Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
File:                     gyJEswLRZc14vcOiErC35vkL_GA.mft (raw, json)
Hash identifier:          yfivTO90hBi/RxCpA88DDDTWx+uWF/aIzNW8cU/nZkk=
Subject key identifier:   E8:9D:72:91:37:BE:63:90:B8:29:FD:4F:DB:B2:6D:7A:85:87:0C:CA
Authority key identifier: 83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60
Certificate issuer:       /CN=A91F5AAD/serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
Manifest number:          0717
Signing time:             Sat 04 Jul 2026 22:16:30 +0000
Manifest this update:     Sat 04 Jul 2026 22:16:30 +0000
Manifest next update:     Sat 11 Jul 2026 22:16:30 +0000
Files and hashes:         1: gyJEswLRZc14vcOiErC35vkL_GA.crl (hash: +abkxeueaSDs3ZeCxFC7kqxLSeCHtMQpgBZgOGj+jTg=)
                          2: D9A63D2E9D0711EBB708700BC4F9AE02.roa (hash: cDr/3Xs5cjJWfG7LyYDYX18lP6W3STlLXw7xl6t5lM0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl
                          rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 22:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5AAD, serialNumber=832244B302D165CD78BDC3A212B0B7E6F90BFC60
        Validity
            Not Before: Jul  4 22:16:30 2026 GMT
            Not After : Jul 11 22:16:30 2026 GMT
        Subject: CN=6a49863e-00ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:53:14:03:df:9c:9e:00:b4:4b:13:98:2b:
                    1c:96:95:47:5e:43:e6:4f:5f:a0:0e:72:de:bd:ea:
                    d1:b1:7c:4b:b2:eb:a4:9e:a1:a4:11:d0:a0:3f:17:
                    d8:4a:72:f8:a1:ac:6a:85:d5:9d:e1:d0:a8:bd:bf:
                    79:00:87:3c:ab:cf:c7:4a:a0:1f:dc:39:6c:0c:c1:
                    2d:2a:dc:bb:f8:f4:08:84:01:ee:ff:99:30:07:e2:
                    4b:e1:8d:1a:ef:83:45:5c:f7:a8:08:e3:78:7f:2e:
                    b1:ec:97:ec:78:c8:a2:e9:b2:c2:d2:d1:b4:bd:7c:
                    d5:4b:d3:f3:a6:39:c6:0f:a0:fc:06:30:3e:ce:97:
                    66:ad:41:ae:63:18:f8:90:20:0b:fd:80:53:b3:ff:
                    09:90:d6:6b:dd:ff:28:b0:d9:60:25:de:82:b8:8b:
                    56:14:05:98:15:ff:3e:2a:89:cd:59:cd:87:65:7a:
                    d6:ee:56:cc:70:e9:3d:ef:e2:d8:be:63:e5:48:e3:
                    6f:bd:ee:dc:5e:1f:08:6b:db:88:6b:4b:8c:35:c6:
                    c0:9c:9d:d7:b7:42:e1:a0:fb:a2:ab:18:2e:da:3c:
                    86:bc:fb:eb:95:b5:b9:2e:bb:ba:6c:c4:c5:ae:9c:
                    4f:ec:a2:58:2f:e2:18:9a:96:65:17:c1:5d:d4:1e:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:72:91:37:BE:63:90:B8:29:FD:4F:DB:B2:6D:7A:85:87:0C:CA
            X509v3 Authority Key Identifier:
                keyid:83:22:44:B3:02:D1:65:CD:78:BD:C3:A2:12:B0:B7:E6:F9:0B:FC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyJEswLRZc14vcOiErC35vkL_GA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAD/4B6506588DE911EB905C7315C4F9AE02/gyJEswLRZc14vcOiErC35vkL_GA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:d6:2b:a8:86:6a:3a:be:7c:30:87:b5:8d:11:4c:17:a6:
         44:8f:7c:8c:39:90:66:b7:36:63:3f:52:9e:d8:36:4e:57:6c:
         7c:e0:3c:a2:e2:71:06:0a:99:6c:69:2e:36:e8:8f:27:67:da:
         34:fd:52:3d:5e:23:a5:bf:cc:3f:0e:e7:f7:1f:10:96:99:68:
         90:cc:3b:db:5e:5b:c5:43:60:7a:9b:54:f9:18:85:be:69:f3:
         f7:2d:98:58:a4:a4:e2:bb:23:b5:1f:2b:55:fe:56:fe:7c:4a:
         6b:83:96:c0:8e:33:58:0e:b1:3f:ec:0b:63:46:81:c9:80:9e:
         d4:b5:57:46:6f:1c:9d:db:91:80:44:9c:4c:94:ce:06:48:06:
         7f:3d:cb:27:40:72:ca:f5:43:6b:27:d9:65:77:c8:9c:a9:26:
         f1:92:8e:cf:8a:06:d6:d4:8e:56:33:82:0f:7e:f8:03:15:7f:
         6f:06:e5:61:c1:57:40:58:08:4d:59:f0:e8:bf:7d:73:8d:89:
         ea:4e:12:3d:71:e2:0d:7a:23:a7:e9:1e:35:91:2f:d0:b0:1a:
         85:b2:b9:59:ac:c6:78:b2:59:c3:c9:50:11:b1:4d:1c:a4:d0:
         84:a3:a4:9b:ae:0c:37:16:9d:ee:1b:af:3a:7e:65:d7:d6:88:
         56:47:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:43:39 2026 by rpki-client