Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File:                     GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier:          fglxfofpNy5cAFlW0WziD8ixjRI+1BWhcOq7tO3VEmM=
Subject key identifier:   E1:5E:68:75:25:E1:B8:FD:25:70:7F:87:85:8A:A8:89:6A:CE:0B:86
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer:       /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial:       074D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number:          0745
Signing time:             Mon 31 Aug 2026 21:47:32 +0000
Manifest this update:     Mon 31 Aug 2026 21:47:32 +0000
Manifest next update:     Mon 07 Sep 2026 21:47:32 +0000
Files and hashes:         1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: kr2p9BqSdAzUKS90v/1KZTBSidGaMqdvQhKYjpeNkCg=)
                          2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: eF7WHknI0eZOeY9lXXHcZswtX5mV5ksWgKk1Ub9IVNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
                          rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 21:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869 (0x74d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
        Validity
            Not Before: Aug 31 21:47:32 2026 GMT
            Not After : Sep  7 21:47:32 2026 GMT
        Subject: CN=6a95f674-e39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:93:1b:47:1d:a5:0e:15:ba:ab:03:57:72:46:
                    40:97:35:c5:18:bf:a2:01:2e:ce:d5:86:8e:d8:b8:
                    63:74:f1:89:b8:f4:59:4c:a2:6c:81:bf:08:46:20:
                    51:9a:20:9e:3b:b5:e9:01:af:ee:3a:3d:36:ac:59:
                    71:88:ac:18:9b:e4:cf:0e:f6:a6:73:3e:25:f4:f0:
                    80:65:92:3a:20:b8:bf:3e:24:17:eb:93:49:3c:51:
                    28:4b:14:09:d7:e9:a6:72:d0:82:48:a8:7d:e7:f0:
                    0b:76:a0:3b:9e:c0:3f:29:4c:a3:b8:d6:6a:83:6f:
                    e7:b7:f7:61:25:1a:e8:d0:18:cc:35:54:89:13:b2:
                    98:44:85:be:8e:a4:32:60:ca:27:e0:2a:63:9a:9a:
                    e4:a0:c7:31:cd:4f:38:aa:89:b3:7e:b6:c6:9f:6b:
                    9f:e6:45:e3:ef:c7:89:34:f5:60:15:f7:d9:b2:c8:
                    b3:d4:28:e0:32:a7:07:08:71:5e:d4:cb:0f:f7:ef:
                    4b:8c:53:12:9a:e6:23:41:12:02:01:e2:e1:55:ba:
                    38:79:fa:bb:69:25:1f:57:ad:ec:5b:d1:7a:a2:66:
                    aa:27:72:f1:8c:01:83:a9:4c:40:f4:5c:56:cc:1a:
                    d3:2c:17:3d:74:fb:ed:c8:54:65:49:d9:d2:6c:5d:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5E:68:75:25:E1:B8:FD:25:70:7F:87:85:8A:A8:89:6A:CE:0B:86
            X509v3 Authority Key Identifier:
                keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:52:e3:12:a7:f0:ec:ee:ad:2b:0a:4c:3b:02:79:50:d9:23:
         74:7d:d2:25:a3:55:1e:5a:8d:18:62:94:06:55:e6:1e:93:bd:
         3e:b8:dc:68:df:ee:30:95:1c:f5:d8:8e:ea:44:d6:0a:2c:bf:
         52:d0:b0:2a:28:91:ad:fb:95:a0:33:76:72:57:b4:58:06:fe:
         71:d9:12:27:0d:53:4e:85:ef:4a:bf:bb:4c:a9:2c:93:83:74:
         52:10:4b:1d:aa:1d:f5:19:73:15:55:af:02:e8:8b:17:a5:74:
         72:6a:7b:e5:19:5d:77:d8:3e:a4:38:19:a9:45:13:3f:b6:ef:
         a7:d2:a9:75:cb:72:a1:ea:34:f9:bf:3b:25:58:c2:8a:74:b6:
         77:2b:74:81:28:cf:ff:08:7d:2f:66:1b:eb:e0:1b:36:3e:ca:
         95:b8:70:8d:09:c5:27:d9:29:ce:b3:24:56:b4:21:a7:43:b7:
         97:2e:78:42:be:08:8a:91:aa:30:33:39:10:23:e4:73:c5:34:
         8e:05:ac:e5:23:5e:9f:e8:9e:09:fd:80:7c:12:e4:a9:26:2a:
         6e:18:39:3c:a2:5e:9e:a3:dd:76:0f:4e:4d:72:55:3a:40:a7:
         5f:31:3e:cd:20:f6:2f:46:0d:1c:cc:5b:f5:71:0d:55:eb:26:
         e6:2c:e9:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy
NzhGMEJGNzEwHhcNMjYwODMxMjE0NzMyWhcNMjYwOTA3MjE0NzMyWjAYMRYwFAYD
VQQDEw02YTk1ZjY3NC1lMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5MbRx2lDhW6qwNXckZAlzXFGL+iAS7O1YaO2LhjdPGJuPRZTKJsgb8IRiBR
miCeO7XpAa/uOj02rFlxiKwYm+TPDvamcz4l9PCAZZI6ILi/PiQX65NJPFEoSxQJ
1+mmctCCSKh95/ALdqA7nsA/KUyjuNZqg2/nt/dhJRro0BjMNVSJE7KYRIW+jqQy
YMon4CpjmprkoMcxzU84qomzfrbGn2uf5kXj78eJNPVgFffZssiz1CjgMqcHCHFe
1MsP9+9LjFMSmuYjQRICAeLhVbo4efq7aSUfV63sW9F6omaqJ3LxjAGDqUxA9FxW
zBrTLBc9dPvtyFRlSdnSbF0HjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOFeaHUl
4bj9JXB/h4WKqIlqzguGMB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1
RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv
UHpfdVZqLU9hZ29uand2M0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApFLjEqfw7O6tKwpMOwJ5UNkjdH3SJaNVHlqNGGKUBlXmHpO9PrjcaN/uMJUc
9diO6kTWCiy/UtCwKiiRrfuVoDN2cle0WAb+cdkSJw1TToXvSr+7TKksk4N0UhBL
Haod9RlzFVWvAuiLF6V0cmp75Rldd9g+pDgZqUUTP7bvp9Kpdctyoeo0+b87JVjC
inS2dyt0gSjP/wh9L2Yb6+AbNj7KlbhwjQnFJ9kpzrMkVrQhp0O3ly54Qr4IipGq
MDM5ECPkc8U0jgWs5SNen+ieCf2AfBLkqSYqbhg5PKJenqPddg9OTXJVOkCnXzE+
zSD2L0YNHMxb9XENVesm5izpXA==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:34:09 2026 by rpki-client