Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
File:                     gJihpKZXp3CvvWalja3gGT9aHog.mft (raw, json)
Hash identifier:          BgaSYhkM3Sz6YSO14P6VPo20tFxQhgSUbj30ns5d2+U=
Subject key identifier:   2B:EE:8A:70:C6:3E:7B:07:20:92:F3:07:9E:73:B9:ED:45:6D:75:22
Authority key identifier: 80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88
Certificate issuer:       /CN=A916A6D2/serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
Certificate serial:       0659
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
Manifest number:          0649
Signing time:             Mon 31 Aug 2026 22:37:59 +0000
Manifest this update:     Mon 31 Aug 2026 22:37:59 +0000
Manifest next update:     Mon 07 Sep 2026 22:37:59 +0000
Files and hashes:         1: gJihpKZXp3CvvWalja3gGT9aHog.crl (hash: EiGlfyrYVL4ZNhuq4a1WVq8YxvmnEVyxsre+uU3a/Ro=)
                          2: 81C83A9ADD9711ECB450D332C4F9AE02.roa (hash: 9EVY6/bljSmGk69kgq+cWH0JVAlXlHuEraH6jeuw/7c=)
                          3: 9718BA74EA9E11EB8575F62AC4F9AE02.roa (hash: m3HEhEwWSLfKtQb2ikmT/BSylxepHuo5uXczBb4yR7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl
                          rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 22:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A6D2, serialNumber=8098A1A4A657A770AFBD66A58DADE0193F5A1E88
        Validity
            Not Before: Aug 31 22:37:59 2026 GMT
            Not After : Sep  7 22:37:59 2026 GMT
        Subject: CN=6a960247-be6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:38:fc:a9:02:52:07:4b:a2:19:3c:1e:c1:49:
                    50:1d:30:ca:6e:09:d6:01:da:21:9f:ed:11:df:c3:
                    29:dd:58:be:09:20:66:37:3b:77:fd:cc:8a:b7:fe:
                    6b:d8:a9:04:8e:a8:5f:cc:30:a0:58:e0:e3:44:d2:
                    6d:0c:cb:e2:bf:58:0b:d9:5a:50:dd:16:66:5f:71:
                    fd:0a:af:73:ef:9e:cf:a0:1e:60:23:5a:14:64:2c:
                    fb:d7:0d:a6:b2:c0:ef:80:b7:e6:1e:a9:b9:79:25:
                    2c:50:9d:d0:de:c9:65:88:47:a8:3a:02:9a:82:13:
                    28:51:64:83:9e:f7:23:c8:eb:e3:f1:2f:f1:3c:2c:
                    86:75:d0:25:5a:ff:0b:ab:42:ee:95:6f:a6:c3:4d:
                    ac:59:1b:12:68:5b:ae:46:9e:b2:be:d3:6a:73:9a:
                    a0:e7:f6:90:26:56:18:a3:f9:9e:e8:61:e6:1e:34:
                    8a:5e:56:ac:e3:0a:08:56:f5:b2:a8:f5:47:42:5d:
                    e4:f8:f0:e1:88:88:fc:b0:5f:30:7c:0e:57:41:8c:
                    a9:26:41:d9:de:87:3b:ea:79:af:96:e7:70:64:fd:
                    d8:7f:dd:9d:9d:ff:95:a9:79:df:b7:41:5b:07:56:
                    ac:76:43:b6:2d:42:0f:d9:19:e1:32:9a:4e:3e:15:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:8A:70:C6:3E:7B:07:20:92:F3:07:9E:73:B9:ED:45:6D:75:22
            X509v3 Authority Key Identifier:
                keyid:80:98:A1:A4:A6:57:A7:70:AF:BD:66:A5:8D:AD:E0:19:3F:5A:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJihpKZXp3CvvWalja3gGT9aHog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A6D2/7D57AEEEEA9C11EBA312A926C4F9AE02/gJihpKZXp3CvvWalja3gGT9aHog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0c:08:a9:52:de:23:6e:7f:38:35:da:03:f1:f5:56:b7:96:
         a3:1a:ee:94:ce:55:41:14:7e:94:bf:6e:e0:22:18:62:44:ff:
         0c:69:b3:12:c2:6f:c7:68:05:7a:f2:65:e2:40:6a:ed:f6:f9:
         f3:a7:e5:1b:d7:6d:4d:0f:a0:06:c6:0b:bb:2d:b2:e7:c0:35:
         fe:e2:56:29:0d:7c:79:b8:25:30:4f:d8:d1:fa:6f:5c:22:80:
         cf:ce:41:b3:b1:c6:63:89:7c:be:9c:d5:27:d0:a6:08:10:f6:
         4b:f1:08:64:13:4c:eb:59:a8:f2:14:5c:b9:87:e3:3f:3b:8f:
         f9:27:df:0b:56:a7:eb:13:10:8e:12:07:5b:e7:ad:91:3e:53:
         f2:93:30:47:6b:31:f4:1c:76:7f:73:28:a1:e9:dd:ab:a3:66:
         4b:98:5a:8e:0f:f5:8b:2c:c2:b8:32:5c:54:bf:9c:e7:79:f0:
         8e:6f:29:f6:95:5f:fe:59:8b:f3:a2:94:20:55:1e:44:72:ec:
         3f:3f:0f:95:68:28:9d:ad:a5:96:eb:eb:97:bf:54:4d:43:83:
         92:4e:ff:f7:0f:fe:8b:01:4e:81:18:56:c8:fe:38:b8:a9:9e:
         00:3d:dc:f6:d6:b3:bb:ff:63:5d:f5:c9:70:39:b1:74:db:72:
         aa:a2:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:20:56 2026 by rpki-client