Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
File:                     GHkad7eTMW9ffev2Atp8TmnIvGs.mft (raw, json)
Hash identifier:          wNTYVlS0XLi58l4IT+zmzZkFEOBDmLhVaJUfcQOC7RI=
Subject key identifier:   10:AF:EA:87:D9:22:9F:75:09:14:19:DF:4D:49:F1:EF:5A:E4:8F:5D
Authority key identifier: 18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B
Certificate issuer:       /CN=A9185259/serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
Manifest number:          A7
Signing time:             Wed 19 Aug 2026 07:51:30 +0000
Manifest this update:     Wed 19 Aug 2026 07:51:30 +0000
Manifest next update:     Wed 26 Aug 2026 07:51:30 +0000
Files and hashes:         1: GHkad7eTMW9ffev2Atp8TmnIvGs.crl (hash: NJ92SyxdhqOBSyFzkVjeRtaOSmto1wmUnnXiUAgYlBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:51:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=18791A77B793316F5F7DEBF602DA7C4E69C8BC6B
        Validity
            Not Before: Aug 19 07:51:30 2026 GMT
            Not After : Aug 26 07:51:30 2026 GMT
        Subject: CN=6a856082-ed0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:31:b5:6f:d8:06:e1:04:e2:6a:72:f0:48:
                    64:fe:9b:34:15:2a:e7:2f:ec:d1:c3:31:af:aa:29:
                    61:6a:4c:95:20:a4:26:ca:f7:f6:6a:34:8c:cb:d8:
                    ec:3a:d0:a3:c1:4c:0b:65:2a:e7:d1:28:fe:b2:d5:
                    dd:2f:61:20:69:8b:8a:ca:56:2f:1d:7a:42:40:41:
                    e7:10:dd:28:39:f0:a1:9e:f8:2c:8d:1d:87:46:c4:
                    85:99:30:d2:dd:e4:e8:bf:92:d4:8d:47:59:b5:48:
                    4f:c2:37:01:7b:ba:8b:fc:3a:7f:99:dc:cf:63:ff:
                    ce:39:a3:33:08:75:8f:d2:bc:24:39:1a:95:40:eb:
                    0c:21:c5:bd:79:5a:c6:20:56:28:64:8f:ba:76:14:
                    f1:aa:2a:a2:af:b1:b0:93:ea:5e:46:01:ec:0e:d7:
                    63:58:2b:09:2b:fd:5a:c9:99:35:07:61:3d:08:4e:
                    e2:f7:34:3d:9a:12:7b:e3:5c:a1:44:d1:8b:55:3d:
                    87:2b:b2:c3:ec:ff:95:2b:1a:c5:40:6e:cf:7f:a0:
                    17:7d:cd:c7:ac:b1:e8:6d:66:cb:1a:01:84:3c:01:
                    cc:d7:21:8e:e7:f6:d1:21:02:9b:c6:f8:c0:9b:0a:
                    8e:0c:6f:88:0a:79:00:86:96:b1:67:11:e2:bb:52:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:EA:87:D9:22:9F:75:09:14:19:DF:4D:49:F1:EF:5A:E4:8F:5D
            X509v3 Authority Key Identifier:
                keyid:18:79:1A:77:B7:93:31:6F:5F:7D:EB:F6:02:DA:7C:4E:69:C8:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHkad7eTMW9ffev2Atp8TmnIvGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/084F92569CF911F08812DE1EC4F9AE02/GHkad7eTMW9ffev2Atp8TmnIvGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:17:67:08:a0:34:b4:9f:09:34:59:24:5d:ac:c0:31:2e:66:
         fd:f9:37:7d:96:cf:b5:c7:14:16:d6:66:6d:c5:8a:33:17:17:
         9c:b8:b1:f9:10:93:b3:e8:2c:61:7a:50:e7:39:db:1f:c0:04:
         29:05:dc:a3:fe:5d:49:25:ef:5d:d7:b3:8f:07:d9:02:13:fc:
         0b:be:0f:02:c3:49:c9:8f:58:fc:7e:d5:0e:84:6c:a7:2c:25:
         04:40:a5:19:4a:80:06:26:be:45:8a:74:0b:8b:75:3a:10:77:
         0f:46:f5:5c:43:50:c8:c4:53:ae:1b:db:6c:e5:bf:fc:ed:68:
         4e:9d:ae:ee:ef:00:3d:4b:11:5e:0d:90:fb:eb:da:49:6c:a5:
         11:ba:5e:c3:58:10:65:eb:56:43:69:7d:e9:75:b4:1d:e9:a5:
         19:98:3c:02:e8:d8:ca:58:83:9b:bb:ae:7e:a6:c3:aa:72:7d:
         72:22:65:d6:6c:fa:a0:57:cd:e0:12:5a:43:8a:4b:50:ad:6c:
         a5:e6:0b:08:a1:d6:d1:e1:0f:b8:c8:d5:6a:24:b5:59:cd:36:
         83:87:32:44:2d:0f:fa:82:e5:53:03:7c:16:35:9b:df:8c:63:
         d6:74:4b:eb:21:ee:44:0a:7f:cc:e7:ed:ff:23:fa:95:c3:8e:
         d8:6d:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:39 2026 by rpki-client