Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
File:                     ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft (raw, json)
Hash identifier:          GwFMkPrC/Tf5j5UJZvoAaiiOYQalzjVUTv7891d7akE=
Subject key identifier:   79:33:83:EA:8E:20:F6:4F:3C:94:03:C8:61:83:53:ED:72:E3:12:8F
Authority key identifier: 82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35
Certificate issuer:       /CN=A91AC777/serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
Certificate serial:       06EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
Manifest number:          06E7
Signing time:             Sun 26 Jul 2026 23:01:28 +0000
Manifest this update:     Sun 26 Jul 2026 23:01:27 +0000
Manifest next update:     Sun 02 Aug 2026 23:01:27 +0000
Files and hashes:         1: ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl (hash: ezaRGmrlROOQ+Sk8C9qok2jg28HxE+qRy5IUDx6tZKY=)
                          2: 92967BBA78F811ECAF1C286CC4F9AE02.roa (hash: OC1wYvk7HdnATgeP8AW3eH45pm98AkZGK4N7Ka/dybY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl
                          rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC777, serialNumber=8214F51A981441F15FB912225FD7D02FB943AE35
        Validity
            Not Before: Jul 26 23:01:27 2026 GMT
            Not After : Aug  2 23:01:27 2026 GMT
        Subject: CN=6a6691c8-76b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:8e:27:52:6d:9a:ae:57:2f:78:7d:ad:56:9b:
                    7d:d8:03:f5:ed:d7:c8:51:5a:c4:6f:86:c4:b4:8b:
                    3f:8a:f0:c6:82:ae:3d:44:d1:de:4a:52:6b:1f:f4:
                    d1:9f:bc:15:bd:53:47:0f:42:eb:b9:6c:c2:a0:81:
                    a0:3c:d3:c9:0a:f2:23:82:68:d3:aa:70:16:9a:e9:
                    0b:44:9e:af:de:32:ca:af:33:3d:42:bb:62:2f:75:
                    73:7a:5a:2b:b5:e3:b6:fa:30:38:a1:b8:59:f1:bd:
                    ed:e2:81:76:39:c7:fa:0c:e3:75:63:4b:98:d0:e8:
                    f3:78:ad:18:0a:3c:94:54:af:38:d6:47:be:f5:38:
                    1e:1e:01:ae:10:d0:9e:86:8c:bc:71:94:0a:ee:06:
                    91:43:7f:e8:98:21:02:00:3a:66:36:11:e0:a3:b8:
                    a2:f2:d1:32:c8:70:ad:1e:02:f9:8f:26:7d:2f:83:
                    c0:12:fb:35:5a:92:db:a5:a4:ed:35:64:ca:01:21:
                    0a:87:1e:55:cd:0d:0d:50:43:d1:58:78:21:7b:49:
                    68:05:10:74:7a:08:a3:e9:3a:1e:65:03:94:3e:df:
                    74:cc:e9:db:ad:3b:87:70:52:95:fe:09:6b:f0:aa:
                    16:32:3c:c0:bf:20:b8:39:9d:dd:48:ce:f8:81:8d:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:33:83:EA:8E:20:F6:4F:3C:94:03:C8:61:83:53:ED:72:E3:12:8F
            X509v3 Authority Key Identifier:
