Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
File:                     A43gleg_bKbmOl8jbnsi8v-ZG74.mft (raw, json)
Hash identifier:          Xmje1hKEFjRXED9vCXTZCqf7fgcd2WrQYP76243ugEU=
Subject key identifier:   81:A4:A5:65:47:1C:F1:30:2E:9E:FF:59:4F:CB:53:C3:8F:3B:5C:39
Authority key identifier: 03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE
Certificate issuer:       /CN=A913384E/serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
Certificate serial:       0717
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
Manifest number:          0705
Signing time:             Wed 20 May 2026 22:07:41 +0000
Manifest this update:     Wed 20 May 2026 22:07:40 +0000
Manifest next update:     Wed 27 May 2026 22:07:40 +0000
Files and hashes:         1: A43gleg_bKbmOl8jbnsi8v-ZG74.crl (hash: s56kkSHT8PT4VrMsdabIJZwmKygpILvecisdo8UM3B4=)
                          2: FCB378AC8EF411EBAE4DC623C4F9AE02.roa (hash: 6d0hRvoglCSUGkAPfVcO4M1IpNRwxaOUTZjAl927tqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl
                          rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 22:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913384E, serialNumber=038DE095E83F6CA6E63A5F236E7B22F2FF991BBE
        Validity
            Not Before: May 20 22:07:40 2026 GMT
            Not After : May 27 22:07:40 2026 GMT
        Subject: CN=6a0e30ac-6dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:76:e7:28:87:a5:6d:81:54:8d:af:98:94:
                    b0:e3:ae:65:63:49:04:fb:3c:f7:13:b0:c0:de:16:
                    ed:79:03:1d:e5:e6:05:f7:01:78:ac:12:b8:33:f7:
                    3b:91:1f:85:c1:42:1d:b2:f3:66:bd:eb:db:00:5f:
                    09:95:69:11:b4:82:8e:14:bc:9b:75:09:ad:70:1e:
                    16:29:63:6f:c8:a7:7d:0b:53:7a:53:b2:bf:cb:dc:
                    0c:93:7b:d0:a3:03:78:5d:75:9a:f9:bd:2f:5a:59:
                    ec:67:56:9a:7a:3f:35:9b:6c:a6:53:80:35:17:5b:
                    6c:3c:dd:e7:94:3a:7b:d7:64:68:46:86:e3:77:13:
                    86:dc:a4:57:69:0a:9b:0d:41:a8:a8:32:15:5b:5f:
                    2a:b5:ae:0c:be:90:83:9d:45:fe:30:03:f8:0b:75:
                    f5:6e:07:52:41:81:dd:91:12:c0:bb:c5:87:b4:1a:
                    7a:5e:49:be:ca:7a:95:45:6d:26:9c:85:46:58:64:
                    49:8f:3b:e0:60:81:5b:b1:68:ab:3a:de:d4:e3:79:
                    19:f7:bd:4a:2d:b7:4f:93:0e:15:b1:ac:14:19:bc:
                    18:3f:a2:ed:3b:06:7e:9c:89:cd:87:9a:d5:79:42:
                    4f:fd:79:2f:df:5f:6b:9b:7a:42:34:2f:73:f1:c8:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:A5:65:47:1C:F1:30:2E:9E:FF:59:4F:CB:53:C3:8F:3B:5C:39
            X509v3 Authority Key Identifier:
