Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
File:                     GJHVTO9qkMIy_KiR45n5eDhnEe4.mft (raw, json)
Hash identifier:          e62hULuCdzP5pcdxiFGCOeyILhkwcHSe+Uwfid82SrQ=
Subject key identifier:   49:77:9D:B0:C9:B0:05:E4:58:86:A2:F9:05:4C:1E:79:56:C1:B3:06
Authority key identifier: 18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE
Certificate issuer:       /CN=A9128576/serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
Manifest number:          0121
Signing time:             Mon 03 Aug 2026 07:09:42 +0000
Manifest this update:     Mon 03 Aug 2026 07:09:42 +0000
Manifest next update:     Mon 10 Aug 2026 07:09:42 +0000
Files and hashes:         1: GJHVTO9qkMIy_KiR45n5eDhnEe4.crl (hash: DnED87qxCjURfenGR/28IlI8ZBQibiMEhHL52JYeNKg=)
                          2: C8BFCD96D7A411EF9AB81933C4F9AE02.roa (hash: n/hyIjFqCJzOht5Ju7CI7zedjM3U4KBE15I93wtTvdI=)
                          3: C9B06ECCD7A411EF9AB81933C4F9AE02.roa (hash: vmkU+Wc2xpDQMgPam/mAe6kA8brCuJz9cHHqu3MmaNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl
                          rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 07:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128576, serialNumber=1891D54CEF6A90C232FCA891E399F978386711EE
        Validity
            Not Before: Aug  3 07:09:42 2026 GMT
            Not After : Aug 10 07:09:42 2026 GMT
        Subject: CN=6a703eb6-5dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:e4:85:a5:68:0b:32:9c:01:3a:60:79:66:
                    ee:2b:0d:8e:5c:5c:00:8c:57:48:3f:d2:17:90:d6:
                    d4:4e:5e:99:9c:2c:18:04:73:4b:a8:95:0b:ff:99:
                    b9:7c:3c:2e:22:1c:e2:aa:f7:d9:ac:ae:d6:a8:f0:
                    cf:08:a1:b8:cf:4f:4f:f6:2b:0f:6c:a6:e3:f8:64:
                    ab:85:b6:7a:69:69:ad:50:7c:44:9e:8c:d4:2d:e1:
                    7b:9e:6d:f4:4e:91:7d:15:77:f9:5e:21:c8:57:72:
                    58:7d:0d:80:fe:34:35:f0:33:44:2a:85:4b:a5:d7:
                    fa:fe:23:bd:aa:9e:76:40:08:a8:1b:5c:9c:b5:51:
                    83:64:a4:01:2e:b1:6a:70:4d:8c:f6:09:06:67:03:
                    3c:29:04:5b:e5:ca:5b:5e:95:97:64:f1:f8:41:87:
                    ad:41:6d:f3:7d:3b:48:1a:ed:e1:44:eb:94:90:1c:
                    2e:d0:31:4f:92:8f:e3:32:d3:cf:bc:d0:82:56:58:
                    86:12:a5:5c:1f:04:ee:0b:e3:00:c8:de:f6:f2:33:
                    3b:94:36:84:c2:16:03:d9:0d:59:c5:2e:4b:10:27:
                    71:d6:5e:e3:8f:7d:bf:4c:d6:53:e2:57:f5:61:bb:
                    a9:af:d1:fd:fe:90:8e:6b:10:51:3d:9f:d4:31:ab:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:9D:B0:C9:B0:05:E4:58:86:A2:F9:05:4C:1E:79:56:C1:B3:06
            X509v3 Authority Key Identifier:
                keyid:18:91:D5:4C:EF:6A:90:C2:32:FC:A8:91:E3:99:F9:78:38:67:11:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJHVTO9qkMIy_KiR45n5eDhnEe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128576/2DE94A9AD7A411EF964D6D7CC4F9AE02/GJHVTO9qkMIy_KiR45n5eDhnEe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:64:cd:33:08:29:45:db:a7:cc:d3:4d:09:a6:8d:27:51:
         3c:79:36:3f:e0:c1:99:90:5f:60:06:ed:33:4b:28:38:87:02:
         fb:1c:72:f0:4b:56:12:a7:00:e9:98:72:b1:ca:71:0a:f3:b9:
         23:6a:3c:5f:82:a2:ed:2d:92:31:dd:50:ba:46:ee:cb:50:03:
         77:77:a5:21:3b:b5:7d:79:d9:9b:98:79:3c:f7:20:35:9c:2b:
         6d:0f:77:57:ba:0a:8b:4b:e2:d6:90:f3:e0:e0:1f:83:e7:e1:
         47:f9:6e:da:8d:33:aa:87:90:43:4a:d2:65:19:56:1d:b6:98:
         6e:1c:cc:2e:db:fd:16:45:bf:51:e4:27:3b:82:d6:6c:f2:5f:
         d5:35:7b:48:55:64:f3:59:58:1e:16:ce:bb:ac:88:c2:c9:9c:
         3f:56:79:1d:64:ee:49:9a:70:94:6d:6c:cc:c3:70:c0:b2:22:
         a7:ec:cf:85:3f:da:27:30:88:60:fe:7e:06:ff:ef:08:96:95:
         23:72:58:9f:16:55:a1:77:a8:6b:ad:9f:f2:a6:86:50:75:d1:
         61:dd:55:d8:8c:21:cf:fb:c3:39:30:41:cd:17:6a:13:4a:f9:
         f7:24:6d:69:c2:89:82:8f:17:be:5e:0c:f3:56:9e:21:90:3f:
         ef:13:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:12:09 2026 by rpki-client