Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
File:                     G9yKnBE9vfM_vPHBQblLu31wEno.mft (raw, json)
Hash identifier:          sG8KdqBzOtKfp8SNxj9dh0mC4DIJPwrtbdKgotP7Px8=
Subject key identifier:   26:00:05:3C:8A:09:F6:66:28:BE:DF:79:19:EC:88:A4:64:05:5C:D5
Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A
Certificate issuer:       /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
Certificate serial:       06AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
Manifest number:          06A7
Signing time:             Sun 26 Jul 2026 23:15:32 +0000
Manifest this update:     Sun 26 Jul 2026 23:15:31 +0000
Manifest next update:     Sun 02 Aug 2026 23:15:31 +0000
Files and hashes:         1: G9yKnBE9vfM_vPHBQblLu31wEno.crl (hash: /q4Hmhno5494WxzbV2dywegQNegohbJY+94+vzdAUrU=)
                          2: 7F17B380BED411EBA325CC76C4F9AE02.roa (hash: 9JUpK8Q9kWs1/RuBMledq+AFaWoY8q6Hgv+cHGXLEzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl
                          rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A
        Validity
            Not Before: Jul 26 23:15:31 2026 GMT
            Not After : Aug  2 23:15:31 2026 GMT
        Subject: CN=6a669513-6987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:00:fc:ad:d2:c9:4b:f2:18:81:09:da:92:
                    c7:76:41:b7:bc:41:70:c9:f2:e0:78:ab:96:50:a8:
                    3c:80:04:44:1c:d7:e7:e7:76:a9:0e:c3:de:87:67:
                    f0:0d:f6:24:52:16:a7:e0:2e:99:dc:7e:23:5c:cf:
                    fc:cf:0a:f7:00:96:f3:96:38:c6:3b:b8:93:44:73:
                    b0:8e:d5:d6:ea:64:24:0a:b2:ef:5c:3a:5e:ae:d0:
                    01:ba:6b:ed:17:11:e0:d0:6b:43:06:8c:54:8c:e9:
                    04:c5:35:44:74:45:fc:17:cf:a3:c4:fa:d8:77:70:
                    51:df:3e:0f:c0:b5:48:21:7f:2e:cc:17:64:bf:93:
                    2a:fa:da:61:16:70:d0:20:30:d5:0a:33:8a:6f:56:
                    24:a3:3d:3b:09:f6:b8:4d:52:81:33:a9:2c:3a:0d:
                    5a:82:be:5d:e7:68:a8:44:a2:fa:b2:aa:4f:c1:4b:
                    48:18:79:0e:b6:b5:24:e7:a3:68:54:68:d0:de:85:
                    15:dc:e7:74:97:c0:d7:7e:f4:1c:9c:24:78:3d:d1:
                    fa:cb:67:cf:d1:d2:8e:4f:e2:a9:34:7b:98:91:4c:
                    2d:67:f0:91:c8:b1:77:64:d8:e6:6a:6f:f7:64:f3:
                    f1:51:67:f1:95:b0:ac:d9:fa:89:ad:a5:92:03:60:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:00:05:3C:8A:09:F6:66:28:BE:DF:79:19:EC:88:A4:64:05:5C:D5
            X509v3 Authority Key Identifier:
                keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:b6:fb:b7:7c:f2:71:8b:74:94:05:96:f5:60:73:5e:54:
         a1:aa:71:4b:87:aa:31:31:9b:31:f2:20:4c:27:72:ff:95:e5:
         e6:c7:a0:e5:d9:0e:1a:d9:26:b3:f3:60:be:22:fb:79:0d:91:
         af:d6:a4:0d:3a:83:50:6b:71:17:43:6f:c4:c7:c9:43:8b:62:
         73:47:29:71:fe:e1:82:1c:4a:92:73:5a:e6:b0:82:45:8f:3f:
         de:f2:38:23:c2:a7:6e:60:ef:f0:d8:c6:0e:35:82:9f:83:fa:
         08:dc:be:3b:cb:3c:6d:32:4d:3b:ca:3f:17:20:8f:50:d5:74:
         7f:df:12:2e:a5:fc:7e:4f:d5:77:3f:4c:ff:c4:a8:02:b6:03:
         55:3f:d1:0f:e1:52:04:53:82:81:73:a8:61:a6:fd:e4:3b:6c:
         62:c1:6c:7d:18:02:1d:6a:ce:26:54:ed:52:5f:a9:31:01:f0:
         75:89:e9:e4:39:15:c8:b7:07:be:85:58:37:d3:86:a8:8d:82:
         5d:ad:4d:14:4d:4b:e9:17:97:ce:5c:22:15:c3:ce:a0:47:78:
         4d:2a:e7:23:43:f8:3f:a6:2d:8b:e5:f3:6d:aa:12:21:72:e6:
         dd:b4:9a:7c:b9:a4:c8:dd:78:c5:43:a7:e3:d8:89:79:87:bb:
         c3:9f:a4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:24:56 2026 by rpki-client