Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
File:                     gJt-bd3kLwYnhD21n6Qa-n87fDs.mft (raw, json)
Hash identifier:          VRUzJGiMRRAi+UO/8UKW+1qspSKhzxMzgb8wIuKbjeQ=
Subject key identifier:   67:25:62:A7:05:5E:21:C7:92:CA:41:D0:3A:52:65:8E:1E:EC:C5:BC
Authority key identifier: 80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B
Certificate issuer:       /CN=A917EF96/serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
Manifest number:          0881
Signing time:             Tue 18 Aug 2026 21:03:59 +0000
Manifest this update:     Tue 18 Aug 2026 21:03:59 +0000
Manifest next update:     Tue 25 Aug 2026 21:03:59 +0000
Files and hashes:         1: gJt-bd3kLwYnhD21n6Qa-n87fDs.crl (hash: 3lboH+iZI3QIl5wvbe30aLdyQf8exGzvQuRdnX2LqRM=)
                          2: E331E83206CD11EBA6A91612C4F9AE02.roa (hash: RF8k/3negR21/g9b9yA9JjL4Ez0vyNRYqOU/AL80r3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl
                          rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EF96, serialNumber=809B7E6DDDE42F0627843DB59FA41AFA7F3B7C3B
        Validity
            Not Before: Aug 18 21:03:59 2026 GMT
            Not After : Aug 25 21:03:59 2026 GMT
        Subject: CN=6a84c8bf-bad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:b8:9d:41:19:fc:a8:a6:d0:a0:a0:35:68:
                    06:52:83:fa:7e:34:e1:f7:15:2f:f0:54:6c:58:86:
                    3f:0b:bc:c8:a9:2b:89:7b:53:f2:58:4f:79:88:44:
                    7e:2c:f3:b0:b6:67:d1:fd:9a:66:dc:92:0c:71:c2:
                    06:33:c4:24:32:cb:ea:9f:9f:dd:09:ec:ef:62:ef:
                    9a:ef:35:17:61:e7:8a:5e:b2:02:bb:c0:30:8c:f0:
                    fc:c9:d6:ea:5f:52:9e:cc:49:64:d2:57:76:4e:9a:
                    42:b9:62:d9:49:bb:52:b0:5a:d0:2b:c0:39:1b:10:
                    88:21:cb:22:8c:a3:2b:64:73:ae:4a:25:df:75:e7:
                    23:3f:47:25:82:c8:2e:fb:42:21:81:d4:f3:12:d0:
                    8c:2b:19:7a:70:3f:be:ec:c8:ed:31:16:45:11:95:
                    97:ed:e0:6c:1b:a5:9c:5a:d9:66:c1:ec:69:87:f5:
                    90:99:ff:5a:28:dd:58:cb:a8:e3:54:d7:5b:56:1c:
                    f3:89:d0:df:02:c3:27:6a:b4:a9:7b:51:bc:a0:b9:
                    02:6f:a3:3a:aa:05:af:b2:b9:74:de:50:69:e2:d1:
                    9c:b5:fc:15:bb:f5:4f:ca:53:06:67:04:ca:00:56:
                    c8:e7:d6:13:22:8c:3e:55:ae:b7:03:0d:82:a5:4f:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:25:62:A7:05:5E:21:C7:92:CA:41:D0:3A:52:65:8E:1E:EC:C5:BC
            X509v3 Authority Key Identifier:
                keyid:80:9B:7E:6D:DD:E4:2F:06:27:84:3D:B5:9F:A4:1A:FA:7F:3B:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJt-bd3kLwYnhD21n6Qa-n87fDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EF96/0F86E60E06CD11EB9F00AF11C4F9AE02/gJt-bd3kLwYnhD21n6Qa-n87fDs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:71:76:82:4d:8b:ec:ca:0b:c8:85:5b:5d:01:6f:e8:3e:c2:
         49:cb:94:da:25:c8:e3:57:e9:9f:40:6e:f4:a7:0b:cc:8b:be:
         13:f6:15:9e:14:60:29:13:e3:cd:28:90:80:c9:56:f5:35:db:
         c4:0d:3c:0f:87:8e:f0:f0:32:7b:c6:e2:d3:f9:16:c0:b6:59:
         d8:38:d0:97:3e:ac:9f:53:08:7c:76:29:2a:2e:d6:a4:a3:ef:
         1a:ed:15:9e:08:cd:8e:d5:8c:01:15:f3:00:01:3d:53:a1:17:
         41:9f:20:30:c8:f1:fc:c5:17:b7:25:ac:2b:e1:b4:5d:27:25:
         3f:3e:ec:d2:1f:8b:5c:0e:62:17:be:06:b4:66:1d:5a:d0:e2:
         87:fd:04:1c:da:84:a2:82:ae:f7:07:00:94:69:d3:1c:ce:a6:
         a5:78:6c:f0:cc:ce:64:25:e8:8c:56:33:aa:99:39:5c:0a:46:
         96:bb:e7:65:ea:56:75:07:76:65:64:31:2e:43:99:a1:39:59:
         cb:a3:2c:d4:05:26:74:49:ee:f9:a4:4e:62:75:07:07:d4:58:
         b9:63:4d:35:02:43:c8:3e:2d:9f:43:63:1f:82:9a:4a:db:c2:
         28:a5:77:e3:1b:3c:92:68:9b:de:9c:5e:7a:2f:4e:39:64:de:
         4c:52:f2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:24 2026 by rpki-client