Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
File:                     GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft (raw, json)
Hash identifier:          64WxR9DwlbBdoRPdu2CuA1O/00qKkvuoPBDPzWkYsjo=
Subject key identifier:   B3:58:F9:32:DF:5E:DD:A6:3A:50:8E:20:6B:19:BB:2D:E2:67:73:60
Authority key identifier: 19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA
Certificate issuer:       /CN=A917B83F/serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
Certificate serial:       15CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
Manifest number:          15BE
Signing time:             Tue 04 Aug 2026 16:47:48 +0000
Manifest this update:     Tue 04 Aug 2026 16:47:47 +0000
Manifest next update:     Tue 11 Aug 2026 16:47:47 +0000
Files and hashes:         1: GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl (hash: qZyNH6E4wI78HcA0xKezJWcRLvN8Wn4E/Xtp+GEqkc0=)
                          2: 0964A56EF35511E8AC1ECA17C4F9AE02.roa (hash: NbC/fbC6XQGeqxTw9dujytNOnLDF7yOfjQzVCGBwIeA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl
                          rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 16:47:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5580 (0x15cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B83F, serialNumber=1980355299B6C2237B4235000F723597BFEB33DA
        Validity
            Not Before: Aug  4 16:47:47 2026 GMT
            Not After : Aug 11 16:47:47 2026 GMT
        Subject: CN=6a7217b4-a6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:34:1f:37:e4:09:9d:c4:98:20:3d:5d:c2:
                    58:f2:1a:b4:a8:7c:b2:e1:c7:b2:cd:b9:33:77:e6:
                    0b:79:ba:19:93:56:f6:2a:82:85:f6:d8:66:0e:48:
                    cc:c0:e5:9d:d6:d8:1e:88:fd:c2:1d:ad:a0:77:ed:
                    19:6f:23:bb:6f:5c:3a:56:9e:4f:b1:96:0c:3d:9f:
                    84:fe:81:1b:49:4c:5b:f3:1d:cc:26:25:26:fe:a0:
                    4d:19:07:4e:fc:ff:9a:0b:fa:96:ee:90:e9:aa:81:
                    d1:15:0d:be:6c:0d:fe:7d:59:34:0f:c3:0b:2b:0d:
                    d8:53:6a:f5:e5:14:e6:46:b8:b6:f4:d7:2e:23:99:
                    09:ce:d4:25:30:e6:3d:af:c2:4e:06:17:f9:d6:ff:
                    af:1c:2d:f6:f7:64:7f:be:3e:dd:2b:1b:d4:dd:0f:
                    5b:38:7d:b1:f1:12:5f:47:41:46:b7:05:4b:eb:31:
                    13:89:1d:07:3f:a6:22:c7:13:c6:85:87:4e:1e:f9:
                    a8:25:c0:76:24:9e:96:58:08:11:5e:ab:51:9c:49:
                    c5:ad:66:2f:f2:16:a2:f1:27:9b:38:01:f5:0f:34:
                    7b:c0:01:be:1d:c6:db:fb:50:43:fd:23:29:46:a9:
                    64:ce:64:b6:be:2c:ec:d4:44:9a:c8:1e:76:6c:59:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:F9:32:DF:5E:DD:A6:3A:50:8E:20:6B:19:BB:2D:E2:67:73:60
            X509v3 Authority Key Identifier:
                keyid:19:80:35:52:99:B6:C2:23:7B:42:35:00:0F:72:35:97:BF:EB:33:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYA1Upm2wiN7QjUAD3I1l7_rM9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B83F/3DB3DBEA554F11E89BC2E857C4F9AE02/GYA1Upm2wiN7QjUAD3I1l7_rM9o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:90:78:f0:01:f9:6d:fd:4a:b0:60:64:c2:3b:64:2e:56:1c:
         78:da:59:95:90:99:54:40:69:bf:ed:f6:41:94:bb:6c:38:8a:
         b7:b1:44:5a:c3:83:35:f6:d0:ec:96:31:eb:ab:69:ec:ab:a4:
         5b:17:eb:20:08:ff:d5:cc:2c:61:61:77:f3:0f:7f:14:32:f8:
         3d:eb:81:3b:b1:07:17:c8:42:37:06:fa:7e:13:de:01:b5:d6:
         83:ff:d9:4a:cf:1f:27:5b:f2:25:64:22:c8:8c:0c:40:98:3f:
         14:fb:63:05:df:60:16:37:94:d7:a4:91:9a:29:b6:cb:db:4b:
         29:d8:7f:f1:72:44:10:bf:70:60:c8:62:8e:d6:d0:60:fc:ae:
         00:60:b0:f8:74:2b:3c:74:94:f4:b9:b5:67:fc:30:ab:0b:3b:
         e5:ce:f4:71:c4:e6:23:97:43:73:cb:49:8c:9f:5c:26:92:4e:
         5f:4d:18:92:3d:37:af:a6:e4:a5:d1:9a:eb:e5:1e:62:52:82:
         3b:2d:db:f4:4c:e4:43:25:75:ef:a5:52:40:95:d4:de:5e:aa:
         bd:84:15:6d:38:52:d1:d2:5e:f3:3b:b9:85:43:3f:d0:ce:76:
         fa:6f:ad:99:2c:14:fd:51:e8:ca:f5:e9:27:96:e0:13:6f:10:
         bb:02:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 14:52:35 2026 by rpki-client