                keyid:82:14:F5:1A:98:14:41:F1:5F:B9:12:22:5F:D7:D0:2F:B9:43:AE:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghT1GpgUQfFfuRIiX9fQL7lDrjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC777/779760BAA3E511EBA18E937EC4F9AE02/ghT1GpgUQfFfuRIiX9fQL7lDrjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0a:8c:df:de:af:7a:04:e1:39:b7:1f:2d:b1:12:4f:92:cb:
         57:37:53:8f:41:62:08:85:c7:fc:0c:26:46:64:3b:1e:67:b6:
         c3:d0:0f:16:9a:42:aa:7b:10:23:8d:4c:06:fb:54:b7:86:58:
         b6:15:57:d8:17:a5:5d:dc:ae:9f:bf:63:17:41:81:c5:4d:91:
         85:5f:38:53:43:3f:62:2e:0f:5d:90:fd:1e:21:85:c8:17:b9:
         89:ad:36:91:6f:1f:9d:99:8f:59:5f:2c:3f:17:b2:8d:b8:48:
         09:17:8e:18:06:ac:a1:aa:24:a6:c8:a2:55:44:b2:94:bc:88:
         62:b8:70:13:81:cd:45:06:4f:b5:51:31:4f:68:7b:82:c5:6a:
         2a:c2:4c:66:05:c8:bc:9c:10:a6:9a:21:83:c1:54:67:da:ea:
         25:be:94:5d:4a:17:68:0b:4d:55:ad:bf:33:af:7a:f4:27:8e:
         2c:80:22:7f:5b:fd:38:82:01:15:3e:15:76:70:b4:9a:24:2f:
         d2:51:9b:85:7e:3c:28:63:e1:d1:19:9e:e1:bf:e0:ea:a0:0a:
         1b:15:2e:94:f5:23:c6:62:09:4b:8e:88:18:6b:25:85:c2:26:
         29:0b:13:e6:6e:06:5c:80:eb:bb:34:06:5d:4e:d4:3c:48:30:
         bb:87:9a:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM3NzcxMTAvBgNVBAUTKDgyMTRGNTFBOTgxNDQxRjE1RkI5MTIyMjVGRDdEMDJG
Qjk0M0FFMzUwHhcNMjYwNzI2MjMwMTI3WhcNMjYwODAyMjMwMTI3WjAYMRYwFAYD
VQQDEw02YTY2OTFjOC03NmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6I4nUm2arlcveH2tVpt92AP17dfIUVrEb4bEtIs/ivDGgq49RNHeSlJrH/TR
n7wVvVNHD0LruWzCoIGgPNPJCvIjgmjTqnAWmukLRJ6v3jLKrzM9QrtiL3Vzelor
teO2+jA4obhZ8b3t4oF2Ocf6DON1Y0uY0OjzeK0YCjyUVK841ke+9TgeHgGuENCe
hoy8cZQK7gaRQ3/omCECADpmNhHgo7ii8tEyyHCtHgL5jyZ9L4PAEvs1WpLbpaTt
NWTKASEKhx5VzQ0NUEPRWHghe0loBRB0egij6ToeZQOUPt90zOnbrTuHcFKV/glr
8KoWMjzAvyC4OZ3dSM74gY11sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHkzg+qO
IPZPPJQDyGGDU+1y4xKPMB8GA1UdIwQYMBaAFIIU9RqYFEHxX7kSIl/X0C+5Q641
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzc3Ny83Nzk3NjBCQUEz
RTUxMUVCQTE4RTkzN0VDNEY5QUUwMi9naFQxR3BnVVFmRmZ1UklpWDlmUUw3bERy
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2doVDFHcGdVUWZGZnVSSWlYOWZRTDdsRHJqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Qzc3Ny83Nzk3NjBCQUEzRTUxMUVCQTE4RTkzN0VDNEY5QUUwMi9naFQxR3BnVVFm
RmZ1UklpWDlmUUw3bERyalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPAqM396vegThObcfLbEST5LLVzdTj0FiCIXH/AwmRmQ7Hme2w9APFppCqnsQ
I41MBvtUt4ZYthVX2BelXdyun79jF0GBxU2RhV84U0M/Yi4PXZD9HiGFyBe5ia02
kW8fnZmPWV8sPxeyjbhICReOGAasoaokpsiiVUSylLyIYrhwE4HNRQZPtVExT2h7
gsVqKsJMZgXIvJwQppohg8FUZ9rqJb6UXUoXaAtNVa2/M6969CeOLIAif1v9OIIB
FT4VdnC0miQv0lGbhX48KGPh0Rme4b/g6qAKGxUulPUjxmIJS46IGGslhcImKQsT
5m4GXIDruzQGXU7UPEgwu4ea9w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:52 2026 by rpki-client