Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          u2ry19K+qz/F2WzB9mfKWlcwZDljGKUcefbDuiBAKgc=
Subject key identifier:   4D:B5:E0:02:1E:E7:E5:96:16:70:F5:D3:83:CB:EB:B1:5C:85:77:FF
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0C20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0C01
Signing time:             Mon 06 Jul 2026 19:16:21 +0000
Manifest this update:     Mon 06 Jul 2026 19:16:21 +0000
Manifest next update:     Mon 13 Jul 2026 19:16:21 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: l8iRqE73jAIrg+tkBKxwUMtQJpkp8qxh2Z78clfPVKI=)
                          2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: Z0MQnn6qOb174wCs47KETGp25JeTqEfueFTHZlB9rgo=)
                          3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: BCikVDMThdr7c/vX1LiQM/OJjvtE7QJ+zP42lyGw5lY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 19:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3104 (0xc20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Jul  6 19:16:21 2026 GMT
            Not After : Jul 13 19:16:21 2026 GMT
        Subject: CN=6a4bff05-4daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:34:40:93:3d:06:f4:d4:c7:2d:6f:5f:65:
                    80:ff:c8:9e:14:bf:12:a1:33:55:d4:08:b4:c3:55:
                    be:af:81:33:cd:f3:42:50:b6:6c:1a:c0:7d:8d:e1:
                    a3:27:b0:0d:2a:5d:d9:64:f3:02:ec:f9:28:f4:92:
                    04:3e:dc:20:3e:91:69:5a:c4:a1:0a:13:a2:28:7c:
                    97:fb:83:ba:37:a9:8f:ef:91:17:4e:25:5d:7f:c3:
                    35:92:70:51:b2:66:d7:ec:04:45:52:1c:93:c2:4b:
                    3e:b1:84:e9:b4:e7:67:e6:8f:1e:94:36:73:47:d3:
                    1b:d7:b2:b1:49:4e:0d:4f:c1:0a:c3:77:5f:ec:bc:
                    84:93:97:96:69:d1:85:78:0a:1c:dd:7c:cc:f7:d8:
                    8f:9c:9c:0a:dd:9f:f5:df:ba:bf:80:f5:76:1d:ae:
                    25:98:83:a5:87:08:1a:2e:02:85:f5:9f:d5:73:57:
                    5f:e7:60:c4:b4:3d:76:f2:fb:04:1e:bf:f0:ea:9c:
                    8f:a6:db:a5:38:33:66:ff:d0:78:79:83:14:2c:b1:
                    db:95:c2:cf:eb:5d:91:6f:2b:fc:ec:24:61:bc:b2:
                    b5:d1:32:1e:68:aa:3f:5f:c5:39:c3:01:6b:59:bd:
                    71:c3:11:81:8d:a4:e8:7d:a0:4d:7c:11:7c:a3:4c:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:E0:02:1E:E7:E5:96:16:70:F5:D3:83:CB:EB:B1:5C:85:77:FF
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:ea:25:38:ad:9f:19:6a:c1:44:7a:af:3d:1c:5d:92:48:
         b8:84:12:84:36:c6:57:1d:8d:65:42:0f:f6:c9:2e:e8:f9:bd:
         28:c1:c5:b5:91:9f:6b:4f:f5:e3:d1:8e:af:50:5b:de:69:04:
         2e:f8:e3:9d:22:72:c6:1c:82:b1:5e:60:70:aa:18:61:7d:dd:
         ca:0d:02:7b:c8:18:ca:fe:b8:1a:9c:30:0f:f9:e8:80:c8:7d:
         6d:27:ae:5e:89:62:cc:24:0d:ac:d1:43:4b:c4:2e:c3:59:01:
         e0:6c:c6:8a:ba:46:58:d5:de:c6:38:bd:bf:37:ab:fa:1b:4f:
         87:0c:af:86:39:dd:6c:bf:f3:33:3d:7e:ff:69:a6:3c:b1:40:
         4b:f9:26:35:bf:47:86:46:7a:9e:80:4b:5a:c8:d6:5f:0a:26:
         de:84:01:67:63:33:34:01:89:df:d9:fc:d9:29:fb:26:c8:76:
         09:ab:6b:fa:73:31:32:66:71:69:a0:97:89:9a:3f:12:9e:af:
         e1:d1:fa:12:aa:b9:4c:f1:52:99:73:44:2e:0a:49:d4:14:2e:
         ca:78:7c:52:f3:f0:74:3e:99:e8:2c:78:c5:17:1f:e1:10:58:
         c0:27:05:71:5b:f0:12:78:28:46:13:c1:b0:0f:71:87:89:d2:
         d1:ec:85:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:55:47 2026 by rpki-client