Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File:                     gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier:          PbduMuneONThCuyP+dCJTCehkjxcbqW6d1ejemxmgr8=
Subject key identifier:   04:A6:08:8B:5F:26:BD:E2:8C:E0:55:DD:D5:1A:E7:A7:17:32:3C:42
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer:       /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial:       070A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number:          0702
Signing time:             Fri 04 Sep 2026 21:57:45 +0000
Manifest this update:     Fri 04 Sep 2026 21:57:45 +0000
Manifest next update:     Fri 11 Sep 2026 21:57:45 +0000
Files and hashes:         1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: lnG7HgMJN7ZZ9ps20W09+ihTm5y7ttFZRqW0jMlVHws=)
                          2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: M577gprOgopViMBlM2br8rPqwyVug+teBZ5+ccpEPA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
                          rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 21:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
        Validity
            Not Before: Sep  4 21:57:45 2026 GMT
            Not After : Sep 11 21:57:45 2026 GMT
        Subject: CN=6a9b3ed9-7995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f7:41:83:b2:e3:6c:e5:e0:34:c0:0d:62:d7:
                    43:a8:19:f2:65:b2:1b:97:6d:b3:0a:6a:f0:9d:43:
                    08:6a:73:d9:af:2e:ca:4f:a0:71:d5:98:07:a0:5f:
                    6c:eb:9e:b8:2d:ae:07:e6:5d:e6:23:ab:47:24:53:
                    26:40:ae:e2:f8:e6:13:64:57:eb:49:7d:69:74:0f:
                    a8:f0:22:50:14:28:78:37:ab:65:38:3e:27:8b:29:
                    56:ae:46:27:fb:ab:38:66:00:9f:ac:d4:a3:f4:c5:
                    c7:d4:c7:46:09:82:44:e7:63:41:04:b5:f4:17:c0:
                    5c:68:b5:a7:b5:be:eb:fa:b7:8b:84:5f:19:5f:40:
                    40:12:03:2c:5c:00:c1:4e:f6:78:81:ff:9c:e0:1f:
                    ce:d4:9e:60:93:b5:bb:3a:f1:9a:62:99:78:26:2f:
                    95:21:c0:d5:31:f3:d0:da:8e:22:3f:9e:77:09:c4:
                    b1:97:a4:49:45:6c:de:a9:ed:6c:18:a9:c0:ff:76:
                    78:d2:a2:33:79:fb:aa:85:33:c2:23:2b:48:8a:89:
                    40:2a:29:ce:72:8e:6e:46:a1:04:25:a4:cd:f5:2c:
                    b1:a9:47:d0:0b:26:a5:b6:29:da:0e:87:6e:73:ed:
                    b4:30:cb:a8:62:34:27:b5:59:0d:6d:67:d7:fe:be:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A6:08:8B:5F:26:BD:E2:8C:E0:55:DD:D5:1A:E7:A7:17:32:3C:42
            X509v3 Authority Key Identifier:
                keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:46:c2:fd:74:f0:9e:81:ee:e1:0b:7c:ce:7b:cc:24:ec:44:
         dc:f3:20:c2:67:97:a5:2f:6b:62:fb:4e:b8:5c:c9:b9:42:cd:
         09:1c:fc:c3:1e:22:d3:8e:4d:30:f9:f7:ca:d5:e2:09:ea:0a:
         58:eb:3c:c6:b6:db:c3:07:35:5a:e1:50:8e:b3:64:db:ac:1a:
         ce:bc:a9:bb:7f:3d:eb:10:ea:68:75:47:16:6d:3e:e0:26:ae:
         db:33:5e:56:78:f2:3d:d3:1b:88:11:83:95:23:10:3c:de:30:
         9c:13:22:ae:6c:f0:ef:a3:7c:18:84:79:7f:89:0f:29:a7:25:
         ba:fd:87:e4:9d:3e:88:78:6a:82:7a:bf:a8:e6:8b:a1:5f:ac:
         a4:4a:ad:6f:9f:e4:8e:e8:88:52:65:8f:9f:03:d0:f9:2a:33:
         19:44:29:b0:0d:6d:b0:59:ac:a2:ef:aa:49:c3:5c:c3:66:8a:
         ed:60:07:91:3b:b7:ac:04:e8:f7:4f:96:60:a5:0e:e4:49:b9:
         e9:21:5c:d6:55:41:6d:fa:d6:64:90:f2:32:8d:fc:84:e7:64:
         fd:08:f1:e8:73:e0:40:6d:0e:57:33:0d:74:00:e5:53:d6:dc:
         48:01:4d:5c:7d:42:2b:28:1c:f4:a7:fa:64:9e:0b:b2:ef:fd:
         4d:7e:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:51:29 2026 by rpki-client