Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
File:                     glI0BAdpP4vHwTIlP0BsBORndvY.mft (raw, json)
Hash identifier:          3aRBkvd6O8zO59xIJj3UQuZDlbxh04thdh7kEcM+1zA=
Subject key identifier:   D7:8E:2F:CB:7D:52:95:2E:37:63:22:92:76:26:15:A2:43:ED:CB:87
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Certificate issuer:       /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial:       02D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
Manifest number:          02C7
Signing time:             Wed 29 Jul 2026 02:11:55 +0000
Manifest this update:     Wed 29 Jul 2026 02:11:55 +0000
Manifest next update:     Wed 05 Aug 2026 02:11:55 +0000
Files and hashes:         1: glI0BAdpP4vHwTIlP0BsBORndvY.crl (hash: VQcYbgA12SBZTr1P3kGpgVBvgLJ4aN9rl/wdIWQb95A=)
                          2: 81055570A5C611F09009BB3EC4F9AE02.roa (hash: VEI8px2anVG8cZfCHh405MajK0/zl7ELNzRvGRaIcvk=)
                          3: 5382BB6AA5C611F0900E7F3EC4F9AE02.roa (hash: HHD0wlUVnVxAudrxvBwUFKWMsBYPEVEp5DArYrdk6Yg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
                          rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 02:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
        Validity
            Not Before: Jul 29 02:11:55 2026 GMT
            Not After : Aug  5 02:11:55 2026 GMT
        Subject: CN=6a69616b-2809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:91:9a:d1:a2:15:61:61:2f:64:b2:14:3d:e9:
                    24:85:06:0c:bd:4d:40:a8:f2:1d:9e:63:ee:f2:ea:
                    59:4d:9a:e7:c6:ec:bc:fc:2a:6e:2e:e6:9d:c4:f5:
                    da:c1:96:3e:09:60:cb:9c:87:17:f4:02:35:15:9f:
                    0c:e4:fe:89:47:69:1d:37:8a:32:9d:4a:8c:cf:23:
                    86:d6:67:c6:85:0e:9c:59:4e:44:97:26:c1:dd:f0:
                    bd:81:a0:04:1f:4d:60:67:af:78:13:31:5b:c3:5a:
                    a5:95:c1:06:1c:88:66:1b:73:9d:98:4e:27:38:70:
                    d2:e3:86:0e:a4:c0:74:ae:a7:7b:2f:f7:e7:9e:7d:
                    99:36:3b:28:b7:9b:92:70:53:e3:1c:3e:4b:d5:68:
                    b7:fd:eb:26:f0:5c:0a:5d:dd:bf:25:30:27:25:47:
                    80:12:dd:5e:6d:7e:37:c6:35:b8:98:76:25:a9:d7:
                    7d:a9:38:e9:46:61:4b:bc:48:18:4f:7a:19:ac:c4:
                    db:25:b4:22:04:21:fd:71:08:3c:08:9f:af:99:11:
                    35:7d:f1:ac:c5:ea:21:bb:68:f9:98:30:80:2d:06:
                    71:26:47:c7:e3:fb:66:06:19:4e:07:d7:04:ff:dc:
                    ac:5d:d2:11:92:d4:8b:ec:dc:3a:5a:9e:06:98:24:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8E:2F:CB:7D:52:95:2E:37:63:22:92:76:26:15:A2:43:ED:CB:87
            X509v3 Authority Key Identifier:
                keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3b:67:cb:1f:c4:53:3e:72:d2:4c:24:0b:79:a2:83:ae:e8:
         10:48:be:4e:eb:49:19:3f:fd:41:4a:e6:38:33:37:f7:b7:b2:
         f6:65:bc:76:a2:55:ba:6e:cd:38:5d:47:49:b5:92:c4:d2:8f:
         e8:7e:bd:2c:21:02:4b:a0:42:21:0c:e6:ae:a8:35:9f:95:90:
         ac:00:6c:b9:77:1e:a7:67:32:9d:1b:b8:3f:4f:78:77:bb:9c:
         62:6f:54:0b:4b:d7:52:2e:51:7b:f0:1d:76:e7:d0:ae:fe:a3:
         7d:d2:07:f8:24:0d:03:4e:08:72:53:0d:4e:6a:6e:de:8b:03:
         d8:3d:de:2a:dd:72:64:bd:cf:32:7d:84:eb:f0:d1:aa:f2:16:
         a7:21:ec:18:dc:bd:20:ac:97:f4:74:28:62:32:54:1e:dd:09:
         ae:7a:b3:74:fd:6c:3a:e9:8d:cc:19:92:eb:22:d1:09:ee:58:
         9f:d0:00:01:bc:bf:b5:17:3d:53:f2:ac:ac:c6:db:98:7f:cd:
         ba:89:3b:bc:f7:da:31:0f:4a:95:dd:f3:40:eb:95:c7:60:d3:
         ca:67:52:32:22:5b:91:b9:91:fd:c4:09:60:28:f6:ee:1a:e4:
         ed:c6:61:33:06:ce:f3:f1:1a:70:6f:17:75:17:cc:11:18:2f:
         26:c0:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:37:43 2026 by rpki-client