Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
File:                     GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft (raw, json)
Hash identifier:          16bYSPwCJWgBFL07Psm1ooFsx8+/d6mcmA6J+yPqvGY=
Subject key identifier:   1E:0C:8E:EB:93:DC:35:DA:7B:7D:16:EA:47:E6:B8:18:40:C3:F8:73
Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17
Certificate issuer:       /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
Manifest number:          0238
Signing time:             Sat 23 May 2026 01:57:42 +0000
Manifest this update:     Sat 23 May 2026 01:57:42 +0000
Manifest next update:     Sat 30 May 2026 01:57:42 +0000
Files and hashes:         1: GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl (hash: W4J3Uagwu71f+lkRzO/ZjaISTKdUVYMx/YTVwmAgG9c=)
                          2: 12D4E3D41AA411F0A196BA66C4F9AE02.roa (hash: Wb9fqxh/2GhJbzzPZAroheRX0Q4IRD6pGw48st/qKjM=)
                          3: F250438EF44011F0A1A516A45F6F56BC.roa (hash: 39UXrQgnsrOoQwxWVU9MQlKYuieI5NM5dujARlQugR8=)
                          4: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (hash: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ=)
                          5: 6E1C49FA031811F1BA97C916183D8C67.roa (hash: lJOk2wev4MkzbOS+niqS+uVfAej8rZrkP6By/CI08sY=)
                          6: 1F388278205F11F0A895DE1EC4F9AE02.roa (hash: 3fG2xSQYFFInAFhuIsOyJ8jvQ4PTgeRTg6IF8vTLUVw=)
                          7: 926A40AC205E11F0A7552513C4F9AE02.roa (hash: YKiXx5HCj2zwN3jfK9q5GakLYQcoFw4kl98GWbjUs9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 01:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17
        Validity
            Not Before: May 23 01:57:42 2026 GMT
            Not After : May 30 01:57:42 2026 GMT
        Subject: CN=6a110996-72cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:ee:fb:14:9f:b6:92:77:43:1e:dd:81:9b:
                    e0:a1:29:85:09:0a:73:90:64:2f:26:e1:73:a2:72:
                    c0:d5:4c:cb:99:55:a7:a9:a8:18:59:5b:30:0b:e4:
                    9c:c8:b4:43:77:64:81:54:d0:77:38:23:f9:0a:35:
                    11:14:af:93:31:f6:3f:6b:03:65:0d:aa:e5:94:f9:
                    bc:39:bb:e9:1a:82:2a:8d:28:c3:87:c9:5b:3f:b6:
                    68:56:11:79:a4:00:3c:25:a5:43:93:ee:d6:ab:2f:
                    4d:84:16:e1:eb:8e:e2:c1:43:18:d7:81:82:b6:c2:
                    fe:c7:86:e2:ee:d4:4e:e8:e5:91:2a:db:a4:71:b8:
                    e6:1d:01:ae:93:85:16:81:e5:b7:a6:78:f1:94:52:
                    d2:71:8c:ba:e1:86:46:05:eb:94:77:43:1d:4c:dd:
                    94:e0:77:50:56:37:fd:78:62:c5:22:1d:58:15:d4:
                    56:e2:8c:f0:33:e2:0d:47:51:12:9e:59:32:97:41:
