Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File:                     GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier:          E8R+6ABKy1AeozlhksRXzYAswMqfa/K6QkG4YwZVA3w=
Subject key identifier:   A7:FC:41:7D:F3:33:04:5F:B8:39:A8:2E:F8:92:16:47:85:59:A1:8E
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer:       /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial:       1EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number:          1ED3
Signing time:             Mon 22 Jun 2026 16:00:53 +0000
Manifest this update:     Mon 22 Jun 2026 16:00:52 +0000
Manifest next update:     Mon 29 Jun 2026 16:00:52 +0000
Files and hashes:         1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: ZT6I+bYbSVDgeInd+In7DZCi/V22otP2tPzyokFNH2w=)
                          2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: eTQyUMylY0vGU3HeddrGwU7l9VqbceQVt15/3Mvk3cQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7906 (0x1ee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
        Validity
            Not Before: Jun 22 16:00:52 2026 GMT
            Not After : Jun 29 16:00:52 2026 GMT
        Subject: CN=6a395c35-f13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:bb:bd:f5:64:d4:34:8b:28:3f:59:a5:08:
                    a8:0c:f6:64:f1:8e:b8:2e:45:76:a2:c4:62:ac:94:
                    f3:a8:41:fa:3f:ec:93:43:e8:1d:11:d8:2c:4a:a1:
                    c9:ba:7a:41:1d:f8:18:03:c1:70:4c:0b:d3:b8:62:
                    13:07:b4:09:b1:d4:c3:4b:05:2a:1a:2f:38:19:57:
                    60:f8:8a:be:2e:36:b1:97:2b:dd:6d:92:35:68:25:
                    35:72:b6:00:cb:5e:f4:31:08:91:74:ab:6b:11:d6:
                    d5:96:69:fe:8d:90:4f:4b:5c:7c:4e:dd:2a:6b:d0:
                    da:10:54:b3:58:f1:42:42:3e:56:c7:6b:95:8d:09:
                    3d:99:fc:5d:d1:06:be:14:26:24:24:2c:f7:8c:2b:
                    ff:5b:55:68:67:aa:2d:41:1d:c6:0c:5f:b6:d8:e0:
                    b8:5a:d1:d7:f4:db:93:c1:fd:58:f7:9d:9a:e7:2d:
                    43:1c:10:36:b7:0f:ed:af:74:a6:47:3f:53:e3:c0:
                    f3:7c:d8:1d:14:b6:9a:ae:b1:44:f5:db:26:25:b8:
                    6c:e5:b1:2e:55:ff:cf:3b:e8:08:8e:c9:45:d9:81:
                    56:ea:de:c7:fb:4f:81:6a:92:09:9d:a6:32:85:94:
                    38:e8:7f:e3:26:45:12:9e:fa:57:b2:db:8e:d0:64:
                    a0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FC:41:7D:F3:33:04:5F:B8:39:A8:2E:F8:92:16:47:85:59:A1:8E
            X509v3 Authority Key Identifier:
                keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:cf:f2:f1:af:6d:db:63:6f:93:b6:ca:46:25:33:5c:13:
         fe:e6:bc:21:c3:ea:d6:1a:4f:09:7b:53:cf:c6:b1:99:2f:4d:
         8a:e1:c9:bb:e9:f3:26:50:d2:74:82:3b:79:73:57:54:22:ce:
         68:70:df:79:89:8d:dc:cc:36:9d:90:02:ba:93:70:8d:a8:76:
         38:01:40:86:2e:7d:68:e5:5f:4f:f8:cd:db:58:00:61:49:8f:
         b8:ec:73:7c:e3:3b:62:6c:bd:63:65:3d:5c:d8:84:05:92:21:
         f4:4a:d9:56:c6:e9:f6:bd:a0:e1:40:aa:c5:06:54:2f:9f:55:
         00:c5:7f:21:56:79:6e:ea:af:40:34:69:d4:fc:1d:6e:1c:2b:
         0d:a2:27:82:5b:c0:89:92:e7:ae:42:f7:cd:1d:a0:7b:33:8b:
         b2:9f:3f:e7:39:35:ce:6d:89:c2:08:22:40:a7:19:bf:a4:c4:
         48:7d:fd:36:eb:32:15:c9:a5:e6:a5:3b:6c:dc:a6:86:87:1d:
         a7:0f:17:f8:81:28:ff:56:c7:70:68:be:d8:bc:11:36:ee:6d:
         87:84:77:ac:47:c4:05:f0:06:28:00:c5:90:a4:40:6f:c7:70:
         69:15:f7:6c:9f:13:32:de:44:db:3f:48:07:ff:c5:c1:71:ee:
         2f:a4:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:19:57 2026 by rpki-client