Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
File:                     Gra655Oriqyjv9ZsbCmwrVED8JA.mft (raw, json)
Hash identifier:          SbRfcvLAI+T48b+/dC46q8zouab9pL1o9I1Txu4pM50=
Subject key identifier:   D4:56:6E:A2:3A:B3:09:17:7A:B9:F0:AE:D8:33:29:07:28:D8:09:1B
Authority key identifier: 1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90
Certificate issuer:       /CN=A9185896/serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
Certificate serial:       0278
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
Manifest number:          0269
Signing time:             Wed 19 Aug 2026 02:42:02 +0000
Manifest this update:     Wed 19 Aug 2026 02:42:02 +0000
Manifest next update:     Wed 26 Aug 2026 02:42:02 +0000
Files and hashes:         1: Gra655Oriqyjv9ZsbCmwrVED8JA.crl (hash: zDFRpsOQ7WGGDfLjtvbtz4N4bmllh7dsZOfSqffHw64=)
                          2: 1C46B158029711EEB8410455C4F9AE02.roa (hash: Pa6zK+kRshF3BMg8W/LDZdS0h0pzzVUC/7JqNU9wtmY=)
                          3: 760E95F6C6AA11EFAAE05A0EC4F9AE02.roa (hash: /YmLjcVQbVo3ZZhzCl8ZHUyRrJ64Q6POActdbKR9BiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl
                          rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185896, serialNumber=1AB6BAE793AB8AACA3BFD66C6C29B0AD5103F090
        Validity
            Not Before: Aug 19 02:42:02 2026 GMT
            Not After : Aug 26 02:42:02 2026 GMT
        Subject: CN=6a8517fa-8f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:c8:a8:07:6b:10:fd:dd:98:d2:b4:33:32:
                    22:91:60:be:6a:4a:bd:d9:43:7f:15:0d:ad:45:b8:
                    fe:a6:01:98:10:27:c3:3f:97:16:b0:1a:ab:dd:2f:
                    7f:04:fc:d6:04:75:f4:b7:7b:76:16:c1:c8:9d:8a:
                    36:da:e3:83:92:f1:b4:e5:ae:ad:21:d9:2d:6b:64:
                    8e:7b:f8:e2:88:b6:90:98:83:89:b5:6b:77:ee:b9:
                    59:c2:35:b7:f7:74:17:98:08:0c:17:28:1f:25:43:
                    43:c9:33:31:3a:42:ec:10:51:f1:c1:6b:2a:3d:3f:
                    e3:90:af:e0:d9:89:63:58:b4:02:3e:69:d8:fe:ed:
                    71:9f:c5:2a:b0:66:ee:b8:85:b7:c4:4d:6e:90:a5:
                    ea:07:95:5c:98:02:1f:45:a0:07:ff:63:fb:c6:76:
                    43:85:14:00:62:41:57:3f:52:e8:52:5f:31:4f:75:
                    93:be:01:9b:73:c9:ba:1f:ee:3b:e7:07:3f:81:34:
                    f8:45:af:be:50:0d:29:f2:ad:98:82:59:a5:9f:82:
                    98:44:68:f6:56:d4:4f:25:8d:af:61:95:67:b4:15:
                    6a:d5:07:89:7a:89:39:41:e8:64:8b:bc:61:ba:8b:
                    e0:b6:f8:da:ae:74:0c:27:dd:f3:53:9e:9a:7a:05:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:56:6E:A2:3A:B3:09:17:7A:B9:F0:AE:D8:33:29:07:28:D8:09:1B
            X509v3 Authority Key Identifier:
                keyid:1A:B6:BA:E7:93:AB:8A:AC:A3:BF:D6:6C:6C:29:B0:AD:51:03:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gra655Oriqyjv9ZsbCmwrVED8JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185896/E122727CF67C11EDA1C53986C4F9AE02/Gra655Oriqyjv9ZsbCmwrVED8JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:db:b0:97:7e:a5:89:9f:c4:0e:c7:e4:7a:48:71:02:3f:7c:
         7f:ec:94:cf:b9:da:d0:4e:d3:82:f6:c3:e6:a5:0b:fe:27:26:
         bf:25:32:10:ac:a4:b6:54:57:04:2d:57:88:ec:b3:f8:03:a4:
         f7:93:49:18:38:8e:ac:3b:d1:a7:27:7f:ff:2e:af:1e:70:1f:
         54:b5:d6:a3:0d:e4:7a:f6:c3:c4:fc:e7:78:36:2f:19:4a:ed:
         f0:5a:5f:05:18:3b:77:64:01:7b:19:b0:2c:d0:fe:86:68:e2:
         e8:68:f5:5b:d5:49:53:09:43:f0:e8:e1:4b:50:01:28:cb:79:
         88:69:5e:3f:5f:4f:c0:f3:23:3f:02:ca:62:02:b6:34:7e:20:
         c4:90:2f:39:e7:d8:11:b6:58:8e:27:36:50:07:ed:51:58:75:
         d5:71:31:3a:f0:b1:0f:b3:70:a2:50:06:9e:df:c1:63:23:14:
         0b:ba:ca:84:c5:4a:ae:a0:90:44:cd:88:b9:93:a6:60:c6:68:
         b2:a9:ee:47:35:cf:4c:7b:4c:67:fe:5b:8c:f5:5d:69:5b:77:
         97:17:a7:e6:18:de:19:9c:1e:25:29:75:d0:4d:83:61:e6:b7:
         17:ca:e6:5f:27:ad:34:d4:ce:73:61:52:9c:d1:b6:aa:f0:ef:
         ac:0a:8c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:04:33 2026 by rpki-client