Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
File:                     Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft (raw, json)
Hash identifier:          z//H8B8MeBOmw/6jtNsesa28A/L3dDMzMm3u/IBmRJE=
Subject key identifier:   3A:5D:C3:5F:C7:21:CC:AC:1C:7C:3D:66:12:FA:1C:6F:BA:4A:CC:9E
Authority key identifier: 1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82
Certificate issuer:       /CN=A91D3834/serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
Certificate serial:       0819
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
Manifest number:          0803
Signing time:             Tue 28 Jul 2026 21:44:02 +0000
Manifest this update:     Tue 28 Jul 2026 21:44:02 +0000
Manifest next update:     Tue 04 Aug 2026 21:44:02 +0000
Files and hashes:         1: Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl (hash: TK/arGpPIyUv89T6QTDeGQL07k/P8S7d5/GZFgCXyuQ=)
                          2: F26505A6A7EA11EF8CBCCF2CC4F9AE02.roa (hash: gFpOQJ7daM5uiSgk6tlT5tpNz4O4jsVXIh/45TS6lk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl
                          rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 21:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3834, serialNumber=1A0D0BFA191911F855B5BABDFA03B9C07FDD2282
        Validity
            Not Before: Jul 28 21:44:02 2026 GMT
            Not After : Aug  4 21:44:02 2026 GMT
        Subject: CN=6a6922a2-32c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:8b:ac:0e:d8:05:46:fb:67:4c:02:71:96:
                    b5:f1:46:69:bf:d4:d0:00:06:fb:9d:83:fe:23:c6:
                    ab:b2:d7:ce:50:52:36:0b:1e:4a:e8:27:03:19:f0:
                    97:81:a2:55:f4:c1:6e:9f:b2:bd:98:f8:a1:95:61:
                    b3:51:c6:4f:e5:95:69:a1:d1:52:42:35:7c:f6:29:
                    c2:a4:58:cd:f1:34:11:f7:2b:fe:8d:a7:b2:be:e2:
                    74:9c:e2:b5:8f:b4:26:96:1d:33:4b:97:36:bc:c2:
                    45:d9:b0:3c:6d:a2:27:9d:0a:52:dd:d6:ef:d0:08:
                    2f:73:31:0e:e5:ae:6e:2a:70:af:68:68:29:6a:26:
                    c8:92:92:26:0c:96:48:24:7b:b8:f2:3a:1b:64:d1:
                    56:89:db:77:f9:eb:ba:5b:a8:1b:d3:72:ba:a4:86:
                    28:60:06:1f:f9:fc:dd:d5:b6:ec:3a:fa:7a:2c:52:
                    3c:e1:d2:ad:eb:68:5a:e9:39:55:ee:8f:87:ca:72:
                    35:cf:87:69:5a:05:e0:68:84:94:64:97:12:e8:ab:
                    fc:25:95:b2:11:3a:11:cf:9c:ac:f1:83:84:f5:0c:
                    2c:57:68:9b:43:2b:4b:38:4e:b3:07:7e:1f:1e:5a:
                    2d:dc:7c:48:44:2b:0b:91:48:1c:f2:fa:22:b8:f5:
                    93:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:C3:5F:C7:21:CC:AC:1C:7C:3D:66:12:FA:1C:6F:BA:4A:CC:9E
            X509v3 Authority Key Identifier:
                keyid:1A:0D:0B:FA:19:19:11:F8:55:B5:BA:BD:FA:03:B9:C0:7F:DD:22:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3834/8BC2EDB03A4111EB83B57F14C4F9AE02/Gg0L-hkZEfhVtbq9-gO5wH_dIoI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a3:4a:3d:5e:e9:71:5e:13:ee:4d:1f:b4:db:c3:97:f5:9d:
         c1:a0:77:d7:27:46:43:7d:2b:fd:30:cc:6b:9e:10:10:fd:6c:
         4b:ee:61:65:17:02:31:37:83:5b:05:6e:fe:96:fb:f4:8b:85:
         22:d7:15:87:89:b1:3c:2d:b7:88:28:95:9f:eb:b0:7d:91:2f:
         92:83:37:33:f3:14:9c:ce:a7:80:c1:0c:bb:d1:e4:7f:17:ee:
         8b:da:09:ed:57:0c:f8:b8:5d:72:07:d3:44:6d:d7:67:38:33:
         36:9f:39:cf:18:21:ad:c2:4d:8e:3e:36:49:58:17:5b:fb:d2:
         b5:0a:e5:ac:e1:49:22:22:dc:68:8e:20:c7:a6:24:ec:00:8f:
         70:93:72:78:07:23:48:50:d5:9c:5f:92:91:21:55:39:c1:43:
         5d:a8:9c:47:f0:31:bd:92:24:6d:46:26:90:b2:8a:ba:ae:89:
         a5:2b:69:a6:8c:8d:34:05:9f:cb:df:ad:f7:c0:e0:09:97:f7:
         26:b0:2a:27:a3:32:f5:13:0f:cb:18:68:f2:9d:6a:c3:ff:e3:
         58:a6:dc:84:e6:7b:8f:a1:72:47:25:78:26:ca:e0:7f:d5:d1:
         f0:7f:f5:b5:cb:30:b8:6a:61:37:1b:9b:70:96:fb:3e:dd:4d:
         8e:d5:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:17 2026 by rpki-client