Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
File:                     GfKkbixJA4dTXpRfaxSGcABoV2E.mft (raw, json)
Hash identifier:          XTNPDGvjn/WkqoXlwN+FpEC7sDKqjoWacC2mG5QJdJI=
Subject key identifier:   55:2F:DE:94:AD:8D:78:EF:05:8A:82:8A:B3:94:6A:02:C4:DB:B8:56
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Certificate issuer:       /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
Manifest number:          AB
Signing time:             Thu 09 Jul 2026 09:09:20 +0000
Manifest this update:     Thu 09 Jul 2026 09:09:19 +0000
Manifest next update:     Thu 16 Jul 2026 09:09:19 +0000
Files and hashes:         1: GfKkbixJA4dTXpRfaxSGcABoV2E.crl (hash: Lx1Sum4B+0v2Un84o8frJ4+92+HsNLAJe3rTchhTNfQ=)
                          2: 7DF6251A74B311F0A365281CC4F9AE02.roa (hash: zAfzIwWbsqduKym8Tq6NvhU1YHpokkZy+Zh0KEGQ0oM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
                          rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 09:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
        Validity
            Not Before: Jul  9 09:09:19 2026 GMT
            Not After : Jul 16 09:09:19 2026 GMT
        Subject: CN=6a4f6540-ec3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:1c:ec:ad:08:07:96:9c:d8:43:f9:16:8b:
                    cc:90:d8:c5:7a:32:59:e1:52:da:d5:6b:4a:19:e5:
                    d8:8d:3b:49:20:e2:f8:21:31:a5:37:3a:a0:a5:5b:
                    6a:73:61:96:05:b6:7a:30:25:69:6a:87:94:d3:c4:
                    8a:87:68:84:f1:e5:f4:c7:91:81:61:6d:a8:05:94:
                    9f:14:03:3f:36:41:de:d1:44:51:af:ab:55:4b:26:
                    2f:a4:dd:b5:fc:d0:c5:0f:c9:da:1c:55:d3:3d:36:
                    64:f1:99:0d:8b:71:c0:ad:09:92:9f:99:78:db:6d:
                    8e:87:b2:ca:c4:b4:f3:88:b4:cd:80:0a:ce:0e:9d:
                    f9:54:a9:c1:d7:63:32:20:a5:01:4e:77:1c:7b:c5:
                    4c:a6:1f:44:7f:56:55:10:cb:af:8f:b2:ef:fb:d5:
                    15:de:6f:23:a8:22:fa:7d:d8:5e:c4:db:c7:d0:e5:
                    2d:99:21:55:ee:f6:07:10:af:12:bd:96:9c:dc:46:
                    8c:81:52:9e:92:a9:b5:ae:c0:cd:4e:3a:a9:41:fd:
                    9e:1d:de:62:a3:20:fd:55:d4:ad:00:30:e4:d0:d8:
                    68:83:57:77:2c:30:54:04:e4:b5:06:d4:6d:3a:86:
                    08:1e:19:b3:8a:96:f5:8e:d8:f5:33:23:a5:96:89:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2F:DE:94:AD:8D:78:EF:05:8A:82:8A:B3:94:6A:02:C4:DB:B8:56
            X509v3 Authority Key Identifier:
                keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ed:3b:89:8c:3d:5c:52:da:3a:4d:13:11:9f:75:b9:3c:99:
         ef:95:03:28:0f:fc:14:2c:c8:11:94:57:e6:8d:66:28:80:23:
         c6:db:c3:bc:45:59:a0:d8:0a:fd:ca:6d:7a:ea:e9:c9:de:84:
         ab:14:b8:e9:b5:e2:e6:f6:f1:88:31:3d:bc:9a:45:60:f2:61:
         cb:31:f3:4f:92:38:2f:18:9b:ed:b1:cf:57:99:12:5b:c3:5e:
         bb:9b:e8:8b:19:10:e1:27:0a:e5:ac:40:ca:00:24:38:66:30:
         98:c7:e0:f4:f6:05:e6:35:29:31:a8:e8:7f:01:46:1b:b1:65:
         9c:a7:8d:f3:3b:9c:9c:47:ab:d7:fe:e1:dc:03:76:eb:d4:3f:
         86:98:6f:52:5c:e2:55:ab:ee:1b:e1:ba:e9:72:f7:49:f5:fa:
         84:d0:32:ed:4b:2e:97:c6:70:52:ed:72:4b:00:94:7f:3e:88:
         f2:db:85:7f:a9:27:b4:15:af:5d:4b:d4:fa:cd:d1:54:00:b0:
         55:ae:13:1c:8d:16:b5:0b:7d:4f:cb:f4:96:bc:cc:ea:20:59:
         e0:51:ba:f9:f1:a3:bf:3a:35:b2:1c:c4:fd:a4:3b:11:d9:68:
         a6:5d:21:72:60:4b:25:a5:6e:e1:c8:27:62:07:10:d8:12:e2:
         7c:73:41:28
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjBCREUxMTAvBgNVBAUTKDE5RjJBNDZFMkM0OTAzODc1MzVFOTQ1RjZCMTQ4Njcw
MDA2ODU3NjEwHhcNMjYwNzA5MDkwOTE5WhcNMjYwNzE2MDkwOTE5WjAYMRYwFAYD
VQQDEw02YTRmNjU0MC1lYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Occ7K0IB5ac2EP5FovMkNjFejJZ4VLa1WtKGeXYjTtJIOL4ITGlNzqgpVtq
c2GWBbZ6MCVpaoeU08SKh2iE8eX0x5GBYW2oBZSfFAM/NkHe0URRr6tVSyYvpN21
/NDFD8naHFXTPTZk8ZkNi3HArQmSn5l4222Oh7LKxLTziLTNgArODp35VKnB12My
IKUBTncce8VMph9Ef1ZVEMuvj7Lv+9UV3m8jqCL6fdhexNvH0OUtmSFV7vYHEK8S
vZac3EaMgVKekqm1rsDNTjqpQf2eHd5ioyD9VdStADDk0Nhog1d3LDBUBOS1BtRt
OoYIHhmzipb1jtj1MyOllonItwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUv3pSt
jXjvBYqCirOUagLE27hWMB8GA1UdIwQYMBaAFBnypG4sSQOHU16UX2sUhnAAaFdh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEJERS8yOUQxRTc2Qzc0
QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0ZFRYcFJmYXhTR2NBQm9W
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dmS2tiaXhKQTRkVFhwUmZheFNHY0FCb1YyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MEJERS8yOUQxRTc2Qzc0QjMxMUYwQUUyOTUyMUJDNEY5QUUwMi9HZktrYml4SkE0
ZFRYcFJmYXhTR2NBQm9WMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYe07iYw9XFLaOk0TEZ91uTyZ75UDKA/8FCzIEZRX5o1mKIAjxtvDvEVZoNgK
/cpteurpyd6EqxS46bXi5vbxiDE9vJpFYPJhyzHzT5I4Lxib7bHPV5kSW8Neu5vo
ixkQ4ScK5axAygAkOGYwmMfg9PYF5jUpMajofwFGG7FlnKeN8zucnEer1/7h3AN2
69Q/hphvUlziVavuG+G66XL3SfX6hNAy7Usul8ZwUu1ySwCUfz6I8tuFf6kntBWv
XUvU+s3RVACwVa4THI0WtQt9T8v0lrzM6iBZ4FG6+fGjvzo1shzE/aQ7Edlopl0h
cmBLJaVu4cgnYgcQ2BLifHNBKA==
-----END CERTIFICATE-----
Generated at Fri Jul 10 16:40:08 2026 by rpki-client