Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
File:                     GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft (raw, json)
Hash identifier:          uezFjqzr6Wnyy++jrCHtnXfzcxkj8LTS9hln+UtGFKg=
Subject key identifier:   2E:AD:EB:29:2A:EC:1B:0E:94:8D:D2:CC:7B:B3:FA:AE:22:C8:D4:DF
Authority key identifier: 1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D
Certificate issuer:       /CN=A91B0720/serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
Certificate serial:       04B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
Manifest number:          0485
Signing time:             Mon 27 Jul 2026 01:14:15 +0000
Manifest this update:     Mon 27 Jul 2026 01:14:15 +0000
Manifest next update:     Mon 03 Aug 2026 01:14:15 +0000
Files and hashes:         1: GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl (hash: mVCPkFnkbePAq1F67UzOlme3hN1m33loc0by363jZQc=)
                          2: 3D3FCB5EC8F911EFA0603266C4F9AE02.roa (hash: LdZPN5g7VKOUsoMqUh+SkM+nJiYnZ4SZeWeIWiWxUuQ=)
                          3: F0223A56C8F711EFB2542D5FC4F9AE02.roa (hash: x729WOa3T8qxHTeXY3IB1oaDUAtd3GUuYxUEzKIlZlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl
                          rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0720, serialNumber=1B036BFF87807CBFC6E91236CB086D4FE2B0993D
        Validity
            Not Before: Jul 27 01:14:15 2026 GMT
            Not After : Aug  3 01:14:15 2026 GMT
        Subject: CN=6a66b0e7-7efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:77:f1:2e:23:30:33:20:14:af:43:74:18:
                    d8:1b:02:bb:f1:12:dd:6b:45:a7:fc:6d:a1:a9:bf:
                    d7:a9:db:2f:7e:c1:60:85:63:a9:93:dc:45:66:72:
                    6c:d0:45:a8:2e:81:79:82:a2:fd:21:09:cb:2e:d7:
                    06:ac:0f:63:e2:c9:6c:7b:a0:7b:d8:34:e3:14:90:
                    29:06:4d:8c:4a:fa:dc:bd:03:2f:2a:34:71:9b:2a:
                    3a:43:eb:c9:0d:a7:95:27:4c:05:e0:2c:e0:38:63:
                    68:4a:31:be:d8:72:04:6c:2c:cf:03:f7:62:5f:83:
                    c3:5a:4a:33:24:3f:b3:76:22:99:56:5d:a4:57:27:
                    74:4d:e5:27:73:b9:38:16:a3:7b:46:bb:4b:fc:7c:
                    eb:b6:a0:dc:f7:5c:45:c0:29:54:39:51:76:89:34:
                    8f:45:35:56:41:71:e2:37:f8:3e:e7:27:e0:3d:31:
                    3f:9a:0f:8a:c7:ca:a7:3c:07:99:7b:00:79:4e:46:
                    58:7f:d5:c1:4e:fe:16:d7:35:8b:cf:14:2b:3a:be:
                    bd:8d:ab:cf:31:42:57:25:db:b0:42:7a:4a:8a:a7:
                    34:a1:3f:30:20:3f:b5:e5:49:14:b0:29:e9:ea:ef:
                    e2:b9:0d:d4:49:e0:84:49:5b:07:f5:e6:63:9e:c8:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AD:EB:29:2A:EC:1B:0E:94:8D:D2:CC:7B:B3:FA:AE:22:C8:D4:DF
            X509v3 Authority Key Identifier:
                keyid:1B:03:6B:FF:87:80:7C:BF:C6:E9:12:36:CB:08:6D:4F:E2:B0:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GwNr_4eAfL_G6RI2ywhtT-KwmT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0720/209F8B74A79B11EC8DD2B157C4F9AE02/GwNr_4eAfL_G6RI2ywhtT-KwmT0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:20:c6:e0:0f:5f:49:c5:18:c4:e8:34:8e:14:b1:6d:85:32:
         97:f5:fd:10:ad:26:90:1b:23:f1:a0:1c:e7:77:c9:da:fe:0c:
         f3:3a:86:6c:08:9e:06:20:54:7c:cb:1d:48:6d:d3:47:5c:6a:
         a7:da:5a:b3:7b:07:97:8d:8d:db:aa:30:64:9a:01:ea:6b:ff:
         50:79:54:51:48:3b:c8:f5:7d:17:1c:29:3c:df:fc:59:78:b4:
         76:2d:6d:b5:0a:bf:7f:31:5c:79:ea:a5:02:f7:df:e4:b0:0b:
         00:88:f4:56:74:10:70:65:97:24:2a:c8:15:9e:72:96:81:f6:
         21:c7:f6:a5:1e:2c:37:35:41:30:dc:bf:ff:31:52:da:16:37:
         a9:2c:ec:7b:f5:f3:aa:85:e3:de:17:0a:b0:d4:f0:20:6c:73:
         82:40:a8:27:b5:78:99:2e:57:ef:e6:64:1d:a8:18:28:c7:67:
         4f:8e:5a:a7:7b:25:5b:a8:6a:59:bc:ae:69:a8:8f:33:41:cc:
         36:a5:4f:52:8f:08:23:26:0b:06:d3:21:0e:13:e9:83:e0:8c:
         1d:19:2c:f5:c2:9e:e1:9f:85:c5:0d:25:25:78:73:ab:8d:90:
         68:76:ce:42:a7:47:53:21:15:02:24:08:b0:13:2c:2a:43:a9:
         12:81:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:55 2026 by rpki-client