Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
File:                     GNXPyKr1F7B20fycLmX2kUNdOl8.mft (raw, json)
Hash identifier:          T4LzB8TBiItwpn0xzBJvIie7BMI7bo1lwoD1bQh16b4=
Subject key identifier:   69:B8:1A:31:AC:E4:E1:1B:4A:65:DF:2E:A3:70:6F:AE:44:F8:4D:CD
Authority key identifier: 18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F
Certificate issuer:       /CN=A917E0AC/serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
Certificate serial:       0A5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
Manifest number:          0A4A
Signing time:             Thu 06 Aug 2026 19:32:42 +0000
Manifest this update:     Thu 06 Aug 2026 19:32:41 +0000
Manifest next update:     Thu 13 Aug 2026 19:32:41 +0000
Files and hashes:         1: GNXPyKr1F7B20fycLmX2kUNdOl8.crl (hash: Yj4gh1JcVDUxVllPsRmM/vA52TODnwOJXCHOFXSgfPA=)
                          2: 1584607CF14511ECA1AE5F4EC4F9AE02.roa (hash: POm408iE+nAwo8TdURTFaonfBCRS6Twa2e9BS7lBMnI=)
                          3: 36F0A6E6370811ECA61C8B38C4F9AE02.roa (hash: 9sxsLCohbrBBuOHRRUIEDZ6mWAhiElHi4Y+R/2Te8q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl
                          rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Aug 2026 19:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2654 (0xa5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0AC, serialNumber=18D5CFC8AAF517B076D1FC9C2E65F691435D3A5F
        Validity
            Not Before: Aug  6 19:32:41 2026 GMT
            Not After : Aug 13 19:32:41 2026 GMT
        Subject: CN=6a74e15a-c763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:8f:04:42:27:1a:57:51:30:56:03:4f:53:
                    08:5e:9e:2e:45:d6:5b:8e:5b:04:9f:60:60:10:e1:
                    1f:af:3c:e6:d5:f8:93:b9:0d:32:16:26:25:ae:f9:
                    92:3a:16:0a:ee:46:68:c8:73:c0:2e:38:95:a5:65:
                    63:55:10:64:42:b5:a7:5d:2a:9e:f3:81:77:aa:4f:
                    1e:c3:45:b7:9c:60:49:1d:1b:f2:6e:fb:06:81:f6:
                    45:ae:1d:f1:77:50:27:7e:83:4b:45:fb:f4:a2:5d:
                    82:c5:2f:09:14:35:5f:ea:16:f1:53:c6:65:79:28:
                    7f:b1:4b:21:d5:1e:b6:1b:9a:af:8b:99:ee:b6:61:
                    db:a5:24:24:29:37:d2:2b:bf:a2:62:12:73:ea:6a:
                    46:de:13:9e:a0:bc:7b:56:54:1b:5a:99:1b:e2:bb:
                    c8:47:fa:b8:1b:64:62:12:5b:e4:5a:99:f6:25:2e:
                    f8:29:2d:51:81:75:e7:71:ab:f7:c7:16:67:2d:98:
                    74:a5:8f:46:cb:88:c4:e7:83:a5:8f:7d:06:47:ce:
                    66:47:da:39:5d:2d:00:af:04:4f:1d:bb:49:b4:a9:
                    9d:a9:42:8b:33:74:d6:b2:9e:c1:9d:f9:81:40:24:
                    50:7a:25:aa:66:99:80:2c:f2:a1:c4:54:dd:ad:53:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:1A:31:AC:E4:E1:1B:4A:65:DF:2E:A3:70:6F:AE:44:F8:4D:CD
            X509v3 Authority Key Identifier:
                keyid:18:D5:CF:C8:AA:F5:17:B0:76:D1:FC:9C:2E:65:F6:91:43:5D:3A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNXPyKr1F7B20fycLmX2kUNdOl8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0AC/6EA39C06942F11EAB164527EC4F9AE02/GNXPyKr1F7B20fycLmX2kUNdOl8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:ca:d8:1e:74:07:39:7e:f9:61:fa:7c:5f:15:e5:fe:0b:
         bc:c4:19:b0:37:11:e6:31:84:94:62:f5:f5:84:46:37:04:13:
         9a:13:f4:b8:f6:21:fa:aa:4f:4c:6e:c5:71:7f:98:4b:28:5e:
         7d:91:de:10:51:fb:b8:e8:f9:40:ee:76:30:a0:33:ae:ba:f9:
         c1:1a:45:d7:d0:08:3c:39:c1:2a:2f:e5:95:08:cb:bf:95:06:
         39:ff:8e:1d:82:42:4e:8d:58:fe:56:0c:93:68:b5:61:1f:22:
         25:21:ba:a6:5f:b4:94:c7:cf:33:ef:f7:8d:a0:99:8f:ef:aa:
         dc:ae:09:97:90:21:30:5e:5c:c2:6c:1d:6d:db:89:fc:f9:6a:
         fd:6f:ab:49:ca:1d:ee:42:c7:30:2e:49:d9:7c:36:be:e3:79:
         77:38:7d:87:78:11:9b:04:b7:cd:98:f1:8b:2e:63:08:db:c7:
         3e:23:02:93:8f:c7:b9:22:df:21:7a:18:2d:36:cb:b0:6b:e3:
         f5:c8:c4:94:71:93:4e:ae:27:56:35:7f:ba:4b:3d:e7:f2:b4:
         49:21:c4:90:52:46:84:56:c1:5b:58:76:e6:a4:10:5a:f5:fd:
         1b:4c:0e:68:e6:01:84:7e:9e:b9:df:fe:5e:35:6a:1a:83:21:
         c9:2a:9c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 10:39:44 2026 by rpki-client