Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
File:                     Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json)
Hash identifier:          VAsweVXAF1Q6f/P3QY7496NrWw9n/H+4u6QYTNZGU78=
Subject key identifier:   4B:0D:F3:58:94:CE:0F:D5:FC:0D:92:DE:9F:EE:94:F6:5B:8B:ED:34
Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
Certificate issuer:       /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Certificate serial:       0510
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
Manifest number:          0508
Signing time:             Mon 27 Jul 2026 00:39:54 +0000
Manifest this update:     Mon 27 Jul 2026 00:39:54 +0000
Manifest next update:     Mon 03 Aug 2026 00:39:54 +0000
Files and hashes:         1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: 1quqjILXQvcAiguKbPS2on4aAT5it/0ldggbrIS93u4=)
                          2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: ILh6gBpWmKd6LulzCB0yMdg50i5ZW69Oilb8luyg8cA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
                          rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:39:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
        Validity
            Not Before: Jul 27 00:39:54 2026 GMT
            Not After : Aug  3 00:39:54 2026 GMT
        Subject: CN=6a66a8da-af3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:d5:c5:88:d0:7b:99:64:35:76:03:67:70:
                    77:f0:14:5d:e0:7e:67:3e:fe:5e:e2:66:48:23:4e:
                    a6:6f:3e:19:ee:a9:17:07:43:ff:3c:1b:69:7f:c2:
                    0f:3b:34:e2:78:75:30:35:9e:ab:de:c2:14:ef:34:
                    dc:24:2f:5a:a1:66:50:50:f4:96:1c:99:52:3b:f8:
                    72:95:e0:95:2b:60:22:10:15:9f:c1:8c:87:e9:41:
                    ca:a1:cd:05:6b:e2:4a:80:f6:48:1e:29:29:8c:30:
                    c8:74:dc:77:65:61:17:4c:cd:24:b4:c0:cc:61:f8:
                    7e:c7:b7:26:6c:4d:37:c8:a9:bc:d9:53:99:c2:b8:
                    04:39:c6:54:d9:41:c1:b0:81:94:b9:84:05:6f:08:
                    de:6b:4a:65:a1:42:97:4b:a8:7d:8f:ce:04:5f:f5:
                    e8:c0:58:40:a8:18:6a:cc:9b:9f:fb:39:86:c6:4f:
                    b6:bd:60:69:46:77:22:98:95:af:40:bb:c9:29:6b:
                    3b:ee:df:1b:15:24:d9:4c:88:39:3b:8d:80:12:b3:
                    08:d4:0d:76:ee:da:f4:2e:e3:1c:94:8a:6d:50:58:
                    2a:64:ae:41:29:e0:33:3c:91:35:7f:a0:a6:ad:b9:
                    75:73:02:65:99:2b:64:04:97:c3:0b:ba:f9:05:4a:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:F3:58:94:CE:0F:D5:FC:0D:92:DE:9F:EE:94:F6:5B:8B:ED:34
            X509v3 Authority Key Identifier:
                keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:37:bb:36:60:e3:79:fc:df:09:3c:97:6a:ec:b3:0f:1e:fc:
         17:78:3b:1d:26:18:64:7f:27:c4:de:6b:e7:36:98:d8:df:55:
         4b:ec:5f:3a:5e:93:62:de:b1:71:88:d3:a3:4a:a3:a4:ba:16:
         71:b3:8e:9f:a6:45:b2:fb:69:7d:b8:4f:67:d2:6b:95:b7:90:
         8d:b6:8d:59:cd:ed:39:8a:e5:9a:09:bd:47:d8:4a:34:45:8a:
         78:01:28:df:42:e5:d7:31:2f:3f:46:f7:8b:bd:7a:a3:b3:ff:
         fc:ce:b3:05:cc:25:08:ab:d9:12:a6:72:32:c3:d1:98:03:55:
         5f:01:72:65:f9:9f:dd:69:bc:29:4d:7e:77:66:94:47:37:cb:
         b2:fd:b5:0a:b4:c9:a2:0c:16:f7:83:5e:8f:3f:10:42:fe:b9:
         df:b4:45:46:e7:82:a1:d7:38:3f:a7:14:d6:35:a2:04:2b:10:
         fe:75:cb:08:2f:30:1c:10:20:3c:59:2b:fa:69:a5:b8:8a:20:
         bd:23:f2:cc:79:7e:85:5d:40:e2:1e:b7:18:a9:4a:eb:f8:b4:
         52:4d:58:82:fa:75:84:8d:cd:6d:f8:d7:11:4a:54:a7:ba:89:
         3e:b3:f4:4f:2f:a1:39:13:2a:cb:fd:c6:7e:de:1e:83:22:41:
         91:35:4e:a2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4
RkY4QjNGQkMwHhcNMjYwNzI3MDAzOTU0WhcNMjYwODAzMDAzOTU0WjAYMRYwFAYD
VQQDEw02YTY2YThkYS1hZjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAreXVxYjQe5lkNXYDZ3B38BRd4H5nPv5e4mZII06mbz4Z7qkXB0P/PBtpf8IP
OzTieHUwNZ6r3sIU7zTcJC9aoWZQUPSWHJlSO/hyleCVK2AiEBWfwYyH6UHKoc0F
a+JKgPZIHikpjDDIdNx3ZWEXTM0ktMDMYfh+x7cmbE03yKm82VOZwrgEOcZU2UHB
sIGUuYQFbwjea0ploUKXS6h9j84EX/XowFhAqBhqzJuf+zmGxk+2vWBpRncimJWv
QLvJKWs77t8bFSTZTIg5O42AErMI1A127tr0LuMclIptUFgqZK5BKeAzPJE1f6Cm
rbl1cwJlmStkBJfDC7r5BUoz8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEsN81iU
zg/V/A2S3p/ulPZbi+00MB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy
MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2
NWlDTU55RVFpNDZQLUxQN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnDe7NmDjefzfCTyXauyzDx78F3g7HSYYZH8nxN5r5zaY2N9VS+xfOl6TYt6x
cYjTo0qjpLoWcbOOn6ZFsvtpfbhPZ9JrlbeQjbaNWc3tOYrlmgm9R9hKNEWKeAEo
30Ll1zEvP0b3i716o7P//M6zBcwlCKvZEqZyMsPRmANVXwFyZfmf3Wm8KU1+d2aU
RzfLsv21CrTJogwW94Nejz8QQv6537RFRueCodc4P6cU1jWiBCsQ/nXLCC8wHBAg
PFkr+mmluIogvSPyzHl+hV1A4h63GKlK6/i0Uk1Ygvp1hI3NbfjXEUpUp7qJPrP0
Ty+hORMqy/3Gft4egyJBkTVOog==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:57 2026 by rpki-client