Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
File:                     gyAF3EXYwTKohRVcQx0zMZrPbY0.mft (raw, json)
Hash identifier:          Wf/2xzxtxEDnK8gfMRmjRIsb42xCt/LVhtfyW4171YE=
Subject key identifier:   02:42:EE:0A:7D:AF:AD:01:A7:C2:A1:99:92:61:2A:74:6E:97:09:5E
Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D
Certificate issuer:       /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
Certificate serial:       1D57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
Manifest number:          1D3C
Signing time:             Fri 04 Sep 2026 16:05:56 +0000
Manifest this update:     Fri 04 Sep 2026 16:05:56 +0000
Manifest next update:     Fri 11 Sep 2026 16:05:56 +0000
Files and hashes:         1: gyAF3EXYwTKohRVcQx0zMZrPbY0.crl (hash: 01m5BxI8PYIYUfuZctEXZo3RbN7ebV59CYncDZF4TGY=)
                          2: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (hash: WgtRhJ8unltzF7ajj0Mza3GoBGVDUrC6HGLDYBf/nsA=)
                          3: EU8D2YkyZpthnGtU_tDE2ztgxx4.asa (hash: Us2+55KYbc3TTATbOABirEozFIChtI1X+j1M40g7Src=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl
                          rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7511 (0x1d57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D
        Validity
            Not Before: Sep  4 16:05:56 2026 GMT
            Not After : Sep 11 16:05:56 2026 GMT
        Subject: CN=6a9aec64-7e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:3d:8b:41:0e:7c:a4:0d:bf:66:b4:43:d2:
                    2d:74:e5:63:61:c6:88:5d:62:10:95:42:a4:aa:ba:
                    af:55:56:7c:79:c8:5f:8d:0c:46:4b:c3:9e:0d:65:
                    ca:1c:b9:a6:d4:c9:e5:23:06:28:16:c1:7e:b0:3b:
                    cf:d4:fd:53:38:fe:67:4a:ab:d7:4a:24:45:cc:27:
                    cd:d0:cc:0b:a0:22:b3:19:26:a4:bf:bb:71:0c:70:
                    7e:78:13:fd:8b:df:0d:fc:93:ac:f9:c5:6a:aa:a6:
                    92:b7:43:ca:e1:fd:fa:9f:b8:38:8b:8a:a5:6f:eb:
                    76:bc:d4:97:f9:ed:2f:8f:3a:4d:64:0d:7d:2b:e8:
                    d6:9a:56:62:f1:83:74:ac:2c:01:82:39:2b:e2:e2:
                    d5:9b:d5:41:cf:f0:03:1a:71:c8:3c:92:ab:9c:59:
                    0d:18:8a:d3:8d:e0:aa:c8:7b:08:fe:c8:89:ae:0c:
                    67:7e:6d:72:b9:bd:68:85:95:7b:cf:15:1c:0e:34:
                    78:04:8b:84:e1:21:d3:d9:eb:b1:7d:23:8d:3e:35:
                    49:03:1b:03:0a:8f:f4:52:28:da:aa:42:09:e5:2f:
                    94:6a:4c:ea:ba:4a:44:0a:28:b1:76:c7:32:e7:90:
                    98:ad:d6:ab:99:aa:42:af:1f:51:9b:74:e6:2b:f8:
                    24:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:42:EE:0A:7D:AF:AD:01:A7:C2:A1:99:92:61:2A:74:6E:97:09:5E
            X509v3 Authority Key Identifier:
                keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:d9:a0:05:b4:4c:b8:d3:d3:0c:db:6f:f8:e5:1a:51:a4:
         db:ca:da:a9:80:f9:6d:94:b3:c2:78:9b:d4:87:1b:15:4f:c4:
         75:3b:4d:88:ef:32:0b:e8:22:bd:6e:d8:88:c5:8f:95:9a:b5:
         36:62:6f:cc:cf:33:2a:49:c2:b5:3f:b3:58:5a:ac:a6:1a:79:
         b8:b0:c8:b8:bd:da:2e:72:5d:27:15:60:56:7c:94:46:9b:b3:
         82:ee:ea:17:b8:61:62:d8:87:73:19:a1:68:18:b8:b6:82:17:
         1a:7d:34:55:8a:67:4a:1f:65:98:f6:2a:7e:95:d4:e7:1e:46:
         84:cb:97:64:ea:27:57:1a:8e:7b:2e:3f:70:39:bd:7c:7d:e9:
         0b:69:73:06:aa:a1:90:c8:26:10:b6:2f:53:ae:4d:13:b5:a8:
         91:51:f9:18:8d:b4:31:06:ec:ec:48:72:d7:17:eb:5e:e0:eb:
         95:c2:04:16:bb:c7:1a:c2:a9:5f:5f:84:de:60:0a:8b:44:ac:
         74:03:c0:85:db:04:c9:34:fd:63:8e:63:54:22:40:24:b0:26:
         9b:bd:34:4a:cf:35:02:46:40:95:f2:c4:6f:b5:65:ab:25:4d:
         c5:56:c3:82:c0:92:d7:73:d9:32:58:3b:ec:08:bb:60:38:92:
         3b:d3:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:00:48 2026 by rpki-client