Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File:                     GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier:          FK2ZjTQMRrcguAhOKHJmzHAF8XjskaWrrJVmUKsIqkI=
Subject key identifier:   18:24:14:A9:02:61:5C:B2:A0:47:FB:05:E8:4B:10:65:63:DF:A1:80
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer:       /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial:       1B0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number:          1ADE
Signing time:             Tue 28 Jul 2026 16:24:04 +0000
Manifest this update:     Tue 28 Jul 2026 16:24:04 +0000
Manifest next update:     Tue 04 Aug 2026 16:24:04 +0000
Files and hashes:         1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: ZxdHm2mocIc04aP8J0Gsj18/+ix3o+D0I+N8tOZKvI8=)
                          2: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
                          3: CF4E04A6639A11F1BC9896E97047A888.roa (hash: AHKgPDalvgbP0KjwpNMKO/iAmjTMQ6+zGyM2geiYq3Y=)
                          4: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
                          5: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6922 (0x1b0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
        Validity
            Not Before: Jul 28 16:24:04 2026 GMT
            Not After : Aug  4 16:24:04 2026 GMT
        Subject: CN=6a68d7a4-1569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:bc:8b:0e:80:ab:99:3c:66:83:c1:ed:60:
                    fc:cc:15:1b:39:28:58:2d:cc:f5:4a:44:1f:67:f1:
                    b8:48:e2:35:67:77:2f:f0:59:84:58:0c:f7:55:c4:
                    8f:ce:91:2c:e5:2e:4d:9d:61:f0:e2:2d:60:27:5a:
                    71:e7:b7:4d:fc:a4:1c:8a:0e:f2:04:70:68:4d:44:
                    38:17:19:29:30:15:a2:b8:d1:d8:ba:59:76:be:b0:
                    d4:8e:d5:98:33:2c:5b:f2:0e:0a:93:dd:bd:7e:ea:
                    31:68:c3:81:7e:48:97:ca:bb:bd:ca:ff:d0:9d:2e:
                    eb:fe:60:3c:fe:af:0e:ef:e5:90:8e:f1:3e:7b:04:
                    a1:1b:50:70:5b:e5:17:6c:49:c4:61:87:ef:84:c5:
                    a9:fb:24:a9:f7:cb:f0:b7:b5:23:28:c4:53:85:3d:
                    af:db:2c:ff:88:1d:6d:7a:18:bc:05:ad:57:09:81:
                    b3:48:83:85:9d:f4:34:19:d7:46:be:a0:8c:31:cd:
                    ad:2c:ed:a4:37:01:a6:9e:be:4c:f1:35:8f:7c:c0:
                    09:98:94:db:6b:88:eb:1b:10:dd:8b:21:42:fe:1b:
                    4f:66:91:fc:52:92:00:67:15:84:7e:71:ff:c1:92:
                    9d:66:24:47:59:e4:51:3d:52:0e:a2:3c:d3:a7:56:
                    69:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:24:14:A9:02:61:5C:B2:A0:47:FB:05:E8:4B:10:65:63:DF:A1:80
            X509v3 Authority Key Identifier:
                keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:90:b8:f3:3c:a1:41:00:f8:78:0b:64:f7:0a:09:97:95:a3:
         ae:1a:91:68:5d:0e:1f:bf:41:58:cd:1f:dd:4b:31:bf:aa:c8:
         ae:7f:84:53:cc:11:36:3e:12:e8:60:a2:1f:88:fd:c3:15:d3:
         31:85:04:34:fd:84:0d:b3:a0:9d:1c:b2:de:bf:1a:d3:e3:e0:
         bc:0f:82:a2:f6:53:23:fd:33:c3:d0:b9:31:72:26:74:5f:54:
         8b:10:19:85:34:9a:11:7e:1c:3c:7c:9d:20:91:86:73:af:47:
         1b:f9:8b:75:f8:35:6d:23:b2:27:fe:82:02:df:1d:b7:99:88:
         cd:e7:5b:84:e9:23:e9:c1:65:21:d9:85:d1:ce:96:17:ab:0f:
         1d:1f:01:ee:99:f8:01:42:c7:85:53:b3:bf:81:f6:11:4d:68:
         cd:31:ee:9a:ca:da:c9:4b:3e:0b:09:9d:95:d8:b0:84:75:e8:
         eb:af:98:cc:20:81:da:4a:c6:e5:3b:53:1e:27:41:65:1f:77:
         9e:10:1e:80:e3:54:f1:e8:6f:1f:93:62:68:31:9d:b9:0c:23:
         7f:95:4f:81:9f:b1:1c:6d:d2:63:63:e5:da:1f:92:1b:9f:27:
         1c:5e:e8:77:9e:2a:27:11:cf:07:d0:b6:cb:18:07:93:0c:51:
         3d:44:27:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:28 2026 by rpki-client