Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          uxXPm1A+wdvNmKEQodpoZqS97VZnXsDP1cRDGWZFv3s=
Subject key identifier:   74:8D:06:13:A4:80:7F:D7:98:3A:C8:E2:FC:3C:E4:1C:FC:71:F7:39
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       0504
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04AD
Signing time:             Fri 01 May 2026 00:13:55 +0000
Manifest this update:     Fri 01 May 2026 00:13:54 +0000
Manifest next update:     Fri 08 May 2026 00:13:54 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: Jflk+F+y45Dp0lsq2sbXIKEAcIPPUSfBkaswsjgnwxo=)
                          2: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          3: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
                          4: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          5: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          6: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          7: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          8: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          9: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
                          10: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 00:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: May  1 00:13:54 2026 GMT
            Not After : May  8 00:13:54 2026 GMT
        Subject: CN=69f3f042-9676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:c0:1f:2c:ff:e2:ca:b5:37:82:16:ef:f1:
                    2b:fa:b5:67:67:46:69:13:41:bf:c0:5e:9b:74:57:
                    e2:65:2b:cf:36:e3:5c:ff:bf:84:28:28:ec:a3:30:
                    b9:f8:31:4a:7f:8f:3e:3c:1f:2b:11:75:05:5c:02:
                    34:d8:3a:b9:c4:bc:ee:37:6c:1d:3d:fb:a8:55:be:
                    04:38:be:56:45:ab:af:ef:9c:b1:53:3b:9c:a5:5f:
                    77:96:02:3b:45:50:55:6a:74:97:9b:d6:6b:dd:12:
                    3a:f4:cc:ff:18:92:df:ee:99:c3:da:0d:f8:76:8a:
                    a7:6b:aa:40:f9:d5:04:37:c4:aa:15:e1:ef:fa:cc:
                    51:b4:81:9b:fe:60:2e:39:16:aa:11:c7:94:28:ca:
                    31:f0:86:cf:5d:29:9e:ea:c3:96:c8:37:ad:55:5b:
                    49:75:27:55:a3:07:12:7f:7d:2e:4e:9e:55:69:ba:
                    4c:77:58:c0:7c:fb:80:0a:c2:0e:40:9a:21:c0:81:
                    26:b1:32:cc:15:ae:04:2a:d8:ea:b3:80:27:f3:41:
                    28:ab:e1:75:87:8f:a8:ba:c5:5b:b7:74:45:fb:79:
                    7f:c0:36:31:cd:d6:71:81:fc:62:60:57:59:e0:a5:
                    30:68:d3:70:07:14:64:fd:47:fb:b1:95:44:71:20:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8D:06:13:A4:80:7F:D7:98:3A:C8:E2:FC:3C:E4:1C:FC:71:F7:39
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:45:16:b8:73:9a:58:72:8a:78:04:12:72:8b:6a:3e:e6:e9:
         a6:55:25:8d:1d:58:7d:28:42:c2:3a:72:6b:3c:54:36:4a:fb:
         72:68:95:a9:f7:19:0b:1b:95:6c:53:9b:97:df:a8:c2:eb:9a:
         2e:d5:07:ac:90:a6:30:97:bc:31:45:09:12:30:c8:79:bf:02:
         09:4e:b2:67:a7:99:30:f2:08:cc:5f:3d:eb:51:57:a0:83:98:
         4f:16:19:c6:2a:c0:40:cf:6b:d8:c4:f9:9a:db:fe:3f:10:b3:
         8f:5c:97:df:de:8d:31:bd:63:d6:4e:34:02:7e:fb:3d:e2:09:
         d8:33:6f:eb:c8:8b:80:06:7b:fe:4a:98:a0:1b:71:1a:1d:fd:
         c8:ff:2c:e7:8a:fd:a3:82:01:1a:2b:7f:50:be:bc:59:97:5d:
         ef:6e:4e:03:97:1b:42:36:9a:f6:0b:bb:36:c6:62:ba:6e:1c:
         2b:17:e9:78:1b:34:eb:4e:b0:1d:37:2c:8b:8b:32:03:e7:53:
         6f:33:a6:f7:c7:20:9f:4d:0c:d9:3c:e7:cd:dc:83:52:8d:9d:
         7f:21:23:77:dc:2b:3d:5c:08:2c:05:b9:f8:c1:43:59:31:c0:
         51:f4:3f:7e:eb:48:02:cd:cc:62:0b:59:fb:a8:6f:3e:76:b7:
         9f:ef:ca:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5
QTQ1QzlFQ0IwHhcNMjYwNTAxMDAxMzU0WhcNMjYwNTA4MDAxMzU0WjAYMRYwFAYD
VQQDEw02OWYzZjA0Mi05Njc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArubAHyz/4sq1N4IW7/Er+rVnZ0ZpE0G/wF6bdFfiZSvPNuNc/7+EKCjsozC5
+DFKf48+PB8rEXUFXAI02Dq5xLzuN2wdPfuoVb4EOL5WRauv75yxUzucpV93lgI7
RVBVanSXm9Zr3RI69Mz/GJLf7pnD2g34doqna6pA+dUEN8SqFeHv+sxRtIGb/mAu
ORaqEceUKMox8IbPXSme6sOWyDetVVtJdSdVowcSf30uTp5VabpMd1jAfPuACsIO
QJohwIEmsTLMFa4EKtjqs4An80Eoq+F1h4+ousVbt3RF+3l/wDYxzdZxgfxiYFdZ
4KUwaNNwBxRk/Uf7sZVEcSBkNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSNBhOk
gH/XmDrI4vw85Bz8cfc5MB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1
NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu
c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot
RWdCWlBDRElqRkdhUmNuc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmkUWuHOaWHKKeAQScotqPubpplUljR1YfShCwjpyazxUNkr7cmiVqfcZCxuV
bFObl9+owuuaLtUHrJCmMJe8MUUJEjDIeb8CCU6yZ6eZMPIIzF8961FXoIOYTxYZ
xirAQM9r2MT5mtv+PxCzj1yX396NMb1j1k40An77PeIJ2DNv68iLgAZ7/kqYoBtx
Gh39yP8s54r9o4IBGit/UL68WZdd725OA5cbQjaa9gu7NsZium4cKxfpeBs0606w
HTcsi4syA+dTbzOm98cgn00M2TznzdyDUo2dfyEjd9wrPVwILAW5+MFDWTHAUfQ/
futIAs3MYgtZ+6hvPna3n+/KCQ==
-----END CERTIFICATE-----
Generated at Sat May 2 09:56:19 2026 by rpki-client