                keyid:03:8D:E0:95:E8:3F:6C:A6:E6:3A:5F:23:6E:7B:22:F2:FF:99:1B:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A43gleg_bKbmOl8jbnsi8v-ZG74.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913384E/B35813648EDD11EBBE67642EC4F9AE02/A43gleg_bKbmOl8jbnsi8v-ZG74.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:37:ab:73:51:9b:e7:46:96:bc:90:a7:67:b1:a5:36:61:cc:
         40:7c:cf:53:6b:84:4b:61:fc:e9:e1:92:d7:9a:eb:c5:38:2d:
         74:bf:84:ce:10:11:90:cc:4c:fd:f0:ff:e9:5d:71:db:06:f7:
         3d:60:dd:8c:b9:b9:ab:b9:30:be:c3:4c:4f:79:cd:76:86:70:
         49:05:df:04:29:4c:93:77:9a:a9:8e:fc:fb:4f:37:f5:6f:79:
         cc:72:bc:c9:96:32:0d:72:66:8a:d0:31:fa:09:e1:3c:e6:41:
         bd:69:a6:88:c7:77:d9:f9:21:4b:e3:a1:ce:64:6c:20:35:78:
         67:db:2f:9e:89:61:60:f3:d0:10:4e:82:e0:85:68:25:2d:95:
         d4:d6:c9:fc:d9:16:3e:36:7b:21:d7:d8:10:63:5d:08:1a:5d:
         f0:ea:80:54:1f:8a:db:73:33:2c:7c:a5:f8:8b:70:d3:2f:38:
         4b:09:fb:9b:b8:55:1f:ab:3d:98:b7:c4:2b:52:b1:02:52:ee:
         eb:5b:7f:7d:ef:84:e8:67:8c:31:b3:5e:76:22:77:43:ed:91:
         ae:db:f6:95:84:3f:2d:5f:67:4d:d0:06:23:e7:9a:e0:eb:ba:
         cf:30:2e:b8:67:3e:e9:e3:67:a6:3d:b6:71:db:d5:6f:39:51:
         0f:33:b2:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4NEUxMTAvBgNVBAUTKDAzOERFMDk1RTgzRjZDQTZFNjNBNUYyMzZFN0IyMkYy
RkY5OTFCQkUwHhcNMjYwNTIwMjIwNzQwWhcNMjYwNTI3MjIwNzQwWjAYMRYwFAYD
VQQDEw02YTBlMzBhYy02ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRF25yiHpW2BVI2vmJSw465lY0kE+zz3E7DA3hbteQMd5eYF9wF4rBK4M/c7
kR+FwUIdsvNmvevbAF8JlWkRtIKOFLybdQmtcB4WKWNvyKd9C1N6U7K/y9wMk3vQ
owN4XXWa+b0vWlnsZ1aaej81m2ymU4A1F1tsPN3nlDp712RoRobjdxOG3KRXaQqb
DUGoqDIVW18qta4MvpCDnUX+MAP4C3X1bgdSQYHdkRLAu8WHtBp6Xkm+ynqVRW0m
nIVGWGRJjzvgYIFbsWirOt7U43kZ971KLbdPkw4VsawUGbwYP6LtOwZ+nInNh5rV
eUJP/Xkv319rm3pCNC9z8ci2WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGkpWVH
HPEwLp7/WU/LU8OPO1w5MB8GA1UdIwQYMBaAFAON4JXoP2ym5jpfI257IvL/mRu+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg0RS9CMzU4MTM2NDhF
REQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JLYm1PbDhqYm5zaTh2LVpH
NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0M2dsZWdfYktibU9sOGpibnNpOHYtWkc3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mzg0RS9CMzU4MTM2NDhFREQxMUVCQkU2NzY0MkVDNEY5QUUwMi9BNDNnbGVnX2JL
Ym1PbDhqYm5zaTh2LVpHNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtjerc1Gb50aWvJCnZ7GlNmHMQHzPU2uES2H86eGS15rrxTgtdL+EzhARkMxM
/fD/6V1x2wb3PWDdjLm5q7kwvsNMT3nNdoZwSQXfBClMk3eaqY78+0839W95zHK8
yZYyDXJmitAx+gnhPOZBvWmmiMd32fkhS+OhzmRsIDV4Z9svnolhYPPQEE6C4IVo
JS2V1NbJ/NkWPjZ7IdfYEGNdCBpd8OqAVB+K23MzLHyl+Itw0y84Swn7m7hVH6s9
mLfEK1KxAlLu61t/fe+E6GeMMbNediJ3Q+2Rrtv2lYQ/LV9nTdAGI+ea4Ou6zzAu
uGc+6eNnpj22cdvVbzlRDzOyqw==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:01 2026 by rpki-client