Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          LjbEM2/HEtyaLIr83ce/3/QuGtJQlXGkGdjCGmEF82o=
Subject key identifier:   00:4A:4A:54:21:76:EE:04:60:2D:CF:42:83:A9:53:57:1E:F1:F1:2E
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0C2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0C0B
Signing time:             Sun 26 Jul 2026 19:14:18 +0000
Manifest this update:     Sun 26 Jul 2026 19:14:18 +0000
Manifest next update:     Sun 02 Aug 2026 19:14:18 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: JQgjMth8C1rBC7vrgu54Soq2qwdaqmHK7u84ZE+2C5U=)
                          2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: Z0MQnn6qOb174wCs47KETGp25JeTqEfueFTHZlB9rgo=)
                          3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: BCikVDMThdr7c/vX1LiQM/OJjvtE7QJ+zP42lyGw5lY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3114 (0xc2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Jul 26 19:14:18 2026 GMT
            Not After : Aug  2 19:14:18 2026 GMT
        Subject: CN=6a665c8a-038a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:5f:04:ec:46:c4:62:39:64:5c:85:7f:4c:
                    34:6b:80:0b:f0:22:d4:96:9c:4c:42:43:d9:62:d2:
                    f4:d5:af:83:f6:0b:7a:74:4f:59:32:7f:04:20:0a:
                    3a:a1:f1:c5:6d:8b:98:83:5d:dc:9d:53:c0:a0:0a:
                    84:5f:8d:0a:b1:40:9e:42:9f:02:d3:ae:b1:9b:3b:
                    34:00:fb:7e:86:3e:5a:84:ab:a8:76:14:0f:41:85:
                    a2:d7:3f:7e:d8:64:c4:ba:8c:e8:86:03:8f:a3:96:
                    07:01:15:5c:e4:87:3a:c5:db:02:43:27:3b:8d:58:
                    d7:85:5d:1c:77:9d:16:40:90:1d:16:e6:3f:08:1d:
                    28:e5:1d:90:c9:c3:5d:e0:e8:86:64:ce:04:b9:7d:
                    a8:77:f8:45:c3:96:65:36:09:09:a4:78:81:ab:6c:
                    35:a4:22:07:98:86:5d:a3:96:42:52:52:15:25:90:
                    f0:cb:ed:60:ee:68:9c:cc:3c:07:fd:75:1e:50:4e:
                    c3:9e:4e:ae:ee:f5:bd:e9:38:1b:98:af:71:b6:33:
                    c5:e0:2d:1c:b8:68:30:47:f9:c6:91:11:b0:57:55:
                    a2:71:9b:a4:41:4e:1a:fb:e4:11:d6:97:70:84:6e:
                    83:aa:f9:e4:b3:7f:64:53:3a:78:c3:d4:46:62:39:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4A:4A:54:21:76:EE:04:60:2D:CF:42:83:A9:53:57:1E:F1:F1:2E
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:65:18:a3:f3:08:10:2d:5d:50:26:6b:0a:9b:5c:53:49:
         2e:6c:5d:40:f7:a7:a8:df:08:23:91:34:4f:27:56:4c:35:af:
         c8:6e:93:f5:7b:45:78:6a:a7:d5:23:f3:dd:c3:f2:f4:36:13:
         73:53:58:8f:24:f8:a6:8d:45:e6:99:a5:55:af:40:5c:8f:78:
         7a:bd:f2:12:d6:1b:27:3f:c5:b7:8d:f2:a4:cd:c9:67:97:ba:
         c5:7e:7f:50:7d:eb:85:cc:85:6b:c1:39:e0:97:5b:aa:18:4a:
         2f:33:62:17:ac:b2:91:8c:42:7d:50:4a:88:da:f2:ea:99:51:
         fe:1e:ad:d6:83:1a:42:c8:61:71:52:62:03:1a:c7:3a:31:ab:
         ef:c5:4f:ad:f9:0e:65:70:b8:28:41:18:4f:e6:07:8d:7d:a4:
         18:60:0d:81:00:4d:a5:ff:35:f5:4a:1f:2c:8d:32:83:c5:dc:
         b8:29:5d:bf:92:d2:91:a6:fe:d2:21:66:d1:44:97:b8:e8:c3:
         fb:e0:3d:2e:77:e7:ad:ec:1d:6b:b8:51:bb:63:f0:31:d0:10:
         11:1f:cc:b4:67:be:2e:2b:4b:7f:3f:75:a2:2d:31:30:38:f6:
         04:79:46:22:c9:69:c2:a4:e8:24:86:c6:03:73:54:bc:5d:4d:
         72:df:d0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:52 2026 by rpki-client