Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
File:                     GhgU2ojNOn_lNTsbW4hNytEkeJY.mft (raw, json)
Hash identifier:          +7zhGh3q0tcLLIg4gRUoMBj+OPtUXQYoPivdd1tDR0I=
Subject key identifier:   FB:4E:3F:38:F6:30:AD:08:C5:3A:78:C2:76:E3:B7:E4:1D:6A:E6:65
Authority key identifier: 1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96
Certificate issuer:       /CN=A91B5FA7/serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
Certificate serial:       6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
Manifest number:          6C
Signing time:             Mon 27 Jul 2026 10:13:36 +0000
Manifest this update:     Mon 27 Jul 2026 10:13:35 +0000
Manifest next update:     Mon 03 Aug 2026 10:13:35 +0000
Files and hashes:         1: GhgU2ojNOn_lNTsbW4hNytEkeJY.crl (hash: ljsulqFqdOOhwovx7lV10FfiuGd3e91LmNIAmj7Feb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl
                          rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5FA7, serialNumber=1A1814DA88CD3A7FE5353B1B5B884DCAD1247896
        Validity
            Not Before: Jul 27 10:13:35 2026 GMT
            Not After : Aug  3 10:13:35 2026 GMT
        Subject: CN=6a672f50-e5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:32:a7:c3:91:18:99:5b:a6:52:8a:54:92:
                    f2:ce:62:3f:78:a1:cf:e2:cd:06:9e:e3:72:a1:00:
                    aa:bb:81:67:c2:50:92:97:8e:8a:4e:47:2c:f4:43:
                    d9:4d:5c:e5:8a:20:f9:4a:0b:fd:4c:e9:db:3e:f7:
                    75:bd:ab:4d:e4:ea:95:76:fa:5f:50:55:c7:3f:8e:
                    79:9f:90:8d:9c:97:1a:0b:25:2b:9b:7f:7e:80:ff:
                    d2:bc:7b:31:4d:42:ff:bf:01:22:af:5d:ea:79:2c:
                    fc:7e:2c:6f:fc:ea:c1:19:cb:a5:73:95:99:e5:16:
                    c5:14:b1:95:02:dd:92:57:08:1c:4a:5a:00:71:79:
                    46:a3:d3:7f:5d:db:73:19:23:e2:73:0e:d4:11:c0:
                    91:55:5e:36:24:77:5b:48:6a:0f:c3:c5:f6:62:30:
                    32:17:bb:57:63:f9:19:2b:2a:ea:14:a5:b8:55:05:
                    16:1c:85:ee:d5:60:66:9f:07:b1:3e:24:f3:3a:6c:
                    27:29:14:fb:31:7d:af:1d:5a:a1:88:83:94:f3:8c:
                    94:22:c2:4b:39:5a:df:3a:9c:4e:d8:6d:fe:94:78:
                    f4:8e:21:50:53:d2:cd:bf:29:cd:d6:ca:75:94:2c:
                    a3:d1:9f:87:2b:0c:d8:ec:97:4b:d3:c9:b1:4e:c1:
                    87:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4E:3F:38:F6:30:AD:08:C5:3A:78:C2:76:E3:B7:E4:1D:6A:E6:65
            X509v3 Authority Key Identifier:
                keyid:1A:18:14:DA:88:CD:3A:7F:E5:35:3B:1B:5B:88:4D:CA:D1:24:78:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhgU2ojNOn_lNTsbW4hNytEkeJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5FA7/7D0307E4EC1911F08AEFFCB83B6F56BC/GhgU2ojNOn_lNTsbW4hNytEkeJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:88:4d:b4:09:fd:9e:e5:38:41:cf:57:72:b1:2d:5a:a3:35:
         9c:90:40:fc:4d:6a:94:21:5f:77:f3:7a:a9:d8:50:68:92:54:
         09:a9:75:ca:1e:e0:5d:90:5e:16:75:38:21:14:27:f0:cd:ae:
         f5:b6:58:63:c5:53:70:da:f6:37:c6:7d:60:61:06:30:fb:59:
         07:63:d1:01:63:7b:76:07:10:55:96:a1:ee:7e:18:27:1a:99:
         34:c9:70:53:cf:18:b9:39:7d:84:c5:cb:da:ae:7a:23:10:7d:
         d7:dd:dd:92:c7:35:97:73:17:b5:66:da:e7:e3:2a:2a:7b:ef:
         2b:99:73:da:44:8f:78:e9:15:25:19:cf:47:16:58:e6:06:ba:
         03:25:e7:c8:81:58:af:02:d3:de:ac:da:68:5c:d0:10:cb:a5:
         58:62:dc:84:fe:0a:71:02:b7:5d:5c:02:5a:25:09:30:31:e3:
         e6:47:8b:c0:cd:88:bc:29:27:a6:8a:60:dc:ca:12:c3:56:0d:
         04:ca:bc:a7:de:b5:58:5d:da:03:73:aa:89:ba:c7:e7:fb:33:
         c1:e8:f1:bf:86:15:fa:60:b6:fc:5f:b3:c2:1b:6f:e0:8c:16:
         e6:d5:d6:da:a5:60:1f:5d:f7:61:20:a4:36:06:ed:07:85:5c:
         03:32:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:16:24 2026 by rpki-client