Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File:                     Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier:          WzEpGHOzjh7a6Yo7z1bqmuVU0acdt3ujI9R7QdB7tCU=
Subject key identifier:   E4:9E:A4:68:18:76:61:9D:00:64:BC:C6:89:B9:E8:D1:55:73:D5:2A
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer:       /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number:          0247
Signing time:             Thu 21 May 2026 02:29:06 +0000
Manifest this update:     Thu 21 May 2026 02:29:06 +0000
Manifest next update:     Thu 28 May 2026 02:29:06 +0000
Files and hashes:         1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: Mt/tD11b7cQ6ZmoCgdiEHsM9YbQ2kY8gB0/jA1sV++s=)
                          2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: CsD2M4xYWmD+4KZHvogCG8jsC1NzwYJkcqvvaiFYMlM=)
                          3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: 9lrxfUBWBmg3EvWvMM3CqOq7J9rwqvVHXsxONFDg0xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
        Validity
            Not Before: May 21 02:29:06 2026 GMT
            Not After : May 28 02:29:06 2026 GMT
        Subject: CN=6a0e6df2-1138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:47:5b:9d:68:61:f1:28:35:92:e2:c7:af:c2:
                    5a:fe:1d:8e:b6:75:f3:12:0e:f6:15:02:f0:3e:a6:
                    e3:28:87:d7:40:6a:9c:90:4f:78:8d:dc:f1:06:e7:
                    08:57:a1:80:bf:b1:5f:b8:32:ad:fd:93:dc:74:4a:
                    db:f1:aa:17:9a:6a:bc:10:ec:65:28:a8:19:9c:d2:
                    37:f9:bf:6f:0b:64:2a:5d:2b:fc:06:14:91:09:a1:
                    29:10:3d:d9:09:ef:94:cd:37:6f:da:d2:32:a2:87:
                    ea:39:ff:7a:90:b3:10:41:66:f8:1f:5c:bd:1a:58:
                    f3:ce:27:ad:72:f0:8d:11:ec:11:e0:5c:b0:6a:33:
                    ed:e8:86:08:25:61:a5:ec:e4:f1:c3:4e:bb:6f:6c:
                    e2:94:da:78:69:1e:39:5a:a1:37:21:08:07:e8:c3:
                    6f:d3:79:d3:2e:fd:84:f3:86:22:4f:ab:fc:b1:4a:
                    bd:07:f3:15:89:80:00:20:a2:87:96:18:4a:00:e4:
                    3f:6b:ea:cd:2d:b4:41:15:7e:b8:c3:c2:6d:83:2c:
                    fb:7f:a8:e9:6e:eb:ee:98:10:a0:58:f1:04:05:49:
                    c6:07:c1:1a:d6:54:bd:e4:30:63:bc:93:06:22:43:
                    93:36:92:78:11:28:32:41:f3:0a:45:8f:cd:e9:19:
                    aa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:A4:68:18:76:61:9D:00:64:BC:C6:89:B9:E8:D1:55:73:D5:2A
            X509v3 Authority Key Identifier:
                keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:78:d2:b8:6c:2d:28:08:ed:9b:0a:a1:81:dc:d1:a2:2a:24:
         3b:ce:e0:c1:e4:7b:aa:d9:11:1a:ee:5b:62:1a:34:5f:1a:c3:
         81:b6:11:2c:73:1e:e0:eb:6c:b2:f3:f3:1c:a3:3e:9c:4a:f8:
         67:1d:7d:cc:d1:cc:87:f9:24:9f:3e:cc:33:60:9b:e8:b6:43:
         c8:5a:07:13:18:00:8a:1d:a2:73:d8:f4:fe:ae:de:fd:98:16:
         36:5e:bc:66:f7:61:ed:0b:1f:9b:6d:21:81:60:ba:8b:37:c3:
         09:e5:07:0b:18:2e:76:31:40:8d:d8:e8:72:ce:23:b4:d2:71:
         23:30:95:fb:c9:15:99:a2:cb:ca:b3:cb:a5:02:24:ab:e9:1c:
         01:a5:c4:3f:31:27:b6:17:a0:e0:78:1b:3c:c9:8a:e8:d5:e7:
         05:9f:46:d2:3c:07:3b:93:50:51:df:94:b8:f7:cc:07:ff:a8:
         d7:f3:d6:1c:47:5f:ea:92:52:33:d2:c3:b6:31:8e:1a:44:8f:
         bc:00:30:33:86:87:32:5e:93:40:41:06:70:e8:1c:c5:8d:cd:
         28:c1:40:6c:26:0f:7e:af:e9:76:da:98:2c:d9:8b:73:04:26:
         0b:72:17:9d:29:00:1b:eb:92:6d:e9:49:d0:ba:e1:30:7c:ee:
         13:ba:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:39 2026 by rpki-client