                    15:8b:1d:f1:ec:eb:d2:3d:b7:5c:6d:6c:58:03:d8:
                    cd:7c:35:ab:6f:5c:77:ad:34:70:d2:38:04:dc:06:
                    55:7a:7e:c1:30:96:cc:92:a3:43:bc:c9:cb:e7:25:
                    a1:ca:da:7d:9c:c7:b2:a4:d7:d0:d7:15:f0:52:5a:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0C:8E:EB:93:DC:35:DA:7B:7D:16:EA:47:E6:B8:18:40:C3:F8:73
            X509v3 Authority Key Identifier:
                keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:fd:59:b1:be:00:7a:a2:a5:25:4b:07:b0:1a:64:81:ca:19:
         da:35:62:a2:c4:ef:3e:29:36:cd:05:d1:ef:dc:05:28:00:1e:
         25:3c:82:6b:9b:b9:62:7f:f4:a3:4c:d4:02:51:de:9f:69:18:
         ee:13:25:53:1f:04:1b:f2:f1:0f:85:4e:df:ae:98:4c:64:e1:
         46:8f:b4:40:9d:01:58:ec:f9:eb:f4:34:68:49:72:61:d0:01:
         51:75:c9:16:aa:dd:5e:1a:b3:66:14:0e:80:2b:2d:56:a2:e0:
         4d:88:67:7d:12:64:2c:2e:6c:bb:32:72:23:c9:95:29:76:d1:
         65:27:a8:ca:d1:90:2a:b9:ef:5d:d1:d8:11:e9:f5:45:f0:71:
         20:e9:c8:0b:3f:a2:52:52:9d:01:e8:49:08:e1:a4:3d:7d:fe:
         32:30:58:44:3e:64:74:7a:fc:e6:c4:69:40:9e:d1:ef:fe:ed:
         9d:0d:38:ef:4e:1d:ef:84:6d:1d:5e:39:c8:1e:0f:29:a2:6f:
         00:19:8c:e6:ef:78:19:05:0b:e3:1b:e2:e2:c2:d7:49:56:24:
         34:e0:b9:b1:93:ac:b8:48:e1:f0:f0:e8:06:df:79:84:7b:b7:
         10:cf:41:5b:95:44:c6:a1:fb:49:fd:12:22:2d:d7:a1:1a:a4:
         26:3a:04:d2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2
MEVCMEZCMTcwHhcNMjYwNTIzMDE1NzQyWhcNMjYwNTMwMDE1NzQyWjAYMRYwFAYD
VQQDEw02YTExMDk5Ni03MmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZXu+xSftpJ3Qx7dgZvgoSmFCQpzkGQvJuFzonLA1UzLmVWnqagYWVswC+Sc
yLRDd2SBVNB3OCP5CjURFK+TMfY/awNlDarllPm8ObvpGoIqjSjDh8lbP7ZoVhF5
pAA8JaVDk+7Wqy9NhBbh647iwUMY14GCtsL+x4bi7tRO6OWRKtukcbjmHQGuk4UW
geW3pnjxlFLScYy64YZGBeuUd0MdTN2U4HdQVjf9eGLFIh1YFdRW4ozwM+INR1ES
nlkyl0EVix3x7OvSPbdcbWxYA9jNfDWrb1x3rTRw0jgE3AZVen7BMJbMkqNDvMnL
5yWhytp9nMeypNfQ1xXwUlrymwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4MjuuT
3DXae30W6kfmuBhAw/hzMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC
MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTFEMy82MjlFOEIyMDNCMjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1Ba
V3BiUmNSWWo0dlpnNncteGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxP1Zsb4AeqKlJUsHsBpkgcoZ2jViosTvPik2zQXR79wFKAAeJTyCa5u5Yn/0
o0zUAlHen2kY7hMlUx8EG/LxD4VO366YTGThRo+0QJ0BWOz56/Q0aElyYdABUXXJ
FqrdXhqzZhQOgCstVqLgTYhnfRJkLC5suzJyI8mVKXbRZSeoytGQKrnvXdHYEen1
RfBxIOnICz+iUlKdAehJCOGkPX3+MjBYRD5kdHr85sRpQJ7R7/7tnQ04704d74Rt
HV45yB4PKaJvABmM5u94GQUL4xvi4sLXSVYkNOC5sZOsuEjh8PDoBt95hHu3EM9B
W5VExqH7Sf0SIi3XoRqkJjoE0g==
-----END CERTIFICATE-----
Generated at Sat May 23 18:31:22 2026 by rpki-client