Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
File:                     gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json)
Hash identifier:          HjqWAESvjYYeNMbmTcHnSMncfyTMHaveK+vGmIzlbFs=
Subject key identifier:   93:4A:67:B3:8F:C5:7F:40:2D:96:1C:E7:9B:84:D1:39:CF:C9:A8:84
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
Manifest number:          0139
Signing time:             Mon 27 Apr 2026 05:23:45 +0000
Manifest this update:     Mon 27 Apr 2026 05:23:45 +0000
Manifest next update:     Mon 04 May 2026 05:23:45 +0000
Files and hashes:         1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: 6iKasSv9FP2OvPb62+g6I/ai8fNmMRwLD4N5vUUmJIw=)
                          2: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=)
                          3: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: nm1Ullm2VIIXw5m4XpAUTvY39qoFFv2kQzceO6Rs4JQ=)
                          4: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: zpgkPkDvpxrkSLXBoEJusQVoT2JeDQ/RaiKoNpwaUvg=)
                          5: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: tbOGVdr1pGEtRNIPhw+pN+6OYD1Bg4DdAHsAJbGglfo=)
                          6: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: CkipJrZk0lzhAoob2kPQd93c6/y1lAZ0Ra8Fe1utBl0=)
                          7: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: WpLf4AaObe+N5I2HIzmO3ifOs3a8b6pFk0v9kjWfhKo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 05:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Apr 27 05:23:45 2026 GMT
            Not After : May  4 05:23:45 2026 GMT
        Subject: CN=69eef2e1-be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:bb:f1:1e:0d:40:21:dd:3c:61:35:6f:19:
                    d7:e6:7e:98:66:af:43:8d:87:60:46:25:6f:f8:08:
                    d2:0c:b2:ae:a7:56:ca:5c:db:37:75:a6:e3:cc:69:
                    09:46:9a:3b:d4:d7:b0:b9:19:08:c8:4e:0b:2f:51:
                    f2:63:27:06:9d:25:ff:69:6a:8b:fb:d1:b4:80:e9:
                    1f:af:91:07:86:e2:d5:ce:a0:4e:40:bc:a0:fd:26:
                    d3:29:37:b4:c3:3b:0d:28:42:ff:67:5d:9a:d8:f6:
                    d9:88:6a:b7:3c:7f:b5:c9:eb:37:d1:e4:64:42:5e:
                    a8:b2:ee:79:2b:12:66:00:2b:a4:46:e2:24:9e:a1:
                    1c:14:40:8f:d3:6d:c1:b2:e1:6b:43:7a:8f:3b:da:
                    04:3f:c6:b5:20:7f:d2:ef:0f:67:e4:d7:c3:b5:81:
                    9c:3d:09:ec:8a:0e:d4:5c:5e:09:b8:15:ac:91:b0:
                    d5:68:2e:b4:91:c1:d3:60:5d:83:08:88:74:fb:91:
                    0b:51:ff:4d:0c:fd:b7:ad:25:bf:74:46:64:70:7a:
                    65:fc:b9:55:f9:ae:f9:34:42:72:e2:db:d1:da:f2:
                    f8:1b:34:87:63:32:31:8e:0f:5e:aa:1e:f9:ad:19:
                    bc:96:a0:f8:dd:84:29:e4:41:6a:18:5f:2e:c5:de:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4A:67:B3:8F:C5:7F:40:2D:96:1C:E7:9B:84:D1:39:CF:C9:A8:84
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:26:71:c8:9d:32:6a:b2:33:c9:22:9f:dc:bb:13:8b:f3:43:
         93:89:3f:2a:4e:2c:5a:f6:f7:29:9b:6c:d5:69:1e:8e:97:e8:
         33:06:bd:69:31:50:7a:54:79:62:1d:55:4a:9e:3f:8b:5d:e8:
         10:05:88:d0:28:de:ff:ad:80:63:04:da:a3:da:ce:64:c9:fb:
         0c:ce:32:dd:6f:e6:8e:d1:f2:e9:9b:78:d9:e0:2a:69:a9:3a:
         83:e4:df:8f:78:eb:35:4c:c0:d4:74:f8:d7:8e:25:9e:1b:e3:
         b8:57:b2:af:8b:66:e0:15:48:b6:20:c3:21:16:06:c5:71:24:
         d8:28:33:2f:03:2c:c9:a2:78:b2:1f:6b:9f:50:da:58:5c:4a:
         6f:1b:e2:67:8c:33:5e:c9:0e:52:3e:fb:ff:93:f6:a2:df:5f:
         a5:8f:2f:1f:6f:0f:28:1f:bf:87:56:b9:f2:6e:51:b1:05:c3:
         48:c4:ef:1a:15:f5:9a:1d:c6:d2:a7:b5:6a:92:49:67:d4:b6:
         91:cf:83:30:22:d3:e9:d5:dc:f4:d7:53:c4:6e:32:73:9f:3b:
         3e:1a:df:d9:ee:d2:b7:9d:71:0b:02:1f:07:9f:66:88:38:17:
         d9:9f:b2:5d:d9:5f:4e:e3:09:0f:1e:78:e3:25:c0:14:7b:fd:
         1f:1d:3e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:34:47 2026 by rpki-client