Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
File:                     GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft (raw, json)
Hash identifier:          kx2kk4q8EPgRuK5riFKEsVXHHcx4Pm4bqMKmO0mHQZs=
Subject key identifier:   BC:C6:8A:6C:DA:68:8C:1E:D4:CB:64:05:25:85:C3:BE:E7:D1:E4:60
Authority key identifier: 18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93
Certificate issuer:       /CN=A9127D58/serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
Manifest number:          B3
Signing time:             Tue 21 Jul 2026 08:53:12 +0000
Manifest this update:     Tue 21 Jul 2026 08:53:11 +0000
Manifest next update:     Tue 28 Jul 2026 08:53:11 +0000
Files and hashes:         1: GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl (hash: jWbX0nJV1ZnAB6/cAIOPjrNsgLd65CXnIc1w10Vd+Ak=)
                          2: E09D5D9C7F0711F092740742C4F9AE02.roa (hash: FRx1ILrXRk/D6NM37DgKlOP8QzRDUYGOaHdxxmU119o=)
                          3: 7B86E2347F0711F0B9016941C4F9AE02.roa (hash: RJ2sx6p2KIpfuzWkhVi9i2Tb6z+LWx+fgMZmXi47440=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl
                          rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127D58, serialNumber=183FA90DC3556C1D16568EBEBB18E2FC5A781D93
        Validity
            Not Before: Jul 21 08:53:11 2026 GMT
            Not After : Jul 28 08:53:11 2026 GMT
        Subject: CN=6a5f3378-be2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:31:33:a7:46:89:2d:a8:55:e6:a0:e8:c1:
                    50:fd:8e:56:50:76:15:b0:dd:11:f5:23:c4:ae:b8:
                    2a:1f:69:a7:6f:cc:de:65:72:19:86:89:5c:ea:9e:
                    f1:10:db:56:c7:f9:f6:d8:ed:12:9f:9f:a7:65:c3:
                    48:c7:44:af:ea:b2:ce:9f:4b:a4:17:88:b0:21:b4:
                    8a:e7:ba:17:a7:4f:a2:3b:7e:26:77:87:99:2d:00:
                    eb:a5:05:f0:66:8a:24:10:ee:63:d5:6c:11:ac:00:
                    60:18:e2:c9:97:ac:8b:48:41:8c:fc:e5:93:fe:ac:
                    90:dc:35:52:3a:b4:d6:11:3a:e4:38:a0:8c:8a:7d:
                    8c:fd:8c:b6:20:d3:38:2f:be:be:86:5e:af:82:7d:
                    b2:95:d2:3e:90:80:db:db:91:b6:bf:da:09:86:15:
                    cc:b9:4d:4b:00:d3:a0:bd:8d:ce:6f:c2:e8:be:f7:
                    e8:67:e6:cb:d7:97:8f:e6:c4:4d:da:b7:0e:6c:8d:
                    b6:40:1e:bb:7d:96:cd:fc:30:18:2c:64:c2:db:74:
                    e5:38:b7:a7:64:61:50:d4:ff:27:e8:e4:49:14:44:
                    78:a8:43:12:b7:fd:0d:2c:38:bc:39:f5:5c:1f:85:
                    73:96:36:c7:79:1f:8c:86:ef:3c:1a:9f:6d:e0:6b:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C6:8A:6C:DA:68:8C:1E:D4:CB:64:05:25:85:C3:BE:E7:D1:E4:60
            X509v3 Authority Key Identifier:
                keyid:18:3F:A9:0D:C3:55:6C:1D:16:56:8E:BE:BB:18:E2:FC:5A:78:1D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GD-pDcNVbB0WVo6-uxji_Fp4HZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127D58/59D06A127F0611F09520593AC4F9AE02/GD-pDcNVbB0WVo6-uxji_Fp4HZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:8b:0f:1d:91:b1:ef:77:2d:26:75:d0:bc:96:f1:47:ce:
         56:34:d4:86:7e:aa:0e:b3:d4:a1:69:f8:ac:38:4f:eb:ad:8b:
         44:90:b5:57:49:0a:ec:02:92:d1:de:9a:11:f9:00:26:2e:20:
         6b:30:31:8d:36:41:e0:b8:8d:0c:19:8c:4e:6d:3e:16:3e:12:
         3d:22:5e:bd:c8:b6:a6:98:fc:2f:53:9d:26:34:a4:56:fe:63:
         40:2f:24:f4:d4:0d:ce:49:08:88:de:67:dc:b4:90:63:c2:e0:
         0a:bb:e8:c2:7b:f9:e0:f2:61:f5:a7:62:88:09:35:6a:1b:b4:
         8e:ba:4c:c7:ef:aa:4b:f3:66:f0:0b:6b:df:c9:3c:c0:01:c7:
         ce:7f:a5:e7:5b:e1:a3:14:70:bb:08:df:3f:05:fe:a5:07:0f:
         72:ca:f2:f0:bd:64:b3:7c:9a:ac:28:e6:9e:98:8e:d0:b1:48:
         19:88:70:0c:61:ce:14:ce:31:59:78:61:d2:a2:9f:ac:9b:fd:
         75:04:d4:3d:99:bb:60:6e:a0:ca:f0:ef:77:86:c6:a8:63:db:
         ae:8f:28:de:5c:bf:f3:ef:34:2e:6b:e0:ec:0f:b5:74:7c:ad:
         1e:a6:b0:71:04:25:da:f7:44:18:78:c6:24:86:5e:50:8b:8c:
         11:09:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:39 2026 by rpki-client