Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File:                     ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier:          vyPKmjEF4UGAPb6Cf0Y+87fFqEtqBW+fBwAvGjKrgps=
Subject key identifier:   DD:69:88:72:F4:93:5D:23:0E:64:48:3E:8A:25:16:F9:F6:D9:29:FE
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer:       /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial:       02D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number:          02C2
Signing time:             Fri 11 Sep 2026 01:22:12 +0000
Manifest this update:     Fri 11 Sep 2026 01:22:11 +0000
Manifest next update:     Fri 18 Sep 2026 01:22:11 +0000
Files and hashes:         1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: /fseNLLF8N4+0QlLZIJd+dyTgIiWa7bKItYQ+KXLzIY=)
                          2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=)
                          3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Validity
            Not Before: Sep 11 01:22:11 2026 GMT
            Not After : Sep 18 01:22:11 2026 GMT
        Subject: CN=6aa357c4-edf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:22:b6:c2:e0:f4:f5:50:bc:25:9f:cf:ca:
                    31:a5:62:f3:ea:3b:97:a2:43:03:d0:ae:01:e3:ac:
                    1a:3b:54:3b:b8:dc:c2:a0:62:3c:ba:c9:34:fb:f4:
                    cb:b2:20:50:eb:4f:1f:47:45:5f:f6:74:d8:14:e9:
                    df:28:f3:fd:5e:ed:1c:91:44:5b:b9:95:fb:06:f3:
                    de:3f:36:07:3a:29:4c:cf:5d:25:6d:90:d1:a8:55:
                    0b:b6:db:8b:56:56:93:53:2c:fc:5d:60:71:23:99:
                    ef:df:13:59:13:28:49:b2:7b:77:31:07:5c:56:56:
                    85:5a:78:fb:b0:fb:5d:15:6e:96:62:a8:48:98:e7:
                    12:c1:1d:9f:14:c2:b1:b3:48:83:af:cf:00:aa:75:
                    c6:90:6e:04:9d:71:f5:d1:08:60:7f:96:51:81:a7:
                    a7:93:9d:4a:15:50:cc:be:ea:71:91:98:a6:df:9b:
                    50:34:ae:d1:59:a0:53:2d:dc:07:99:73:b9:fc:cf:
                    f7:77:36:f5:81:e0:8e:54:e6:58:00:a8:42:2c:ea:
                    48:1a:02:c6:72:0a:e4:9e:b4:ca:cf:08:75:c4:cb:
                    47:1b:70:00:3d:45:33:f2:31:78:14:96:33:1f:06:
                    0d:48:a0:66:b7:b2:fb:3e:16:ff:fe:da:01:f4:0e:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:88:72:F4:93:5D:23:0E:64:48:3E:8A:25:16:F9:F6:D9:29:FE
            X509v3 Authority Key Identifier:
                keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:d9:e3:58:8b:2e:12:80:01:5c:f6:ed:46:5e:95:fc:19:
         4c:4c:37:2c:57:5d:9a:33:3c:47:75:99:3c:83:f4:1e:e2:5a:
         b0:d6:e4:55:61:23:6f:92:8d:7a:46:e6:11:47:97:1d:76:ce:
         78:c2:a8:aa:6e:71:f8:ea:e9:40:7f:7e:e2:48:50:52:63:8a:
         15:fe:09:a4:a7:2d:cd:5b:7c:c7:97:ca:5b:f9:a8:7a:2c:a5:
         d5:92:ee:31:9d:15:33:c6:cb:07:0a:4e:81:11:6f:b0:a3:92:
         a3:4c:8e:b8:db:20:26:5a:7d:aa:68:f5:5d:e2:66:1f:76:12:
         4a:c4:75:94:93:5f:43:1b:ed:4b:76:b2:12:52:2b:15:ad:c0:
         ce:f1:15:58:86:9c:8b:d0:2d:fd:f5:09:59:36:a3:8f:b8:52:
         4c:f9:67:c4:83:c4:81:73:9d:b2:50:92:7c:9f:4b:35:ed:82:
         09:6f:24:c0:f2:6a:5d:65:05:12:94:10:5b:c6:3d:e9:25:90:
         b0:8e:f5:1b:85:eb:cd:6c:2a:64:0e:a1:26:0e:c9:fb:11:f2:
         3f:b0:f9:0a:7c:83:02:a9:7f:51:0b:e5:f8:e3:b9:68:51:36:
         dc:ce:d1:e1:09:48:24:ef:11:8d:6d:2d:9a:fa:ba:82:db:8d:
         08:3a:d6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:38:45 2026 by rpki-client