Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
File:                     GJZ9zbckqEpxcR5niqsdLnIhXWw.mft (raw, json)
Hash identifier:          nU6ncoMyMGxT1ee7IdF/TLoaKVChNY+T8zAAhBNqxtI=
Subject key identifier:   1F:58:6C:DE:D2:BA:85:0B:13:D7:A4:19:F3:9B:58:E6:92:D2:4F:2C
Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C
Certificate issuer:       /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
Manifest number:          FF
Signing time:             Mon 27 Jul 2026 08:27:21 +0000
Manifest this update:     Mon 27 Jul 2026 08:27:20 +0000
Manifest next update:     Mon 03 Aug 2026 08:27:20 +0000
Files and hashes:         1: GJZ9zbckqEpxcR5niqsdLnIhXWw.crl (hash: pbn18eO9ET0pWrAfXBhCuN+oeJ052u/vJZtO/uLsr0A=)
                          2: 37B448241F7811F0AC4FFF82C4F9AE02.roa (hash: mFeODnTqqCYAbyyDP1f7ewIXqtu+6WN+eZxifMY5OQQ=)
                          3: 349ACBB2450811F09650FF5FC4F9AE02.roa (hash: ElTWkHinF5kZlSpWnOacvfk821L7f3zWiiILDU+FV5g=)
                          4: 1879BE8A318411F0BC1DD041C4F9AE02.roa (hash: j2Keh6m8tIx7/TCOD6hIJ0OBGZazoatVXlizWriG7AA=)
                          5: 17894A68318411F0BC1DD041C4F9AE02.roa (hash: 8ix/WnrdPiWa322J3erRaZZ4qyQ1QZ0UIEQCCV8f4LA=)
                          6: 3408F1BA450811F09650FF5FC4F9AE02.roa (hash: v4VAeTRhLetshvqbEadOdfyl/dOEP9N+4RKLhZ4e7qE=)
                          7: 5E6EBAF64D0611F09396603CC4F9AE02.roa (hash: WwIDIxcJSfVf47feTm39rcx36NVF4Zg4PvbNM1OFevw=)
                          8: 1808A790318411F0BC1DD041C4F9AE02.roa (hash: ySHv/z2aBIpi4ZmJwdGMW7JXmKAnxSrgO8kpo1pxZzc=)
                          9: 6896A446318411F0BBC4F91DC4F9AE02.roa (hash: 4FovTEqwPM1DYoWEf0hfar9xlGLMGj5cisGTHLJPYsI=)
                          10: 372E72941F7811F0AC4FFF82C4F9AE02.roa (hash: lc4x/4krlU7IrBNm9yndeIsd6X4Oi1wYGPdwnSnT+2s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl
                          rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C
        Validity
            Not Before: Jul 27 08:27:20 2026 GMT
            Not After : Aug  3 08:27:20 2026 GMT
        Subject: CN=6a671669-c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:f7:a3:63:d5:a7:ae:fb:f5:16:85:be:9e:
                    4a:cb:4d:ba:e0:df:64:4c:42:77:5f:26:0d:6d:cd:
                    76:4b:89:8d:56:7b:13:2d:72:98:07:45:f1:d3:06:
                    25:e7:e4:d7:96:b8:6d:38:20:ee:60:16:ff:77:8c:
                    dd:0d:05:b9:5e:82:17:1c:77:ec:1d:84:ab:db:79:
                    ad:b1:f6:71:e5:9d:f9:19:a9:db:1b:70:55:be:e0:
                    1a:32:80:d5:57:ad:42:0f:f8:a3:57:62:93:81:c2:
                    b7:dd:6f:04:91:da:f2:c2:68:2b:75:e0:f0:43:bb:
                    98:65:6d:26:a5:b5:cb:03:7b:1b:8c:d0:cd:e5:c0:
                    7f:9f:80:a8:c5:d4:14:44:2b:78:ec:fd:eb:1c:b0:
                    bc:f5:aa:0d:24:0a:80:fd:cc:8d:64:95:20:f5:6d:
                    cd:8b:2d:2d:ed:5d:93:8d:92:92:95:24:d2:eb:1f:
                    16:fc:1b:31:4b:7d:bb:65:05:15:0e:4f:4a:ec:0a:
                    21:2d:7a:64:bc:aa:a9:75:48:6c:55:86:2c:e0:17:
                    a3:bc:a9:75:1d:41:67:86:61:e7:4b:65:20:d8:b4:
                    90:da:23:91:4a:43:fd:97:49:c0:cd:14:04:bf:86:
                    8a:b4:df:59:c0:a2:b8:64:82:74:f6:20:26:6a:af:
                    0a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:6C:DE:D2:BA:85:0B:13:D7:A4:19:F3:9B:58:E6:92:D2:4F:2C
            X509v3 Authority Key Identifier:
                keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:68:89:b1:07:ab:af:68:06:b3:53:d5:b4:67:a5:28:e9:25:
         03:8c:32:2e:3d:a3:b2:b1:bf:30:ee:cc:fe:2a:04:1a:da:c8:
         41:1b:7d:88:4b:9c:25:b5:a7:a0:03:85:e8:8b:e7:e4:08:c2:
         82:2f:b0:ba:0c:3f:21:7f:22:1a:45:a5:12:46:72:8e:c9:8d:
         f7:59:73:b5:ed:68:f7:f9:cf:3e:43:e0:14:42:40:5e:2d:ae:
         a2:bb:67:e9:dc:22:d2:94:4a:8e:12:07:6b:03:81:9a:c8:a2:
         3f:e6:1f:b5:a8:0a:ee:a3:b9:19:a0:0f:a6:1f:dc:04:7a:5f:
         f3:d5:d9:27:72:6c:dd:61:bd:3b:d4:d4:9b:fa:4a:e4:fd:6b:
         b4:3f:d4:97:ee:15:7e:39:9a:eb:c9:e8:d1:f9:01:88:c6:3c:
         96:e4:a9:dd:9e:b5:cf:e0:2c:ae:f6:d9:d9:0d:e8:1c:09:7d:
         83:26:0d:33:ad:29:b3:66:41:6f:b7:88:01:52:79:94:e7:e1:
         eb:cf:85:5e:22:d1:f2:a9:98:01:78:ad:cc:1b:ab:e7:91:29:
         e4:65:42:9c:fe:a4:b1:8f:f7:24:ad:f8:de:ea:eb:6f:9f:0c:
         09:7e:41:97:46:7a:b5:b6:20:ef:b2:ed:43:4a:78:24:50:4c:
         ed:18:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:44 2026 by rpki-client