Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
File:                     GhajkdMlFwt7hcS_x4VaF300e24.mft (raw, json)
Hash identifier:          4m2/B8I/fo/Mkj8RZHfp/lRrwQBVdiw7GO76nOoIP6s=
Subject key identifier:   0D:66:94:95:ED:97:93:46:4C:6C:59:F6:F1:60:CD:9E:70:72:6E:E5
Authority key identifier: 1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E
Certificate issuer:       /CN=A913B510/serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
Certificate serial:       AF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
Manifest number:          AB
Signing time:             Mon 01 Jun 2026 07:58:44 +0000
Manifest this update:     Mon 01 Jun 2026 07:58:44 +0000
Manifest next update:     Mon 08 Jun 2026 07:58:44 +0000
Files and hashes:         1: GhajkdMlFwt7hcS_x4VaF300e24.crl (hash: YbnufIge+cEWwAEVZkyV8xDmjY1NitTXaiBD/kVkJmI=)
                          2: 9CAF31CA5D8111F0A04DD550C4F9AE02.roa (hash: QL6KSZOWPh1C+zrm842UFBIzEB0gpz15bOD/UGoBYYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=1A16A391D325170B7B85C4BFC7855A177D347B6E
        Validity
            Not Before: Jun  1 07:58:44 2026 GMT
            Not After : Jun  8 07:58:44 2026 GMT
        Subject: CN=6a1d3bb4-0bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:ce:ff:38:90:c2:c8:ce:06:bd:b2:cd:96:
                    92:32:77:e2:5e:91:6c:bd:b6:4a:c3:da:c6:59:be:
                    6f:c4:07:31:a4:96:42:0a:73:a2:11:0c:66:29:c9:
                    d5:5c:61:5b:c1:b3:16:dd:7f:71:1e:70:d5:7e:58:
                    aa:82:04:c1:fb:40:a3:c9:36:1b:29:6d:b7:f5:5f:
                    8b:ca:a9:d6:ca:39:8c:d5:34:d6:21:76:2a:1d:06:
                    80:20:44:c6:b4:4f:41:e9:ae:86:16:d9:0e:7e:f7:
                    c0:14:b6:dd:ef:b6:80:6d:41:d8:a2:bb:62:43:75:
                    bd:28:1c:41:b0:0a:b1:fb:65:4f:20:70:fb:6f:46:
                    de:c3:10:ed:d8:80:d4:d7:ff:bf:62:43:e4:b1:5c:
                    4d:3f:d8:43:52:55:dc:8d:8c:c5:d6:4a:41:ab:b2:
                    09:bc:77:36:d8:d5:73:81:83:43:e7:3f:d7:61:27:
                    bf:83:82:0d:ad:31:63:80:14:c4:e3:bf:3d:e3:ed:
                    43:3e:ea:3c:a5:12:f4:35:d5:5d:7f:df:f9:3a:cd:
                    df:fe:da:22:8a:df:72:6b:4d:a9:1b:d3:9b:62:1c:
                    72:0a:18:3d:e5:d7:9f:c5:80:f2:fd:5d:d3:c6:5c:
                    9e:53:46:b9:af:7e:a9:f6:be:be:6e:10:81:f4:6d:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:66:94:95:ED:97:93:46:4C:6C:59:F6:F1:60:CD:9E:70:72:6E:E5
            X509v3 Authority Key Identifier:
                keyid:1A:16:A3:91:D3:25:17:0B:7B:85:C4:BF:C7:85:5A:17:7D:34:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GhajkdMlFwt7hcS_x4VaF300e24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/1882D0E65D8111F091226E31C4F9AE02/GhajkdMlFwt7hcS_x4VaF300e24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:87:f7:49:7a:6d:e9:c8:4f:fa:06:88:f7:0f:03:d2:08:
         bd:f2:71:da:83:fa:9b:2e:1b:09:f8:9b:cc:69:df:c2:e5:7f:
         6f:fc:1c:44:73:43:20:2e:7d:7d:02:9f:f8:34:87:f4:17:18:
         46:10:e1:26:aa:d8:56:f9:80:9b:93:90:2f:4a:28:6b:00:e1:
         83:c0:a7:a7:88:91:53:43:94:ac:27:15:21:3d:e5:d3:83:e2:
         72:bd:45:01:b7:5d:6f:fc:03:5d:70:18:4a:44:bf:7a:08:76:
         2c:69:c9:39:14:2b:ab:5c:d5:ca:89:d4:fe:9e:94:e5:2c:b3:
         81:49:f0:26:9b:b6:82:21:fc:b7:40:b4:6a:21:18:6c:55:6b:
         a0:38:f8:86:70:32:f6:95:54:27:0e:96:e6:e9:aa:35:15:c0:
         ca:ef:e7:7d:2b:eb:d3:1b:2e:c3:a6:5a:ea:30:97:6d:3a:56:
         dc:2c:01:4f:e8:20:4c:4a:3e:d3:c5:d4:d8:9a:11:32:b8:b0:
         dc:c1:aa:b3:84:65:3f:46:61:15:a3:7a:9a:a8:ac:e7:e4:74:
         d8:be:a3:15:3a:cf:ac:e4:c1:71:32:e3:4a:da:ac:67:20:4a:
         f3:11:52:eb:5b:2f:fe:c4:54:ba:cb:1c:8d:dd:6c:18:82:3b:
         2c:67:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:34 2026 by rpki-client