Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
File:                     GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft (raw, json)
Hash identifier:          muuIf2/GNp7KzHT4zvYEwbtW6CygHnbq19mpeo2AS5Y=
Subject key identifier:   A8:6E:6D:5F:9A:57:DC:69:DD:88:AB:D3:D3:65:6A:48:9E:F2:C5:45
Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B
Certificate issuer:       /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B
Certificate serial:       079F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
Manifest number:          078D
Signing time:             Fri 04 Sep 2026 20:04:24 +0000
Manifest this update:     Fri 04 Sep 2026 20:04:24 +0000
Manifest next update:     Fri 11 Sep 2026 20:04:24 +0000
Files and hashes:         1: GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl (hash: cogPPg3d1OZo/D9tJzXi8ipaaJ9UGQDvxzWZ+372Pqg=)
                          2: 48D65BC2D28F11EB9F83683DC4F9AE02.roa (hash: PKuAHlg7IDQmqtBcmxC313Us4ZuOMAlQSrtZq4f+5Bg=)
                          3: 00756F7E63F011EC987F5B19C4F9AE02.roa (hash: NJ2yttVg/1tKklwG0b4mf3B8YWLlDm4GZ+hgK2zNvsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl
                          rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 20:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B
        Validity
            Not Before: Sep  4 20:04:24 2026 GMT
            Not After : Sep 11 20:04:24 2026 GMT
        Subject: CN=6a9b2448-12bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:7a:ec:af:a5:07:11:22:ea:70:4b:a8:8b:
                    a7:cd:d1:75:50:cc:c5:8e:db:b9:8a:09:d9:4f:96:
                    de:0f:43:09:ab:9e:be:ed:56:8c:1a:fb:b1:f2:81:
                    12:95:11:ba:45:37:1c:c2:1f:f9:da:34:ca:7c:70:
                    cc:0e:4e:cb:2e:45:0e:22:77:41:cd:87:92:f2:c7:
                    f2:67:84:65:15:bd:b1:43:b7:24:f9:87:59:6f:87:
                    9d:14:04:f8:27:86:09:76:3e:a2:fe:6c:d9:c0:4c:
                    7c:3f:f0:04:d5:21:a3:0d:d2:16:d7:36:e5:da:2f:
                    52:2b:c0:b8:92:c7:38:76:6a:cb:c5:11:ed:0d:7f:
                    dc:66:58:dd:f9:fb:5d:28:87:b3:a7:40:7c:ee:e1:
                    14:4c:33:60:10:d2:49:09:4f:51:06:bf:3f:9b:db:
                    68:ce:ae:6c:a1:6b:ce:3f:c4:58:fa:58:81:f9:62:
                    43:89:8a:39:24:d9:36:17:ee:ec:c9:8d:40:59:d8:
                    4b:18:8e:d8:59:41:b3:b9:49:f5:4b:35:38:31:38:
                    b9:d2:36:ec:22:d1:18:6f:e1:40:52:2c:be:f6:41:
                    06:db:e8:f9:53:54:e2:46:0f:55:69:e7:d8:39:8c:
                    84:1e:c7:c4:88:ae:6c:28:b5:cf:13:fc:66:90:54:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:6D:5F:9A:57:DC:69:DD:88:AB:D3:D3:65:6A:48:9E:F2:C5:45
            X509v3 Authority Key Identifier:
                keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:30:6b:85:8d:28:89:b1:02:47:5b:ae:ed:ea:59:7c:97:5a:
         b2:a8:f1:fb:cd:20:80:a9:a1:c8:64:8a:b1:88:09:52:9a:61:
         8f:17:31:d1:b6:82:55:3b:66:71:0a:51:47:1e:f4:60:ae:6c:
         b4:16:fd:ce:1b:4b:cd:3c:35:0c:cb:ca:93:b1:cd:aa:7e:f9:
         6c:59:13:be:dc:7f:e3:0d:44:5c:5d:bd:1e:8b:65:36:35:41:
         08:f1:5c:89:2e:8e:0e:d2:9f:98:cb:82:29:88:9e:9f:04:9f:
         01:db:9d:af:98:c6:72:e0:66:3b:d1:83:e1:6e:74:38:b1:40:
         39:48:09:c0:cd:5d:8f:d8:97:bc:66:68:d0:7b:a1:ac:cd:ed:
         73:59:e3:58:a9:a0:9d:cc:9d:1c:f0:1d:33:ee:ff:91:9b:2c:
         99:65:28:26:8d:66:c0:2c:aa:18:0b:cc:32:34:b3:43:a7:50:
         3e:0c:36:fa:13:1e:cc:6d:8b:cb:e2:83:be:8f:6b:0e:50:ed:
         04:cd:7b:8c:e0:b5:44:be:55:50:d1:55:0e:1c:2c:12:68:ed:
         b4:07:71:7b:50:4f:eb:df:50:96:00:6c:e1:77:22:f7:a9:43:
         14:3a:1a:81:66:1e:17:9f:6d:a1:fe:e2:54:bd:3b:e3:3b:fc:
         5d:e3:3c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:24:14 2026 by rpki-client