Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
File:                     GySJViTA9S0agjsvKdrcCOKmJmE.mft (raw, json)
Hash identifier:          iviv0lCpLOlG4mE5ABloRQwerNzxk4aOakRdYP8NOLE=
Subject key identifier:   18:2B:08:43:AA:07:71:64:C7:9F:33:9B:C9:94:F3:C4:79:37:38:54
Authority key identifier: 1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61
Certificate issuer:       /CN=A9136385/serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
Certificate serial:       01EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
Manifest number:          01E5
Signing time:             Sun 05 Apr 2026 02:54:30 +0000
Manifest this update:     Sun 05 Apr 2026 02:54:29 +0000
Manifest next update:     Sun 12 Apr 2026 02:54:29 +0000
Files and hashes:         1: GySJViTA9S0agjsvKdrcCOKmJmE.crl (hash: w8VjpxJsB9r9P3s3gK4h1tipw5bpbVIrXGfFjSxto2I=)
                          2: 557745EE4E1B11EEBA53316CC4F9AE02.roa (hash: MrhhKQsshduzSeZwv3hAiUxhUs54pCl47pKy59rXhUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl
                          rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136385, serialNumber=1B24895624C0F52D1A823B2F29DADC08E2A62661
        Validity
            Not Before: Apr  5 02:54:29 2026 GMT
            Not After : Apr 12 02:54:29 2026 GMT
        Subject: CN=69d1cee6-d15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:dc:4d:b8:32:0c:a9:e8:b7:2b:45:48:98:
                    4c:5f:25:e7:44:9f:9d:58:c9:ec:63:0c:80:bc:47:
                    ce:1a:23:1e:35:64:07:2f:03:f0:1f:2a:36:9f:a1:
                    7d:03:43:f9:02:b6:fb:95:a4:e6:2c:73:3a:e4:4a:
                    98:d9:dd:a5:99:14:e5:c0:d4:38:01:80:13:92:c1:
                    3d:6d:96:ef:2b:45:3b:94:56:47:57:ae:61:e2:01:
                    2f:ae:26:2f:23:8b:78:a9:e7:50:90:00:82:8b:b9:
                    ed:d1:25:b2:f9:0a:8b:9d:5a:75:0f:17:2b:cc:44:
                    95:1f:ba:bf:18:c1:ec:43:c3:95:be:27:07:ae:44:
                    2f:01:85:9a:e0:3a:eb:3c:33:e4:f7:fd:63:4d:23:
                    de:2f:61:06:96:d6:31:f1:e4:3a:45:39:bb:09:90:
                    23:c1:f3:70:3a:3a:78:18:9a:64:83:48:64:46:cb:
                    98:b2:0b:c4:57:23:77:d2:2c:b6:cd:22:fb:1f:64:
                    4d:ba:ee:aa:60:be:9f:cb:fb:89:64:fe:6a:27:21:
                    68:16:25:5a:dd:d3:81:31:39:8b:1c:62:42:c7:d9:
                    1c:ac:0c:d5:66:a7:31:17:66:71:9d:5d:93:12:a1:
                    f0:25:17:91:7f:e6:32:13:4d:c0:f3:a6:d9:92:99:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:08:43:AA:07:71:64:C7:9F:33:9B:C9:94:F3:C4:79:37:38:54
            X509v3 Authority Key Identifier:
