Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          nfnv6A4A/VFTKQiNsXTnbx2VTtABrZBcI89J0CeisSE=
Subject key identifier:   ED:F3:67:B6:30:C1:AA:AE:E3:3D:7B:C3:CC:B4:D7:2F:0E:E4:81:E9
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0C37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0C18
Signing time:             Thu 20 Aug 2026 18:47:44 +0000
Manifest this update:     Thu 20 Aug 2026 18:47:44 +0000
Manifest next update:     Thu 27 Aug 2026 18:47:44 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: t4+N/A2WCzTo2O0OFALzHOvIH+4M6yZiWcAjboy42Hk=)
                          2: 1671D380603711EF97BB395FC4F9AE02.roa (hash: BCikVDMThdr7c/vX1LiQM/OJjvtE7QJ+zP42lyGw5lY=)
                          3: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: Z0MQnn6qOb174wCs47KETGp25JeTqEfueFTHZlB9rgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3127 (0xc37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Aug 20 18:47:44 2026 GMT
            Not After : Aug 27 18:47:44 2026 GMT
        Subject: CN=6a874bd0-2229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:85:6a:0c:33:44:5d:1c:38:ac:88:34:cb:
                    00:52:92:21:e2:08:4b:5f:09:03:a2:fb:d4:fa:0f:
                    36:f4:6d:b2:85:78:9c:b8:e0:b6:4e:17:5d:04:e5:
                    e2:ba:9f:b2:c5:8d:e1:dc:69:b5:9d:7a:0b:50:e0:
                    39:c9:7f:86:8e:c4:00:ad:ac:89:97:3a:95:1b:e1:
                    b3:76:bc:5d:91:c3:78:fa:72:04:a6:6a:4b:30:0e:
                    f3:b8:95:50:f3:ec:53:55:c4:9e:30:7c:7e:fe:90:
                    26:94:99:92:1f:9c:81:99:02:5d:b5:fe:4a:a9:f9:
                    82:4b:a8:3a:77:4b:7d:64:e2:20:f1:b7:74:80:6a:
                    a4:bb:0c:3c:ad:1f:62:8b:b5:90:8f:67:a2:95:b3:
                    25:5f:e0:95:32:a9:78:50:b8:79:7b:bf:06:f7:b6:
                    99:5f:36:84:94:19:e7:b2:6a:b7:39:79:5b:7f:a2:
                    03:dc:89:67:87:52:e9:16:3d:71:3a:8d:31:97:ce:
                    b4:78:a3:f0:d2:15:af:ad:69:cb:f8:45:f3:00:04:
                    41:5b:27:47:f5:fc:6e:19:fb:e9:4b:1c:aa:ad:af:
                    9d:49:a9:bd:d7:00:c2:36:92:50:ec:8a:a1:2b:23:
                    b6:19:1c:42:c9:51:95:d3:02:62:a0:51:fd:26:e3:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F3:67:B6:30:C1:AA:AE:E3:3D:7B:C3:CC:B4:D7:2F:0E:E4:81:E9
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:56:da:08:2e:5e:ae:a7:ce:7e:ee:52:9d:c7:59:b0:10:f4:
         07:c0:25:7d:da:be:3f:bc:09:0b:43:7c:bb:45:fa:1f:93:dd:
         d2:65:74:d6:c9:ae:10:0c:77:ae:ab:13:ec:dc:64:62:e9:a9:
         31:5a:ff:0d:21:0a:c9:fb:20:35:fb:a8:74:f4:cd:4c:d6:1d:
         20:a7:73:86:af:02:45:b1:8e:16:39:c9:15:af:54:e2:ab:73:
         93:30:98:fb:b6:57:a0:6b:a2:80:27:0b:fa:29:dd:4f:13:7a:
         29:a5:67:62:a6:76:f8:98:1f:00:3c:fc:0d:ae:18:f8:a4:b9:
         96:4b:a8:4f:61:f4:97:74:ae:dd:b6:63:df:a1:7d:0e:11:e3:
         71:86:8a:cb:26:67:e1:a8:b4:9f:dc:82:75:38:1a:83:90:15:
         b1:c9:5d:10:ab:d6:bc:64:99:e6:40:39:8b:52:72:30:d8:c3:
         a3:19:df:cf:81:27:08:08:1e:62:09:cf:79:c1:87:ee:c7:d9:
         bd:be:3b:71:b1:bc:c2:25:d4:2b:8c:54:26:f2:81:50:bd:41:
         6b:08:d7:98:72:f3:56:d5:f0:73:db:a8:55:5b:10:1c:0f:96:
         63:9e:92:8d:b6:2b:a4:8c:51:09:12:41:d8:0e:0e:b8:37:9d:
         20:ca:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:53:52 2026 by rpki-client