Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File:                     GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier:          +PoOTDqjbVWH4V4CCkdR23MkGjCk2HZYbj8HY11pAcs=
Subject key identifier:   35:2F:3F:3A:27:B9:CE:E2:8D:FC:05:D6:89:C9:21:75:10:89:62:87
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer:       /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial:       0371
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number:          0368
Signing time:             Mon 27 Jul 2026 02:01:14 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:14 +0000
Manifest next update:     Mon 03 Aug 2026 02:01:14 +0000
Files and hashes:         1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: OBXxUhxYtiWwDbqTBKN6eFaVn0WS0tkiSnHJp1v9Ulw=)
                          2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: XduLMfOTlu5b31dWGwP8GqlgYSkiZV7iaoNBfx7mKds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
                          rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
        Validity
            Not Before: Jul 27 02:01:14 2026 GMT
            Not After : Aug  3 02:01:14 2026 GMT
        Subject: CN=6a66bbea-77bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:78:da:78:db:d0:13:fc:a2:47:71:f8:c9:
                    e4:ad:1d:60:e2:4e:3a:e2:53:3b:13:73:c2:84:b1:
                    67:f8:0f:3a:e9:b5:e7:4b:64:b7:52:b9:4e:85:e8:
                    86:44:9f:25:e3:46:ad:c7:f3:4b:ca:3c:ef:ee:ae:
                    81:c6:a5:ae:df:ab:b5:d2:1b:bb:a3:b4:51:db:c3:
                    d6:07:41:9c:3e:4f:e3:3c:c5:02:ff:66:d1:74:4f:
                    79:a2:88:14:76:e0:b1:98:e5:8d:57:24:7b:18:b8:
                    43:8c:91:ce:d4:be:9a:eb:43:c1:78:4c:29:b3:a8:
                    9d:08:27:eb:42:45:e5:d7:cb:bd:71:ca:5f:0d:2b:
                    e9:4f:7a:57:3a:19:85:9e:22:aa:f0:42:14:ea:e3:
                    28:a5:57:a6:6c:ea:ed:1f:c2:af:16:ff:2c:76:56:
                    2e:a2:13:c8:a0:f2:1b:68:46:a8:b1:47:53:4d:92:
                    05:68:24:b5:7a:de:de:f3:2d:23:8d:0a:ca:ee:e5:
                    87:c2:a6:bb:e6:5d:03:a5:26:44:41:6e:5b:9e:05:
                    90:d2:e9:3f:11:10:ff:bc:5f:d0:a9:0b:ad:7d:3d:
                    2a:d8:17:3b:8d:40:6e:ee:89:57:cf:0b:ad:47:d9:
                    4a:98:30:f3:68:e6:1b:3c:8a:eb:b4:c2:e2:e0:13:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2F:3F:3A:27:B9:CE:E2:8D:FC:05:D6:89:C9:21:75:10:89:62:87
            X509v3 Authority Key Identifier:
                keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ab:2c:27:39:6f:0d:75:83:7b:36:52:ac:6e:c6:d9:eb:fd:
         3a:de:a8:72:71:0c:63:14:38:d5:67:b7:f0:8b:ca:db:cd:1e:
         d1:7c:37:2f:4b:cc:b1:66:78:fd:d3:1c:3f:40:e5:9e:63:7f:
         70:d9:95:41:04:7d:0c:80:d4:f6:9e:ec:f0:25:f7:b7:5c:6c:
         d3:f7:9a:50:a9:f4:74:64:04:22:f0:03:fb:6c:20:0a:4e:55:
         c3:46:a3:5a:3b:a2:41:50:8e:14:3a:87:60:e2:4b:9a:f1:c0:
         3c:87:8c:ef:d5:e5:a0:cf:3a:6b:ed:aa:c8:df:83:42:71:56:
         be:34:f1:da:48:30:53:5a:5d:1e:7a:d3:99:9b:16:ab:10:c2:
         02:26:c9:62:0f:7a:9c:90:aa:88:5b:0e:c4:ef:20:e1:93:1e:
         4d:f9:7c:15:07:0d:bb:4b:ab:e1:2f:21:7c:b7:15:e2:bc:57:
         5a:c8:d4:fc:96:16:2b:ef:b0:34:55:99:c6:69:b9:fe:b4:e8:
         3f:c7:65:2a:de:07:0e:9a:a5:1f:35:60:6f:bb:1f:bb:c2:73:
         70:67:e6:82:e6:68:60:70:48:5e:eb:1d:40:ef:1c:48:84:dd:
         e4:61:eb:ad:40:e4:79:25:82:12:42:ee:1e:73:70:7d:db:8a:
         43:85:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:06 2026 by rpki-client