Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
File:                     G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft (raw, json)
Hash identifier:          sz1+oDlnDnekFNhFLXFPbLXGUV9uBvCkz735pjhfc2c=
Subject key identifier:   77:2C:0F:81:20:45:7A:FC:C9:C7:22:5E:E7:10:B0:88:B1:CD:FA:03
Authority key identifier: 1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52
Certificate issuer:       /CN=A91F67BB/serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
Certificate serial:       1243
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
Manifest number:          1213
Signing time:             Tue 28 Jul 2026 17:14:11 +0000
Manifest this update:     Tue 28 Jul 2026 17:14:11 +0000
Manifest next update:     Tue 04 Aug 2026 17:14:11 +0000
Files and hashes:         1: G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl (hash: R2d+CPBmePZCL87B+ULRDKSN6AOm02FQ+GVT3RRcqd4=)
                          2: FAC7FE320F0311E997412A4EC4F9AE02.roa (hash: ltuiI8TZuMv/G/t/Ztpq7bP81fIn8XtBMrkmf8/fbBQ=)
                          3: FB675E140F0311E997412A4EC4F9AE02.roa (hash: WZDgNlhW0pwPMejNqxRBtwXZLqcsEeCsrEz1azRWYbQ=)
                          4: 294F19380E5111E988F3C34BC4F9AE02.roa (hash: 2Hp6M6BntVmhWo1ReGblit19qNRWTDvqJP9qHcur32s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4675 (0x1243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F67BB, serialNumber=1BF5A8D94CE06CE301FC35D869F70D740D709752
        Validity
            Not Before: Jul 28 17:14:11 2026 GMT
            Not After : Aug  4 17:14:11 2026 GMT
        Subject: CN=6a68e363-f3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dc:87:7f:e6:c2:c1:4c:f0:95:cc:c4:15:6f:
                    6e:0f:43:96:e6:74:a0:41:4b:95:32:97:f1:c9:b5:
                    8c:59:3b:ce:94:b1:de:d6:b7:37:50:ee:49:1f:4a:
                    27:c7:fe:02:7d:f4:0d:fc:f7:54:d1:b5:12:de:23:
                    80:63:a5:e1:4f:5f:5a:d7:ec:bf:70:40:9d:9e:8f:
                    fb:ce:9a:0b:48:fd:0b:10:3f:45:25:8a:b3:cd:04:
                    40:37:39:d6:3c:b2:a6:18:1c:5c:c6:12:47:e4:da:
                    4c:38:0b:e2:b8:e9:80:f9:7f:c2:49:a5:cd:3e:86:
                    b9:9f:95:38:2a:93:94:10:f4:05:14:f6:e5:36:53:
                    fd:f5:6a:5f:1a:ce:07:95:3d:ec:ac:4a:ba:c3:7d:
                    f7:7d:10:30:bf:f5:ab:ac:30:1b:9e:82:f2:60:8a:
                    e8:ba:70:5e:37:f6:85:4b:0f:b9:d8:9c:5e:9e:2a:
                    cc:af:f8:2a:ea:d8:98:48:6a:27:de:67:27:a4:f0:
                    12:72:63:0c:66:b5:ec:db:74:99:b2:04:3a:0f:92:
                    60:d0:25:18:17:07:70:eb:42:6b:a7:06:32:d2:ba:
                    7a:b3:ed:6e:0d:79:32:44:8d:b9:0f:b0:a3:9a:de:
                    cd:49:01:f0:6d:25:34:fc:ba:e3:33:d4:66:b7:fd:
                    a7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:0F:81:20:45:7A:FC:C9:C7:22:5E:E7:10:B0:88:B1:CD:FA:03
            X509v3 Authority Key Identifier:
                keyid:1B:F5:A8:D9:4C:E0:6C:E3:01:FC:35:D8:69:F7:0D:74:0D:70:97:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_Wo2UzgbOMB_DXYafcNdA1wl1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/C9DB89EE0E3E11E9836F4014C4F9AE02/G_Wo2UzgbOMB_DXYafcNdA1wl1I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:41:15:c5:bf:d0:18:92:f2:1d:c8:ad:05:8a:1b:40:19:ff:
         8a:ee:3d:93:4d:a7:2d:87:37:17:90:15:c9:65:3b:48:a6:83:
         c6:a2:a1:c6:93:27:03:67:7c:a4:62:02:84:87:b3:88:19:e8:
         82:a7:f4:89:92:6d:0c:de:06:ef:97:6b:f4:ee:b6:d6:59:03:
         e1:fb:b2:5d:ae:d1:e2:67:24:76:0b:3e:98:5c:e3:3b:03:75:
         c9:fc:15:33:1c:c7:54:42:4a:9a:8a:85:28:d7:bb:2d:c4:07:
         1d:13:0c:a7:ff:3d:6d:70:df:db:1c:24:13:e4:d8:9a:90:67:
         23:cb:4c:be:b7:c3:fc:9c:48:c4:1f:93:c6:56:6a:37:1f:e5:
         d8:c3:7c:2e:31:e0:06:e1:bc:c5:61:38:ca:91:f0:10:e4:20:
         a9:d3:39:97:e5:e5:30:c8:ee:3c:d5:d9:c7:d2:e1:fa:30:b1:
         e5:11:9e:36:9f:86:b4:a3:56:9f:c5:16:09:01:a0:10:da:90:
         7a:3d:ff:0a:a3:88:c9:ef:cb:1a:27:54:1f:b4:2b:34:17:28:
         e7:d9:1d:05:fa:fe:05:08:40:92:c6:e6:8e:b8:60:e0:1f:66:
         c2:30:8b:91:00:dd:19:f5:dc:d9:c7:78:53:46:fd:3e:88:96:
         29:ec:da:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:05:56 2026 by rpki-client