Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
File:                     gOknW25uvGrXWF12r7akALUULD8.mft (raw, json)
Hash identifier:          X2i8KrhyJ4T3ZpM2Q7Pid4l/1J0LJ1KN8+nc8vN1UKo=
Subject key identifier:   6D:19:BB:FC:A7:38:7F:CA:03:B0:54:A0:4F:A9:FA:12:31:44:74:DD
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Certificate issuer:       /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial:       0181
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
Manifest number:          017C
Signing time:             Mon 27 Jul 2026 06:29:37 +0000
Manifest this update:     Mon 27 Jul 2026 06:29:36 +0000
Manifest next update:     Mon 03 Aug 2026 06:29:36 +0000
Files and hashes:         1: gOknW25uvGrXWF12r7akALUULD8.crl (hash: i4u7D9LXeh+aEx7EeMhCGf89MfmyysC6wkMTUKlHr4Q=)
                          2: 3446813047DC11EFA05E932EC4F9AE02.roa (hash: K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
        Validity
            Not Before: Jul 27 06:29:36 2026 GMT
            Not After : Aug  3 06:29:36 2026 GMT
        Subject: CN=6a66fad1-edae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:a6:5d:e0:2f:30:d1:cb:72:7c:d1:48:0c:
                    9f:b1:57:56:39:c4:db:8c:6f:a9:de:52:5d:37:85:
                    52:90:b8:dd:52:06:ea:de:81:f7:61:7c:63:00:8b:
                    19:25:bf:ee:b2:5b:c8:82:18:e1:af:31:f4:7f:09:
                    0c:ea:85:64:9c:68:f1:a5:dd:d0:51:94:bc:c9:09:
                    2d:76:9a:6c:16:60:2c:cb:66:bd:d4:86:70:e2:9a:
                    2c:29:cb:21:35:c8:2c:cc:86:d7:b0:b1:e5:49:6d:
                    73:81:29:7f:53:f9:45:59:10:46:24:b4:38:23:32:
                    74:a5:07:ac:da:03:d8:fb:67:b3:4e:9f:1c:2e:52:
                    22:41:9b:7d:34:06:8e:03:51:7d:7b:27:98:be:d2:
                    2b:5e:e1:b5:23:9b:3f:6a:2b:b4:6d:73:99:0c:f7:
                    ba:6f:d5:4b:01:6d:8c:09:88:d4:2d:3a:a8:91:e5:
                    03:bc:36:a4:71:4c:e0:8f:8f:a3:10:5e:8a:2f:12:
                    7d:bb:74:0c:42:5d:56:47:6b:da:5e:ab:9d:e0:a3:
                    8d:64:90:9a:5c:bb:7e:ca:16:9b:3f:f3:79:00:db:
                    94:9e:30:a7:31:fd:41:36:93:8e:a8:bf:0a:91:38:
                    35:86:96:2d:db:a8:3d:ac:58:bb:79:a3:be:df:9b:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:BB:FC:A7:38:7F:CA:03:B0:54:A0:4F:A9:FA:12:31:44:74:DD
            X509v3 Authority Key Identifier:
                keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:57:a3:a3:09:ba:6a:63:5d:14:70:ec:c2:d1:0f:0e:c6:87:
         3b:32:c1:dd:3e:93:a0:02:b6:ec:98:bc:37:a3:fd:c3:f6:60:
         44:61:51:9e:8a:36:38:5c:87:3c:16:4c:4f:ae:28:74:90:b2:
         9b:e9:e3:64:72:fd:db:1e:2a:c3:c1:52:13:21:9b:d7:95:41:
         45:62:6f:30:c4:35:26:0e:62:06:2f:18:a3:14:c0:19:6b:c5:
         94:76:19:43:95:c9:f1:5d:0b:1b:57:65:8f:30:60:8f:3b:0c:
         f6:2e:53:fc:4c:e1:7f:6d:52:42:fe:7a:10:b4:51:da:95:44:
         69:bf:70:77:51:42:67:a3:89:bc:42:46:80:a7:e1:3b:00:be:
         38:26:d5:85:54:27:f5:79:bc:88:dc:04:af:f9:30:c6:5e:3c:
         34:0b:da:95:cc:99:06:91:91:e8:06:0c:0a:06:74:16:56:45:
         b7:2e:c7:12:6c:9d:af:06:50:75:a3:0f:5d:ae:33:04:23:3c:
         3f:f7:41:a1:a7:dd:8d:ca:e9:ff:f5:bf:aa:33:62:7e:37:37:
         1a:1e:72:9e:f8:d0:e0:4f:8c:a8:04:ff:87:39:3a:f5:7a:ad:
         e4:c3:8e:76:be:c6:81:40:57:e3:8b:ab:44:eb:9a:9f:3a:fb:
         9e:c0:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:26:10 2026 by rpki-client