Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
File:                     GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft (raw, json)
Hash identifier:          sTtFmLoFisyYQnXhEq9PNh6Qme2LPWJm7vkPn/Tjwpg=
Subject key identifier:   91:B6:B5:1F:6B:5D:70:B7:70:62:34:A6:3E:8B:1B:BC:13:1A:69:1E
Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
Certificate issuer:       /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
Manifest number:          AA
Signing time:             Mon 27 Jul 2026 09:25:15 +0000
Manifest this update:     Mon 27 Jul 2026 09:25:14 +0000
Manifest next update:     Mon 03 Aug 2026 09:25:14 +0000
Files and hashes:         1: GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl (hash: V3HEfN5N7s199pllMpYWWajnLru59g3oB0AzLjvQa64=)
                          2: DCD091AA93D111F0B0A32B0BC4F9AE02.roa (hash: hLi0saBOf2tkBmk0PdINKMJEWSLB4vAdQ079CKBQEa0=)
                          3: 55FD631C47C011F1B54DF0A9AE833773.roa (hash: OlpbqBifvJAJXFONTp1Hij7b0M5axKWFBNjZDQgzv/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 09:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
        Validity
            Not Before: Jul 27 09:25:14 2026 GMT
            Not After : Aug  3 09:25:14 2026 GMT
        Subject: CN=6a6723fb-a1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:4c:ea:5d:d3:f0:52:89:28:d1:2d:46:34:
                    28:6e:1d:ff:ec:00:5d:ef:86:10:c5:01:7c:58:2d:
                    c7:a3:5b:3c:46:0b:d0:31:de:83:03:76:af:11:e4:
                    58:df:79:fc:7e:40:de:e2:4c:52:c2:b7:e9:bb:3c:
                    ab:6d:c9:04:9b:ef:83:58:fd:2e:3b:6a:da:db:42:
                    98:ae:7b:0c:1b:da:a9:9c:01:b9:24:f2:4c:c8:39:
                    1e:76:ba:75:ad:d3:1b:39:5e:4d:85:1e:4c:7b:d4:
                    ef:dd:67:5b:42:20:3f:7e:dd:98:eb:a1:6e:1f:d3:
                    66:f7:b0:2e:99:95:dc:4f:45:6f:c0:cd:6c:b5:59:
                    be:1c:c9:a8:ae:c2:71:ab:c3:26:d4:6f:9d:71:28:
                    bf:ac:f1:13:ee:0f:7c:1f:01:79:7f:9f:35:17:85:
                    aa:c2:c1:c2:50:44:79:53:19:50:23:de:88:dc:f7:
                    68:c2:ff:63:71:12:60:7e:93:2c:f9:ca:22:4a:ca:
                    1a:c4:80:56:1a:dd:bc:e6:26:0f:21:1c:a7:d4:c3:
                    64:64:39:99:c2:89:f4:aa:db:15:84:c1:75:3e:a5:
                    28:1a:b3:ff:ef:32:29:34:ff:da:58:02:36:c3:58:
                    4b:25:2d:30:57:10:19:81:28:11:ba:cb:b1:0f:4f:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:B5:1F:6B:5D:70:B7:70:62:34:A6:3E:8B:1B:BC:13:1A:69:1E
            X509v3 Authority Key Identifier:
                keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a6:7f:31:03:71:43:7b:9a:31:a5:a5:b7:ee:54:b5:5d:39:
         43:85:33:c8:c8:74:f4:c6:af:5a:21:7c:51:ae:8a:a8:ac:b1:
         c9:66:a5:87:9c:a1:cc:4f:dd:25:51:51:33:7a:c9:49:b6:fd:
         ba:74:5e:e6:ad:e5:97:fd:b9:5f:8d:9b:63:75:94:12:7f:11:
         45:95:64:c5:4c:7c:aa:3a:00:4f:87:2e:d1:2d:12:53:37:74:
         c8:2f:e9:1b:7d:d8:06:25:31:6f:e6:05:97:90:78:ea:22:92:
         6c:5f:8d:b0:43:b1:b7:5c:f8:7e:44:a1:37:2a:9c:ae:8b:ea:
         10:9e:95:5e:e4:6a:ce:04:77:78:6e:f4:ea:44:ee:16:d2:8b:
         9b:c9:30:91:1e:7f:fc:e6:93:1d:55:a4:2e:ca:40:21:49:fa:
         d3:17:ef:8a:61:df:30:48:36:c5:53:fa:93:d1:78:e2:7c:3e:
         be:99:1c:02:61:0e:e8:f2:ad:9f:26:17:cc:a6:ff:27:3b:7a:
         d4:b5:3d:42:e7:7f:51:3d:1f:98:c7:c1:57:8f:5e:d5:17:15:
         b4:d0:33:b2:90:ee:87:35:97:49:01:38:b7:77:51:ec:22:17:
         6a:8f:01:24:17:9f:a1:3d:d8:d2:a4:30:22:d0:11:50:3c:22:
         66:cf:f3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:26 2026 by rpki-client