Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
File:                     gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json)
Hash identifier:          JjswjpjtSHsqsTCRU1MkDWVf7RTuOQZwjdYuz9Fd3wM=
Subject key identifier:   64:7B:27:23:BE:78:24:60:77:DD:7F:86:EE:2C:50:06:C5:7C:B6:E3
Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6
Certificate issuer:       /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
Certificate serial:       0CD2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
Manifest number:          0CB8
Signing time:             Thu 02 Jul 2026 18:40:33 +0000
Manifest this update:     Thu 02 Jul 2026 18:40:32 +0000
Manifest next update:     Thu 09 Jul 2026 18:40:32 +0000
Files and hashes:         1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: hrIAPpi/5NM0vZbgHAMqdP98vVgtZxiO6SSOJyGfnm0=)
                          2: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=)
                          3: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl
                          rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 18:40:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3282 (0xcd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6
        Validity
            Not Before: Jul  2 18:40:32 2026 GMT
            Not After : Jul  9 18:40:32 2026 GMT
        Subject: CN=6a46b0a1-a6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:a1:bb:8f:c3:30:93:68:39:40:1f:b1:56:
                    18:68:11:39:ec:10:0f:33:3b:96:2c:0b:c4:d8:7e:
                    83:78:6a:a1:3e:f4:0c:a8:2a:f9:dc:71:17:18:79:
                    d8:ad:17:1b:a3:1b:49:92:c8:7c:90:83:90:a4:0b:
                    63:9c:9a:9e:d5:c8:5d:dc:70:05:a3:38:0a:50:3b:
                    e1:16:66:d4:64:12:31:b4:6e:c7:6b:08:54:e5:0c:
                    83:20:17:d9:46:ee:52:7b:2a:5e:b2:96:f5:ff:de:
                    e1:54:56:3c:18:fd:e9:f9:b6:2f:83:c2:fb:75:17:
                    39:39:1e:4a:09:b7:66:ad:91:cc:de:d2:cf:be:3d:
                    b7:cc:ae:09:ec:0d:9a:c9:af:dc:18:0c:5a:e5:a1:
                    35:0e:a7:76:0c:8a:19:c6:3f:1c:9b:6a:bf:b2:64:
                    48:e2:87:fc:8b:84:b2:8c:d7:2d:f5:96:7f:65:81:
                    50:14:1d:ea:37:45:38:ba:2f:86:75:ba:d1:be:0c:
                    4e:cd:f8:9a:d2:5f:82:06:0a:a5:a1:80:56:c1:8c:
                    57:a1:05:1e:71:ee:84:bc:dd:8e:7c:48:61:64:85:
                    68:bc:7c:c5:f2:89:31:b0:63:ab:0f:e9:8e:16:3d:
                    98:f6:0e:e9:5d:bb:2d:f5:78:d8:c7:61:0d:20:b6:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7B:27:23:BE:78:24:60:77:DD:7F:86:EE:2C:50:06:C5:7C:B6:E3
            X509v3 Authority Key Identifier:
                keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:e4:de:9f:b0:5e:dd:38:26:c4:eb:17:57:fa:4c:39:d5:
         70:47:e5:b3:4d:da:a9:b5:ec:aa:4e:92:da:ba:5c:9c:97:de:
         4f:cc:3a:b1:d5:1a:5d:fc:94:6c:ba:68:47:c9:b0:09:95:6c:
         e8:13:dd:6a:e3:e4:5f:ec:3b:01:51:7a:85:ef:19:35:f3:cf:
         fd:1e:8a:08:ef:31:1f:b2:f6:67:db:bb:2a:5e:e2:cf:cd:14:
         97:36:69:29:1d:ca:84:b3:33:98:6f:4b:25:e6:8e:f0:ab:9f:
         7d:0d:f5:65:0c:8c:10:3a:db:99:dc:16:e2:2d:1f:9d:62:a8:
         bb:0b:9f:1c:2c:30:be:8f:ab:e3:b2:5d:ea:77:49:7d:54:a3:
         80:65:33:6b:7c:53:47:d4:ea:c5:4a:71:62:cd:d2:d2:36:a1:
         bc:ba:36:ab:c5:6e:91:21:73:bc:45:15:b9:2c:fe:4b:92:25:
         0c:8f:d8:96:8a:19:0f:26:e4:55:c5:92:59:91:5f:88:0c:0c:
         05:0d:a2:22:79:05:65:2c:71:7a:36:8d:d3:42:c4:91:09:a8:
         03:0c:55:85:f7:f3:92:68:0c:17:22:52:da:61:e9:d6:a3:a0:
         25:a8:39:6b:ff:37:56:05:33:80:23:f4:b0:86:21:8f:05:3c:
         14:64:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:34:47 2026 by rpki-client