Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
File:                     8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json)
Hash identifier:          VO41NQgwv3ZIYrAA0q9Nb4kHcyd1xkr2kZHDdoWjatc=
Subject key identifier:   91:D6:CF:4B:B5:E0:BC:53:6C:E2:D3:3A:A0:2D:A1:04:7F:E6:FE:A2
Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94
Certificate issuer:       /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
Manifest number:          01A0
Signing time:             Mon 27 Jul 2026 05:56:41 +0000
Manifest this update:     Mon 27 Jul 2026 05:56:40 +0000
Manifest next update:     Mon 03 Aug 2026 05:56:40 +0000
Files and hashes:         1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: oXNT/ytdi72E8eiSrnZyOOvE9F6fdSCfRS/xbgPopYs=)
                          2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: yTqlxqgIyDqwKJBCLVp74BlYncftum8I60uiHEX+uhc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494
        Validity
            Not Before: Jul 27 05:56:40 2026 GMT
            Not After : Aug  3 05:56:40 2026 GMT
        Subject: CN=6a66f319-8f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:89:df:d3:44:08:0d:62:09:5a:fc:69:af:
                    74:64:c7:d2:5b:b7:5e:51:8a:fc:05:06:2e:46:d4:
                    78:07:59:11:7d:71:e6:5c:da:78:69:08:5a:79:55:
                    3c:9d:9d:01:19:b4:75:37:aa:0e:23:f2:d8:fe:04:
                    2d:e7:6a:69:d8:a3:af:de:80:28:be:57:d4:7d:f7:
                    49:e4:02:e8:c3:9c:8c:1a:a1:b3:56:5c:88:98:65:
                    32:ce:3c:99:96:f2:ff:26:b7:51:7b:36:fb:fa:8a:
                    56:fb:40:55:5b:03:ad:eb:ad:05:c6:1a:02:73:7d:
                    74:d8:28:c4:40:0c:de:83:8c:de:49:33:e9:64:d7:
                    4b:c0:40:5e:a4:5a:3e:53:14:f8:49:65:85:45:23:
                    08:d5:7f:8b:fa:b5:83:3e:c7:8e:93:d9:03:ce:b0:
                    3f:8f:37:8d:3e:7e:c9:b5:65:ef:2a:cd:ad:b9:da:
                    68:a3:14:e1:19:42:a6:c5:3d:1e:57:0e:85:8e:9a:
                    c9:c7:03:0b:e4:32:f8:a4:a5:17:df:6d:8e:eb:67:
                    72:85:9d:98:23:ff:9d:1d:27:ad:55:2a:7c:42:6d:
                    ab:b7:9b:7e:55:41:43:0e:6d:cd:67:c4:d8:93:38:
                    b0:c1:8d:0b:0a:53:c6:8e:d0:bc:c8:a8:ba:96:9b:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D6:CF:4B:B5:E0:BC:53:6C:E2:D3:3A:A0:2D:A1:04:7F:E6:FE:A2
            X509v3 Authority Key Identifier:
                keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:85:b1:41:80:58:4f:16:d3:fe:70:66:9c:33:0b:44:bf:1e:
         67:af:9e:07:74:71:5a:b3:06:5f:ff:36:1f:9b:d8:d6:38:6b:
         c3:77:53:31:8e:3e:ec:4e:3f:b1:57:81:96:8a:f2:69:e1:c0:
         a4:cb:85:68:4f:8c:c3:0f:33:17:40:95:51:c5:8d:3f:80:ff:
         9a:69:67:f2:54:e3:0d:25:14:e4:ad:fc:d0:3b:0c:be:be:d5:
         bb:5f:3a:c2:c5:bb:82:36:1b:a6:6c:28:1b:d1:c1:c4:8f:05:
         dc:27:c5:7f:00:56:a3:0a:5a:59:84:a7:99:18:b5:0a:d2:9b:
         8e:cd:0c:52:c2:10:c0:3b:78:7a:7e:5c:40:9a:5f:81:a3:d7:
         d1:aa:86:2a:ab:37:54:7a:5a:f8:86:47:66:97:9d:25:fd:e1:
         1f:4e:91:da:62:d6:4f:89:e8:ee:73:a9:53:52:c6:cc:76:d8:
         7c:76:a3:8f:f0:b4:d7:90:9b:9b:99:ac:e2:de:61:bb:8c:ea:
         f0:fa:e8:6b:d1:ea:53:2a:16:57:0f:e9:f4:30:0a:6b:20:d5:
         c5:07:e9:bd:44:f5:e7:16:25:ce:35:59:dd:f1:6c:e9:c8:fc:
         09:e1:2e:c1:04:e8:b7:b1:37:56:9f:4a:ab:78:b7:3a:e4:75:
         67:c4:2b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:55 2026 by rpki-client