Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
File:                     gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json)
Hash identifier:          2DGmOhj0/ZmFtMX2qmdIg6h7ehoQGATz7BgKIqdYS+M=
Subject key identifier:   86:8A:F1:9B:CD:F6:0C:34:C5:DF:F5:1A:C7:21:9D:CB:00:0B:6D:38
Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D
Certificate issuer:       /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
Certificate serial:       1D36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
Manifest number:          1D1F
Signing time:             Mon 20 Jul 2026 16:13:58 +0000
Manifest this update:     Mon 20 Jul 2026 16:13:58 +0000
Manifest next update:     Mon 27 Jul 2026 16:13:58 +0000
Files and hashes:         1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: p+gD7QODQ3U1FoSHdVlTd3RVzw3i8yxp48sip0F5tKI=)
                          2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: 83YZzYxEIIXyh0cYGM9jrxbckZK92FPWPHsnsvXXSF4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl
                          rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 16:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7478 (0x1d36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
        Validity
            Not Before: Jul 20 16:13:58 2026 GMT
            Not After : Jul 27 16:13:58 2026 GMT
        Subject: CN=6a5e4946-3895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:22:4d:ad:a0:bd:02:f2:49:d7:2f:85:81:
                    1b:a5:69:97:1b:a5:a7:06:65:06:7f:52:04:a2:44:
                    76:3e:69:7a:41:8f:60:97:50:c3:17:bf:11:83:45:
                    bc:4c:d0:54:ea:da:f6:2c:11:ee:78:cf:84:81:52:
                    e7:63:4a:1e:2c:1a:14:63:2e:ff:e3:f9:b6:15:38:
                    02:89:75:d1:51:42:66:41:88:2a:a7:2c:b6:0a:72:
                    b7:23:f4:bb:5e:fc:82:3c:4c:9e:02:7e:da:da:53:
                    03:fc:ad:82:91:cc:70:3e:48:07:c8:2b:5f:ca:2a:
                    46:64:03:b8:63:ef:96:fb:30:67:27:5d:27:33:ae:
                    75:ca:0f:6c:aa:18:3f:fa:8b:20:73:83:e2:88:f7:
                    2f:aa:a7:bb:89:9a:31:5f:3b:f4:23:a6:14:2b:96:
                    ec:bf:d5:72:2b:37:04:53:6a:88:e7:29:ad:05:39:
                    d4:4e:22:ef:41:ad:f5:99:78:9d:0f:ff:b8:e4:3c:
                    a9:62:30:fe:6e:92:ed:aa:d3:d5:e7:db:c8:2f:7b:
                    fe:14:d6:cb:55:a8:a3:92:bd:e6:33:35:90:17:d9:
                    c4:ff:7e:97:e3:f5:82:6b:f8:19:90:fa:b1:67:be:
                    77:27:87:6a:56:11:eb:94:31:76:75:ef:a6:f2:d5:
                    12:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:F1:9B:CD:F6:0C:34:C5:DF:F5:1A:C7:21:9D:CB:00:0B:6D:38
            X509v3 Authority Key Identifier:
                keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b3:f8:40:22:40:e2:f8:52:ee:f7:6a:ad:3f:ff:6c:96:ed:
         d4:a8:21:ec:48:04:f3:d1:c8:8a:f4:75:83:97:5f:80:18:65:
         be:7b:fc:57:d4:45:f2:f8:83:63:f6:60:03:70:2c:45:5c:83:
         81:3e:11:25:0f:55:49:be:8e:7c:95:2f:d8:e0:1f:14:ca:ef:
         ae:65:7a:7d:b3:10:3f:6a:aa:cc:68:a0:a8:77:44:dd:90:64:
         4a:c8:e2:5e:67:2b:82:39:76:15:da:f7:70:2d:c7:5a:3d:da:
         ab:a7:79:aa:36:e1:9d:20:01:c2:49:d7:a9:68:a2:9a:6d:a9:
         2d:92:6d:50:d4:06:20:b9:8d:bd:d9:00:9e:84:ad:40:b3:37:
         b0:06:33:ef:51:ab:28:25:dc:63:cd:80:53:45:5e:1b:8a:e1:
         c8:f1:eb:0d:26:10:e4:4c:c3:36:38:e7:ce:78:e0:e9:a6:7d:
         4d:29:b2:37:f4:5f:2d:55:e7:61:3d:af:a5:6a:77:5b:48:e3:
         f8:af:eb:e2:e4:b6:ff:4c:cd:fc:68:0d:53:19:a3:0a:14:46:
         0b:1f:e1:f5:79:66:45:fc:9f:f6:12:da:ea:5a:f3:33:f3:e7:
         c0:c3:f0:52:85:34:a2:32:55:23:7e:d4:c7:b7:86:90:ce:0b:
         40:ff:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:35:19 2026 by rpki-client