Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
File:                     ghbCCBg3GK6QL0P2htUqRHMUc5g.mft (raw, json)
Hash identifier:          YdqouHVfyYLheYzi60SA4Yw3bP0iDJlg13pCwZ4Te1Q=
Subject key identifier:   FD:C3:02:0E:2F:C1:99:02:85:70:42:0F:8F:28:3B:28:25:F8:25:BB
Authority key identifier: 82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98
Certificate issuer:       /CN=A91B85E7/serialNumber=8216C208183718AE902F43F686D52A4473147398
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
Manifest number:          27
Signing time:             Wed 19 Aug 2026 09:31:50 +0000
Manifest this update:     Wed 19 Aug 2026 09:31:49 +0000
Manifest next update:     Wed 26 Aug 2026 09:31:49 +0000
Files and hashes:         1: ghbCCBg3GK6QL0P2htUqRHMUc5g.crl (hash: dGqJPBoyRaX4tYEMLjiUStg8XplofUBVLX+6caFvxYQ=)
                          2: CCFC8F4A608611F181B017396F47A888.roa (hash: NX7Ssb4nWxHkVFaOlDGe8x1QhapCEO7PXneQ/Q5Nq70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl
                          rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B85E7, serialNumber=8216C208183718AE902F43F686D52A4473147398
        Validity
            Not Before: Aug 19 09:31:49 2026 GMT
            Not After : Aug 26 09:31:49 2026 GMT
        Subject: CN=6a857805-a9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:7a:79:8c:7c:78:e6:a1:98:b3:6f:93:dd:
                    da:83:39:e9:75:31:47:d2:ec:f5:97:c2:d5:43:b7:
                    65:58:60:59:42:c5:29:e4:fd:43:43:18:b3:4d:fb:
                    fb:f9:e4:0b:9f:c2:9d:5c:3c:5b:39:a3:6a:ab:50:
                    45:b5:e3:37:df:56:a6:3c:1b:ca:da:3e:9d:a3:ee:
                    2b:9b:e6:90:70:d0:be:5e:b4:a6:87:46:33:47:2e:
                    e9:3e:be:0d:6c:e1:4c:87:e3:1f:35:b0:b4:d4:63:
                    ef:8f:28:c9:aa:2b:5a:af:16:c8:98:65:49:c7:0e:
                    c2:ff:ad:25:7f:29:d4:e1:d5:9a:13:ae:02:63:6b:
                    ca:69:bf:2c:15:c4:0a:4d:75:71:04:09:03:73:87:
                    a3:13:3a:b6:e5:6e:7a:2c:00:bf:6a:da:91:93:3a:
                    7a:a1:20:a6:0e:34:e3:94:66:6b:6a:6e:81:35:d6:
                    96:d2:f0:08:37:76:9d:e5:92:39:ec:13:84:5c:ef:
                    11:a3:c7:5d:b8:21:07:b0:57:72:88:cd:ec:f0:90:
                    74:d7:21:19:ac:b8:1c:d2:5b:c9:19:83:b6:92:af:
                    d9:e7:3a:29:43:dd:f9:28:46:ff:fe:df:3d:83:5f:
                    03:c7:82:0f:5c:53:63:24:b7:c1:71:e8:28:4a:b1:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:02:0E:2F:C1:99:02:85:70:42:0F:8F:28:3B:28:25:F8:25:BB
            X509v3 Authority Key Identifier:
                keyid:82:16:C2:08:18:37:18:AE:90:2F:43:F6:86:D5:2A:44:73:14:73:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghbCCBg3GK6QL0P2htUqRHMUc5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B85E7/5143B874608611F19E4777E26E47A888/ghbCCBg3GK6QL0P2htUqRHMUc5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ad:70:d4:70:ba:7e:3b:30:d4:37:e1:db:55:05:ad:f0:b2:
         bd:17:f9:73:65:aa:5e:94:f4:e1:a4:12:64:c9:fa:74:38:71:
         70:e4:b9:77:c5:e0:76:66:09:67:44:69:2f:d9:a2:f7:41:63:
         7d:42:df:d5:c9:0e:63:8c:eb:83:d4:19:04:b9:d6:92:e6:08:
         32:55:17:8e:25:ef:9f:1d:c8:8a:c5:61:fd:b2:43:59:d2:27:
         95:b5:1c:25:ee:84:7b:23:42:c4:f3:53:a5:a7:ef:89:9b:0c:
         74:cb:76:c3:a4:94:b3:ed:ca:6e:05:56:86:64:7f:6f:d9:c9:
         10:05:52:6f:6b:23:4f:44:b6:ec:95:c2:08:41:18:17:d8:e3:
         79:16:68:a9:20:63:c4:fe:02:5f:b4:8e:c8:e3:6e:a9:d0:7a:
         3f:5e:83:ed:fe:b0:7f:be:5a:ad:df:95:b1:56:a9:a0:6e:53:
         b8:9c:b3:25:c2:7e:dc:d7:ca:cf:f9:5d:a5:ea:39:10:8c:5b:
         a7:dd:93:1a:5c:fe:b6:a9:0d:10:a9:8f:53:56:bf:43:08:7f:
         86:a1:ed:09:5e:3e:1a:34:ba:ed:e5:34:6b:ed:9f:cc:24:4a:
         8d:d1:3a:2e:c1:38:58:c2:c9:33:0d:ae:16:f0:17:c4:ee:2d:
         8a:66:72:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:54 2026 by rpki-client