Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
File:                     GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json)
Hash identifier:          yNR3TDBLq2+V2aJdHzrMVneQkSgbXK8HQxbqHMSvDPs=
Subject key identifier:   3F:73:3A:33:E2:22:36:BA:F1:24:6D:34:76:40:B1:C9:19:DA:0B:5C
Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
Certificate issuer:       /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Certificate serial:       085C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
Manifest number:          084E
Signing time:             Sun 31 May 2026 21:26:31 +0000
Manifest this update:     Sun 31 May 2026 21:26:31 +0000
Manifest next update:     Sun 07 Jun 2026 21:26:31 +0000
Files and hashes:         1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: 1eGCa+jDdSUaEuIYJtb5YtzZXQJJwWwE7LvgZeQ8rTs=)
                          2: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 6HBwnAdSSFtnjaGJ508w7iBxRC6Y0SWJe0qRKEHH2Og=)
                          3: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: FnoWXzNWJjjpdfPVYZMnHGoZQsfGs0O6OuWkpNH6Ba4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
                          rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 21:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
        Validity
            Not Before: May 31 21:26:31 2026 GMT
            Not After : Jun  7 21:26:31 2026 GMT
        Subject: CN=6a1ca787-f554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:ac:f9:68:dd:d8:46:c0:6a:df:22:1e:c4:
                    bd:82:c7:f7:65:df:e2:7a:c8:79:44:b5:81:43:c7:
                    73:77:a8:27:31:12:16:b3:87:cd:2f:ff:95:de:16:
                    31:03:50:90:bb:e8:5f:16:1e:0c:2b:bf:2e:ca:71:
                    02:4e:f3:dd:b6:d7:fc:d1:72:10:c6:1f:0a:e1:3e:
                    b0:39:74:56:12:b0:97:23:a9:31:28:f0:00:eb:8e:
                    f6:32:c3:06:a2:64:aa:65:ee:da:28:13:20:b0:9a:
                    18:f9:28:49:40:f8:2e:fa:64:9a:9e:2a:e3:da:92:
                    76:51:23:cc:29:c3:f9:56:65:92:c0:eb:72:89:19:
                    46:0e:36:3a:b2:18:01:a8:f4:ad:88:d8:69:af:71:
                    ba:cd:73:41:26:92:53:fb:f3:f1:81:ac:9a:e4:ed:
                    5f:79:76:cc:95:3d:4b:d1:e2:60:7e:54:2a:0e:c7:
                    1b:56:b0:64:47:5f:5f:09:1c:76:86:48:40:a5:97:
                    43:3f:c6:a9:f2:9b:88:83:9b:f1:fd:6e:5f:5f:46:
                    92:f3:72:26:61:13:0e:7a:8e:fc:51:7c:ce:9b:21:
                    29:a4:d8:7e:cf:c2:19:03:d3:94:52:63:67:7b:c3:
                    79:ab:74:10:ae:75:99:54:d5:29:ae:d0:8b:ed:63:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:73:3A:33:E2:22:36:BA:F1:24:6D:34:76:40:B1:C9:19:DA:0B:5C
            X509v3 Authority Key Identifier:
                keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:94:3d:5c:dc:64:12:07:12:ce:d4:23:06:50:d4:d6:02:29:
         51:5d:8f:6d:63:53:59:f7:88:85:2e:bb:ab:40:71:d1:c9:0c:
         8d:77:c0:6f:6a:34:f8:53:b2:1a:56:b0:c9:05:dd:75:53:74:
         00:bf:77:1a:d2:d6:8e:04:b8:07:88:e2:48:36:a2:8c:74:6e:
         8b:a3:45:f5:61:ed:71:8e:e8:a5:ea:fc:74:de:cb:85:0a:71:
         56:77:90:5a:3a:3f:d0:d6:ed:b9:38:d3:a0:46:76:b0:ad:07:
         11:90:0e:db:f9:a0:46:9d:38:9d:c8:13:02:11:bb:b4:78:2e:
         43:f0:10:d6:6c:6d:a9:33:3f:49:66:8d:05:a2:63:af:11:4b:
         1e:96:d9:65:0f:b0:99:91:03:ad:b8:98:60:07:d6:a9:43:96:
         9b:60:61:94:fb:a1:51:87:c7:b8:d7:ee:bf:f9:39:ab:a6:99:
         1c:62:ce:6f:27:ae:a3:f9:00:99:f1:b1:7c:24:9a:85:2f:d5:
         9d:81:45:c9:2a:1c:93:de:62:fe:74:31:77:d8:00:bd:27:de:
         2c:a4:f4:6d:7e:5d:3c:fe:30:38:1c:50:c9:e7:40:d3:1b:98:
         a9:7e:03:d9:c3:b5:a9:af:0b:e5:41:36:d9:bd:4c:6e:86:73:
         d5:30:70:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VBN0YxMTAvBgNVBAUTKDE4NDQyQTExNkMzMDEwMUJFQzhDODlGNDUwMTk3OEMw
OTIwMzZCQjgwHhcNMjYwNTMxMjEyNjMxWhcNMjYwNjA3MjEyNjMxWjAYMRYwFAYD
VQQDEw02YTFjYTc4Ny1mNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtVKs+Wjd2EbAat8iHsS9gsf3Zd/iesh5RLWBQ8dzd6gnMRIWs4fNL/+V3hYx
A1CQu+hfFh4MK78uynECTvPdttf80XIQxh8K4T6wOXRWErCXI6kxKPAA6472MsMG
omSqZe7aKBMgsJoY+ShJQPgu+mSanirj2pJ2USPMKcP5VmWSwOtyiRlGDjY6shgB
qPStiNhpr3G6zXNBJpJT+/Pxgaya5O1feXbMlT1L0eJgflQqDscbVrBkR19fCRx2
hkhApZdDP8ap8puIg5vx/W5fX0aS83ImYRMOeo78UXzOmyEppNh+z8IZA9OUUmNn
e8N5q3QQrnWZVNUprtCL7WPkPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9zOjPi
Ija68SRtNHZAsckZ2gtcMB8GA1UdIwQYMBaAFBhEKhFsMBAb7IyJ9FAZeMCSA2u4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUE3Ri9FOTY0QUY0QzBC
NTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VCdnNqSW4wVUJsNHdKSURh
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dFUXFFV3d3RUJ2c2pJbjBVQmw0d0pJRGE3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUE3Ri9FOTY0QUY0QzBCNTkxMUVCOTM1OTBBNUZDNEY5QUUwMi9HRVFxRVd3d0VC
dnNqSW4wVUJsNHdKSURhN2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANpQ9XNxkEgcSztQjBlDU1gIpUV2PbWNTWfeIhS67q0Bx0ckMjXfAb2o0+FOy
GlawyQXddVN0AL93GtLWjgS4B4jiSDaijHRui6NF9WHtcY7oper8dN7LhQpxVneQ
Wjo/0NbtuTjToEZ2sK0HEZAO2/mgRp04ncgTAhG7tHguQ/AQ1mxtqTM/SWaNBaJj
rxFLHpbZZQ+wmZEDrbiYYAfWqUOWm2BhlPuhUYfHuNfuv/k5q6aZHGLObyeuo/kA
mfGxfCSahS/VnYFFySock95i/nQxd9gAvSfeLKT0bX5dPP4wOBxQyedA0xuYqX4D
2cO1qa8L5UE22b1MboZz1TBwrw==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:10 2026 by rpki-client