Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File:                     4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier:          UhQ9AbtsXZFvz3hlqeXbtfKAabAO3Cz5yT9CA207nms=
Subject key identifier:   8B:FE:6B:56:42:90:C1:6A:97:AE:5C:82:7B:BE:05:9F:93:F2:53:CD
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer:       /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial:       01D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number:          01BC
Signing time:             Fri 17 Jul 2026 04:59:03 +0000
Manifest this update:     Fri 17 Jul 2026 04:59:03 +0000
Manifest next update:     Fri 24 Jul 2026 04:59:03 +0000
Files and hashes:         1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: R621tuASOOlEyNi4IzaqI9sCrW8+VixVHCFE91evi28=)
                          2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: /p0IRebK1ecfFLpUcCA3qAEpMKVqatFf1hx/y6EBTmI=)
                          3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: XjHUkWL+sFmZoNR2qFeU0dNbQ2ZM/7PQGFCwI1qnX4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
                          rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
        Validity
            Not Before: Jul 17 04:59:03 2026 GMT
            Not After : Jul 24 04:59:03 2026 GMT
        Subject: CN=6a59b697-5dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:09:13:6b:21:4b:f6:b9:bc:b1:b2:d9:ea:
                    96:9b:f1:10:70:ac:8c:13:63:ed:ab:3c:28:f3:cf:
                    88:ed:b1:79:29:13:bb:06:20:f1:e1:7e:32:a6:bc:
                    14:77:6c:23:73:ca:9f:30:a4:3a:a6:98:19:09:c9:
                    45:8e:8e:3e:74:97:05:82:ae:70:f4:ba:f1:33:c0:
                    6f:af:11:31:c5:17:fe:b4:30:d6:24:ad:00:d0:0c:
                    0b:4a:79:3d:ff:b8:43:07:89:55:8b:f3:9f:fa:c1:
                    13:35:2e:44:c1:c1:07:80:4a:67:0b:43:a0:b8:8c:
                    56:6e:37:51:10:40:d4:68:ac:f6:62:ba:cc:60:8a:
                    e5:89:fa:e7:73:14:88:36:d3:cc:53:45:c4:f1:2b:
                    9c:db:e1:74:57:ff:1f:4e:35:98:b4:75:31:a3:86:
                    fe:f3:49:74:04:85:65:d8:fc:16:0c:3c:c5:22:86:
                    31:ba:a3:06:20:56:f6:b1:8b:75:78:08:f8:b9:73:
                    14:68:a9:ef:fb:46:c5:7d:3a:d2:7f:97:d4:2b:59:
                    4d:75:b8:f1:c4:07:4a:85:1b:d4:a6:81:26:c8:f8:
                    d6:f9:25:8a:3e:b8:88:3d:a7:0e:2b:de:67:3f:c8:
                    99:01:49:6d:44:a2:87:d5:df:f7:f7:74:45:14:c4:
                    65:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:6B:56:42:90:C1:6A:97:AE:5C:82:7B:BE:05:9F:93:F2:53:CD
            X509v3 Authority Key Identifier:
                keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:8c:e2:ce:d9:d9:73:72:c2:da:fb:a8:21:52:fd:10:57:
         6c:e1:ed:fe:2a:af:be:5d:87:51:e7:79:cf:d5:c7:8b:54:8f:
         cf:43:bd:db:78:34:2a:b1:53:02:ed:62:b7:ea:e3:0d:af:ec:
         cc:f2:a9:02:96:0b:2c:2b:88:31:88:36:f1:31:0c:e1:b0:9f:
         a3:a0:6c:63:d5:74:d5:ea:d5:4b:b3:57:83:8a:26:97:55:28:
         14:3e:6d:85:03:91:ab:cd:cc:63:86:5a:ba:83:13:5d:f8:f1:
         d3:9a:1d:6d:fc:38:93:54:a3:89:f0:f0:3f:b3:ee:61:06:e0:
         d7:e6:25:78:01:87:64:35:9b:9e:44:0a:a7:eb:20:48:5c:b4:
         cb:7c:1f:ca:dd:85:26:b5:2e:4f:91:f6:c0:2a:6d:27:61:df:
         9f:5a:de:30:0b:5b:b7:5d:1c:aa:3a:6b:e1:ae:e9:5b:75:e5:
         83:4e:49:b2:9e:60:5b:8c:ed:51:3e:a2:23:3b:46:f1:75:9f:
         55:4c:ba:14:2c:21:f7:c5:d6:f3:bb:76:7d:0c:06:62:ff:cb:
         3f:79:35:d7:0e:a8:5c:f4:64:50:5f:2d:2b:a2:77:84:69:b2:
         e6:68:79:e0:29:26:d1:d8:f1:9f:8e:ea:a7:69:6e:39:95:93:
         4f:2a:80:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:04:58 2026 by rpki-client