                keyid:1B:24:89:56:24:C0:F5:2D:1A:82:3B:2F:29:DA:DC:08:E2:A6:26:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GySJViTA9S0agjsvKdrcCOKmJmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136385/7B22C7424E1A11EE93DCD767C4F9AE02/GySJViTA9S0agjsvKdrcCOKmJmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bb:cf:7f:83:65:e1:44:ab:9a:5e:8b:6d:eb:37:10:83:b2:
         89:74:33:31:e4:6b:38:19:3c:fb:74:8d:8a:94:98:2c:c9:c6:
         29:a2:e0:7d:bb:1c:46:f4:d7:17:01:cd:3d:f8:fe:fe:c1:e4:
         8e:86:de:41:15:2b:df:32:5b:73:7c:15:1b:6b:b8:81:62:a8:
         08:4e:78:e1:88:7d:99:e4:b6:14:5f:50:99:9a:26:bd:0b:de:
         df:b1:fb:7c:23:48:0b:c0:c0:cc:63:fb:ec:db:99:16:21:2a:
         58:f8:4e:1c:2c:fc:31:f0:70:5a:28:7c:69:5b:93:9b:b1:fe:
         58:21:56:f3:0b:4e:8c:a9:9e:da:ad:6e:1b:82:a1:93:d3:c3:
         9d:43:fb:88:f3:2f:a4:58:37:38:0b:28:7d:7e:09:e8:5d:c3:
         e4:45:78:60:73:43:3d:3a:cc:ee:d5:79:77:23:e1:88:f1:f2:
         0c:8b:4b:91:2b:e9:70:4a:67:cd:5d:58:0a:3b:ef:1c:5d:99:
         e8:55:87:5c:9c:31:59:a8:ea:d1:ec:36:a6:3b:b6:fa:cd:c5:
         7f:d9:8e:72:cf:50:ba:24:07:d3:57:17:ab:ad:64:bb:ac:72:
         4b:64:c4:7f:58:37:a7:67:f2:af:fe:62:a1:1e:37:66:74:f7:
         59:24:b5:99
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYzODUxMTAvBgNVBAUTKDFCMjQ4OTU2MjRDMEY1MkQxQTgyM0IyRjI5REFEQzA4
RTJBNjI2NjEwHhcNMjYwNDA1MDI1NDI5WhcNMjYwNDEyMDI1NDI5WjAYMRYwFAYD
VQQDEw02OWQxY2VlNi1kMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26fcTbgyDKnotytFSJhMXyXnRJ+dWMnsYwyAvEfOGiMeNWQHLwPwHyo2n6F9
A0P5Arb7laTmLHM65EqY2d2lmRTlwNQ4AYATksE9bZbvK0U7lFZHV65h4gEvriYv
I4t4qedQkACCi7nt0SWy+QqLnVp1DxcrzESVH7q/GMHsQ8OVvicHrkQvAYWa4Drr
PDPk9/1jTSPeL2EGltYx8eQ6RTm7CZAjwfNwOjp4GJpkg0hkRsuYsgvEVyN30iy2
zSL7H2RNuu6qYL6fy/uJZP5qJyFoFiVa3dOBMTmLHGJCx9kcrAzVZqcxF2ZxnV2T
EqHwJReRf+YyE03A86bZkplPTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgrCEOq
B3Fkx58zm8mU88R5NzhUMB8GA1UdIwQYMBaAFBskiVYkwPUtGoI7Lyna3AjipiZh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjM4NS83QjIyQzc0MjRF
MUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlTMGFnanN2S2RyY0NPS21K
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0d5U0pWaVRBOVMwYWdqc3ZLZHJjQ09LbUptRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjM4NS83QjIyQzc0MjRFMUExMUVFOTNEQ0Q3NjdDNEY5QUUwMi9HeVNKVmlUQTlT
MGFnanN2S2RyY0NPS21KbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHrvPf4Nl4USrml6Lbes3EIOyiXQzMeRrOBk8+3SNipSYLMnGKaLgfbscRvTX
FwHNPfj+/sHkjobeQRUr3zJbc3wVG2u4gWKoCE544Yh9meS2FF9QmZomvQve37H7
fCNIC8DAzGP77NuZFiEqWPhOHCz8MfBwWih8aVuTm7H+WCFW8wtOjKme2q1uG4Kh
k9PDnUP7iPMvpFg3OAsofX4J6F3D5EV4YHNDPTrM7tV5dyPhiPHyDItLkSvpcEpn
zV1YCjvvHF2Z6FWHXJwxWajq0ew2pju2+s3Ff9mOcs9QuiQH01cXq61ku6xyS2TE
f1g3p2fyr/5ioR43ZnT3WSS1mQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:51 2026 by rpki-client