Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
File:                     GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft (raw, json)
Hash identifier:          f9WDu/m4nwn9zbSOlmdFfll+ir2oMv4QgffqSLT/wgk=
Subject key identifier:   91:9D:D6:3B:B4:27:8E:93:9A:3A:BA:F8:50:CE:99:F1:F7:8F:77:E3
Authority key identifier: 19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9
Certificate issuer:       /CN=A918842E/serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
Manifest number:          D3
Signing time:             Wed 19 Aug 2026 07:25:05 +0000
Manifest this update:     Wed 19 Aug 2026 07:25:04 +0000
Manifest next update:     Wed 26 Aug 2026 07:25:04 +0000
Files and hashes:         1: GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl (hash: XKcQByD2JyYIk6AjMTMYCg5cyHEPZUNS1/0hnssny+s=)
                          2: 51D222025DEF11F08A4EA06FC4F9AE02.roa (hash: Ht+AYFRYgTia5PfBCXy1G2MKk6pS05Kn+q7rQOjqmks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl
                          rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918842E, serialNumber=19A0438199FDFE24DCF85662A48BDB5751E1B5D9
        Validity
            Not Before: Aug 19 07:25:04 2026 GMT
            Not After : Aug 26 07:25:04 2026 GMT
        Subject: CN=6a855a50-d3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8c:1e:03:a9:85:62:b5:c8:7c:c9:a2:27:6e:
                    e6:cc:d9:b8:b5:b4:34:1c:53:e7:61:fb:b1:31:4d:
                    03:97:1a:1f:bf:79:12:ec:e5:be:31:f6:50:de:d7:
                    9b:de:85:77:09:37:89:69:c0:52:67:6f:07:67:c1:
                    14:d8:44:72:ad:12:2c:1c:42:ec:09:92:bc:72:73:
                    5a:43:8e:91:2b:f4:a4:e4:49:e2:7f:db:81:f2:a3:
                    4f:7c:2e:4b:00:e8:13:75:e0:8f:ae:f5:fd:7e:05:
                    ef:90:25:27:8b:13:df:80:a5:9f:fd:6f:e0:fa:e4:
                    14:b9:19:a0:d2:95:15:41:5a:57:91:35:29:3f:5d:
                    56:bb:51:04:a8:7e:ef:08:24:b0:b2:a5:7d:ae:bb:
                    a3:41:d4:4a:6f:4b:79:6f:ab:a4:b8:0e:f2:96:34:
                    d5:db:1f:1a:6e:12:b6:68:cf:f0:97:2a:d8:eb:fa:
                    27:f3:02:cf:0f:d0:7d:6f:be:15:22:30:12:59:6e:
                    ac:40:dc:86:c0:5c:4d:51:bc:43:7c:03:a0:d0:ba:
                    18:cc:39:9d:d2:43:f6:41:fc:e5:ad:ce:35:73:04:
                    08:44:58:0b:08:16:fd:74:be:82:ae:f2:6e:62:da:
                    79:c7:16:6c:8e:e0:00:91:63:bf:6b:af:30:38:e6:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9D:D6:3B:B4:27:8E:93:9A:3A:BA:F8:50:CE:99:F1:F7:8F:77:E3
            X509v3 Authority Key Identifier:
                keyid:19:A0:43:81:99:FD:FE:24:DC:F8:56:62:A4:8B:DB:57:51:E1:B5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaBDgZn9_iTc-FZipIvbV1Hhtdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918842E/6199BD545DEE11F08FAA2B6DC4F9AE02/GaBDgZn9_iTc-FZipIvbV1Hhtdk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:59:e5:cf:51:0b:8c:b9:b8:3e:25:6c:4d:b7:d8:2b:7b:a2:
         4c:73:22:ab:c1:be:1d:47:ca:d4:b3:5c:1e:3c:fe:bb:ab:c7:
         49:97:b1:a4:d5:af:9e:5b:58:8e:c5:be:85:e0:ca:f0:f2:50:
         f5:95:d5:bd:bf:d7:1b:90:b8:7f:d6:c4:3a:79:a9:d9:54:55:
         60:c9:c1:d6:6e:8d:dc:70:ac:44:e1:a1:9c:a9:72:f9:15:c3:
         7e:e7:a1:60:b5:47:f1:9a:b8:83:04:48:f7:0a:38:74:bf:e6:
         a9:63:b6:80:2b:ed:3b:63:7f:25:79:c6:17:2f:c8:91:32:d7:
         7c:63:f7:f7:54:7c:6d:39:4f:ea:46:2e:65:0a:52:65:e5:e6:
         81:2e:bc:ad:ca:23:06:cd:2a:76:fe:fb:b7:11:f9:e2:04:aa:
         a3:d1:bc:cb:3b:c8:6e:e9:29:6c:aa:0d:cd:f4:ef:36:56:8a:
         38:46:e4:0e:c9:5b:01:41:00:36:c1:59:c7:05:e1:3c:85:57:
         20:ea:09:8b:d5:ed:d7:ee:08:b0:f1:f3:f2:fe:36:67:05:8a:
         00:03:99:8f:25:a3:57:98:a7:a5:e0:bd:a5:03:85:e2:f3:78:
         45:23:ea:6a:0d:f5:f3:f3:8c:68:fe:8e:5d:b4:79:c5:cf:7a:
         7d:11:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:42 2026 by rpki-client