Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File:                     gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier:          43BnhrnDqaQ9KPlJvaZc4m47MEuA0tAvM4pOZ+NmBKI=
Subject key identifier:   26:1D:FF:31:96:68:E7:79:8D:67:F5:27:AC:B5:36:AE:F0:7F:E1:CA
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer:       /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number:          022E
Signing time:             Mon 01 Jun 2026 03:23:36 +0000
Manifest this update:     Mon 01 Jun 2026 03:23:35 +0000
Manifest next update:     Mon 08 Jun 2026 03:23:35 +0000
Files and hashes:         1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: LPrulqn5pmIJP01Ut/EQoodjLuy9mLsTYED9oWTFX3s=)
                          2: 6A3BE658401B11F080319527C4F9AE02.roa (hash: G0vlI3Y4+8WgZsJeIBEokHzCEUdmWiGvtc5JLb9JKsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
        Validity
            Not Before: Jun  1 03:23:35 2026 GMT
            Not After : Jun  8 03:23:35 2026 GMT
        Subject: CN=6a1cfb38-f55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:b9:fc:cb:d7:74:90:ca:0b:54:73:5b:a3:
                    15:8b:24:aa:a0:ae:ff:fa:7a:64:48:9d:d7:1f:94:
                    33:e1:e1:7c:cd:70:bf:c6:46:e0:9d:57:8a:11:3e:
                    32:ab:9a:04:02:5a:3d:ba:cb:8a:6a:53:7b:a1:63:
                    fa:57:d7:bb:4f:0d:4f:38:0d:80:37:e4:ec:2e:3c:
                    e2:0c:e4:4a:43:d5:d9:00:a8:fe:bd:da:f6:9e:e3:
                    93:7b:54:4e:52:0a:d3:f5:de:4b:e6:9d:dc:1b:48:
                    e2:36:80:cb:81:7b:2b:f0:71:d0:30:fd:9d:8d:7e:
                    dd:08:72:c3:7e:5f:a7:af:fd:4a:59:dc:1d:05:54:
                    ab:48:3e:fb:c6:6f:99:0b:dc:13:d1:4d:15:04:c9:
                    dd:8c:94:4c:5f:f9:53:3c:7b:75:1b:6b:60:12:ed:
                    e2:58:46:d9:0b:86:8a:f0:08:07:71:02:5d:6b:65:
                    b0:50:81:23:a1:dd:37:28:3e:cb:9a:10:f6:53:0f:
                    c4:ea:da:9e:7e:a4:7b:ec:59:77:69:32:5b:c1:3d:
                    e3:81:47:60:e4:f6:1d:05:0c:12:f3:cb:be:e6:9c:
                    06:db:c6:18:77:f0:38:19:d0:97:28:75:31:dd:ea:
                    82:0d:96:ef:c9:c7:95:43:04:28:b5:fd:cb:1f:5c:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:FF:31:96:68:E7:79:8D:67:F5:27:AC:B5:36:AE:F0:7F:E1:CA
            X509v3 Authority Key Identifier:
                keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7e:a2:a9:f3:2a:de:2d:f8:e9:7a:33:bb:ee:32:e0:1d:a4:
         8d:e9:28:0c:b4:1c:c7:05:21:63:45:ee:09:d0:d4:4d:aa:d6:
         3c:39:05:f8:ae:d2:51:1f:c6:22:ce:41:f7:4d:8f:bf:6b:63:
         d3:0a:b7:c5:34:66:a6:1c:25:b6:b1:f3:2d:22:10:ac:58:c5:
         89:6a:dd:00:28:59:d2:fa:da:69:f3:87:6d:cb:34:bd:e8:c6:
         c0:f6:29:a8:b2:53:50:55:e0:71:a9:3d:63:1a:49:96:c1:65:
         9c:b3:e0:10:a0:85:77:9c:09:da:1a:fc:0d:77:8a:0d:89:68:
         0e:21:33:3c:fd:c0:e7:1c:f5:e8:7a:86:bf:90:52:ca:0b:c1:
         e2:fc:5d:57:a6:28:b3:08:42:62:89:f3:0f:9f:fa:90:53:61:
         1f:22:e5:9c:c8:1f:bd:51:8c:de:35:fa:ff:ae:36:fa:97:34:
         14:3c:72:f4:51:2e:71:7b:7b:42:6b:b9:fe:83:5e:53:5e:d5:
         b3:47:c8:72:aa:06:41:c3:4f:86:66:5e:dc:c8:73:43:28:da:
         02:96:c1:d3:4c:9f:e6:5a:9d:06:53:4e:ce:e7:2d:47:34:e9:
         7a:bb:37:24:61:74:ee:4d:b9:e8:14:21:d2:cc:e6:59:67:17:
         47:0c:f1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:39 2026 by rpki-client