFjAUBgNV
BAMTDTZhNjc0MjFjLTdjZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDNsRYcw3RuZghNW3NXxZUo3C/mU009G4wtAsWGncwl8E7u+RzAovpdEcbJghW
n8Gpe9FmjCXh6UapKfHmYwo7ASdYRteuQOzIywXpXPy0r/0y+NGBLKSh89J+uooB
v31qlxe8nm5IKzJv7xhvMKQzFR4amdiajK2se9lGsMpWlAEMGNJfO+54NyC0S2Sx
NaaqoI+l1mp5C/GMxnhcDwv7hedUHGTvehOvx405FzfVfmwjajMzO2D/y/Qh2KZN
1LZ6Bdn5W4yoZtmlMaLRbFEc+VnZ1MGQc3sFqFWZqtJU3mpkKb9l+NqHI7+3uYwN
9hZi8NSfjPjmuRZHRjhszm3XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAXtq8YKw
lfyRm0RKvxaCqum63YEwHwYDVR0jBBgwFoAUGzrH1RWNTKzSxkYfuudARZrT7CUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzU3QzdFMjJFN0I5
MzExRjFBNkU3NkQxOTZGQTMwRkJDL0d6ckgxUldOVEt6U3hrWWZ1dWRBUlpyVDdD
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR3pySDFSV05US3pTeGtZZnV1ZEFSWnJUN0NVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4
QTkwLzU3QzdFMjJFN0I5MzExRjFBNkU3NkQxOTZGQTMwRkJDL0d6ckgxUldOVEt6
U3hrWWZ1dWRBUlpyVDdDVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA1XQ6v/4KlQdz53AxpNxDH/xvD629RR7hNq02/dnOFOniw0Uv0XxOF+O62hiJ4
oRTL4zxmHYtLlzrBXmOn/36OnJkh2QsL/E7eWpAG2AtBJPHI2BiD3LNKIOhvtohB
RpF+N3poavHQHyLchlVrXBGKwREOqKP7iAg5gdsXU2WHjPtJsQgryEohUQVze2DV
GQPmci/wm75ocikFvVzedCOAAnxFoPgjmBwPF1M+cZkqY26aCPT+UOyhc3N+WPNS
m+5YiaGLCxJwnt5QrEtskpWwOraY7JzgFj6fAGeYqxMUe4kpopF/ca/GQmO2T1mB
DawjML7ExdNEcofbAs5NFBNS
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:06 2026 by rpki-client