Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          CDvHkRr8L04AeqJAu858Bgg6eBLDC809Ne1S3osBuXk=
Subject key identifier:   5B:35:92:00:4D:75:94:DA:86:67:5C:45:D4:75:27:33:05:3E:3D:1B
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0CE9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0CCF
Signing time:             Sun 16 Aug 2026 18:42:33 +0000
Manifest this update:     Sun 16 Aug 2026 18:42:32 +0000
Manifest next update:     Sun 23 Aug 2026 18:42:32 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: KLpUVr7C8Y6bhl2d9aJSxXRTaYSL6RruupFKGqBJYsY=)
                          2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
                          3: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 18:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3305 (0xce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Aug 16 18:42:32 2026 GMT
            Not After : Aug 23 18:42:32 2026 GMT
        Subject: CN=6a820499-4e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1d:7c:0a:8d:19:9d:e3:63:90:73:11:0b:ce:
                    a9:b9:5a:a8:58:a9:32:c3:1c:e8:e9:16:8d:e8:ac:
                    c7:7e:f0:f1:20:63:45:0a:d5:21:4a:40:1e:c9:fe:
                    fb:03:15:a3:18:85:83:4b:b8:a2:8e:fb:4e:ba:c8:
                    b9:ab:f8:fa:7f:31:11:d5:3f:b2:60:3b:ff:df:bc:
                    cd:c7:1e:19:7e:c0:b3:4b:fc:b0:19:db:6c:cc:a7:
                    81:24:2d:f4:b5:6c:56:78:ed:17:1a:56:13:83:d2:
                    8d:a4:6c:69:a8:70:1c:be:3f:d6:a1:69:6f:0c:17:
                    2d:69:28:ba:9a:5d:10:82:9b:74:25:fb:4e:28:7a:
                    4d:49:8a:40:18:41:d2:96:60:f0:05:97:83:f4:2b:
                    23:e5:d7:ba:3f:8e:e4:97:dc:ce:b1:54:23:1f:82:
                    6d:b7:5f:c7:c9:9c:ae:52:87:6b:a6:3f:cf:97:6b:
                    3c:35:70:b3:f1:bd:8b:78:08:2e:60:52:b6:0a:0f:
                    70:66:88:af:c3:7d:1a:a3:54:a1:d9:53:8c:3c:e8:
                    6a:31:c2:f8:bd:0d:52:23:da:d7:bc:1f:df:28:a3:
                    56:ca:c1:0d:76:33:fc:3b:db:b9:e2:33:0f:1a:e3:
                    7f:ff:6f:e6:5d:84:35:bf:06:5e:d9:c0:5e:10:67:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:35:92:00:4D:75:94:DA:86:67:5C:45:D4:75:27:33:05:3E:3D:1B
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:31:f5:bd:42:52:66:59:64:2b:e7:eb:33:1f:1d:6c:1e:
         ae:a9:72:41:07:47:81:2f:bf:3a:b5:a0:1d:15:9d:3c:de:69:
         f8:ab:1d:74:0e:e6:5f:79:a6:60:f3:3c:b9:df:fa:88:e2:94:
         11:42:21:38:37:73:93:f0:11:f5:d4:06:96:a3:a7:3d:f6:c7:
         e6:f3:06:54:e6:ee:8c:33:3e:24:36:04:15:7d:7b:45:b2:c2:
         b2:bd:35:62:66:30:04:bd:99:d3:02:26:bc:42:e4:36:39:17:
         c8:3e:46:a3:07:d0:e4:fa:7a:41:b0:e3:c7:2b:04:49:ff:e3:
         f5:31:45:92:4d:fe:d3:60:2d:25:17:39:cf:31:50:e7:c3:73:
         8c:55:75:b8:97:1b:f3:44:04:46:64:73:67:a5:51:10:bf:61:
         1d:5a:c0:7d:9f:9a:e7:a4:a2:c6:e8:21:f9:cf:ea:77:1c:32:
         11:43:a0:f4:73:c7:0a:3c:54:28:db:4f:28:70:26:07:bc:4d:
         c2:80:bd:d8:77:4d:ae:1b:c2:90:0d:9c:cd:cd:89:a8:a4:73:
         32:41:88:83:e7:49:f1:a5:c0:c7:08:29:20:13:51:94:ca:59:
         5c:61:df:6b:72:67:b9:14:2e:cd:71:4f:df:e1:7c:6e:65:8c:
         45:f6:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 04:41:03 2026 by rpki-client