Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File:                     ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier:          yiIR08kqwgvJejFuNsP4qRfl6xl/eN+qpJxr85gd4Tk=
Subject key identifier:   01:16:07:74:BB:21:94:B8:12:7A:55:52:CB:AE:83:38:07:46:3D:F4
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer:       /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number:          027D
Signing time:             Mon 27 Apr 2026 01:46:39 +0000
Manifest this update:     Mon 27 Apr 2026 01:46:39 +0000
Manifest next update:     Mon 04 May 2026 01:46:39 +0000
Files and hashes:         1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: K6SjpNFN/2bjQQ+SNEgThvy9u7fr9tdBGX6cvA5ros0=)
                          2: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=)
                          3: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Validity
            Not Before: Apr 27 01:46:39 2026 GMT
            Not After : May  4 01:46:39 2026 GMT
        Subject: CN=69eebfff-4d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b4:56:eb:6b:b9:9b:5c:d0:64:99:75:a3:e6:
                    76:e1:75:67:44:18:89:48:c3:1f:02:4d:a2:84:f4:
                    d5:1a:1e:6b:e9:d7:1b:30:87:27:42:ee:cc:3d:f4:
                    e9:33:8f:ef:1e:f0:ab:18:3a:52:3a:95:5a:68:cd:
                    b0:56:b8:d4:e5:5e:2b:c8:90:b6:f4:48:2f:05:91:
                    12:ef:c8:ab:f7:8d:03:ea:7f:fc:6a:d3:9b:05:e6:
                    70:88:5c:f0:1f:f0:63:99:25:45:af:a6:1b:77:90:
                    0a:3c:19:d1:59:9d:59:a9:73:56:c5:76:f0:84:32:
                    c7:3d:14:13:a5:c1:35:8f:0d:5f:d2:55:d8:6e:22:
                    83:87:b4:bc:6d:35:c5:b4:57:49:d4:a5:80:4c:4a:
                    9a:70:a2:4b:3d:75:29:38:61:ba:97:14:aa:3e:6a:
                    33:e4:08:20:e9:f6:97:88:e5:bc:20:86:24:38:ce:
                    3e:0e:88:4c:78:b0:13:88:45:67:2a:40:aa:e4:24:
                    64:51:3f:f3:60:c3:19:a1:23:ce:fa:6b:91:b3:9b:
                    7e:72:ed:91:4a:06:97:f2:bb:1c:9f:4c:02:95:2d:
                    fd:40:69:b6:6b:e9:fc:9f:2b:c3:85:e4:01:58:13:
                    5d:fb:3a:cb:03:16:a8:a9:7d:3d:fb:14:97:36:83:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:16:07:74:BB:21:94:B8:12:7A:55:52:CB:AE:83:38:07:46:3D:F4
            X509v3 Authority Key Identifier:
                keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:10:0b:41:3e:de:95:18:7e:cb:a3:79:41:af:70:f8:20:
         92:c4:8c:6d:9c:47:8c:19:ad:bb:fd:48:8d:71:f9:d5:84:e1:
         d9:37:9c:6c:b0:62:9d:6d:d5:27:24:34:58:d5:d6:bd:31:02:
         3a:08:7b:8a:9d:97:d2:c5:c1:1e:c9:10:b3:30:90:18:0a:88:
         d0:7e:41:2f:50:56:9f:97:0b:1d:68:d5:47:1b:de:35:95:e3:
         2a:16:7e:5c:93:66:c9:12:71:6c:e9:b3:99:c3:d8:ef:66:8e:
         12:42:31:19:12:34:a4:e2:3b:c4:ac:59:53:d7:5c:72:8c:89:
         25:18:0e:61:fc:ea:0f:39:2c:3e:ea:1e:d2:60:bf:69:44:2f:
         d2:b0:0d:eb:53:29:ef:a3:81:19:93:6e:5a:24:36:98:10:3d:
         c0:83:f7:2f:ff:3b:58:af:5f:cb:9e:d3:89:3d:51:23:13:ab:
         34:79:2d:e9:c5:54:dc:18:1d:fd:42:85:b8:b1:54:4c:72:3c:
         11:bb:73:f5:24:c4:74:e7:25:0c:17:93:cf:30:3e:a2:cd:88:
         ae:54:b3:ee:de:ea:75:89:8d:c9:68:10:1d:87:6d:42:bb:99:
         40:b1:59:5c:8c:e3:25:5d:29:45:1a:f5:cc:72:43:dc:78:c6:
         ed:af:82:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz
ODczOTFCRTYwHhcNMjYwNDI3MDE0NjM5WhcNMjYwNTA0MDE0NjM5WjAYMRYwFAYD
VQQDEw02OWVlYmZmZi00ZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApLRW62u5m1zQZJl1o+Z24XVnRBiJSMMfAk2ihPTVGh5r6dcbMIcnQu7MPfTp
M4/vHvCrGDpSOpVaaM2wVrjU5V4ryJC29EgvBZES78ir940D6n/8atObBeZwiFzw
H/BjmSVFr6Ybd5AKPBnRWZ1ZqXNWxXbwhDLHPRQTpcE1jw1f0lXYbiKDh7S8bTXF
tFdJ1KWATEqacKJLPXUpOGG6lxSqPmoz5Agg6faXiOW8IIYkOM4+DohMeLATiEVn
KkCq5CRkUT/zYMMZoSPO+muRs5t+cu2RSgaX8rscn0wClS39QGm2a+n8nyvDheQB
WBNd+zrLAxaoqX09+xSXNoOmOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAEWB3S7
IZS4EnpVUsuugzgHRj30MB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2
QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3
SFJsRk1BYWpoczA0YzVHLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk/AQC0E+3pUYfsujeUGvcPggksSMbZxHjBmtu/1IjXH51YTh2TecbLBinW3V
JyQ0WNXWvTECOgh7ip2X0sXBHskQszCQGAqI0H5BL1BWn5cLHWjVRxveNZXjKhZ+
XJNmyRJxbOmzmcPY72aOEkIxGRI0pOI7xKxZU9dccoyJJRgOYfzqDzksPuoe0mC/
aUQv0rAN61Mp76OBGZNuWiQ2mBA9wIP3L/87WK9fy57TiT1RIxOrNHkt6cVU3Bgd
/UKFuLFUTHI8Ebtz9STEdOclDBeTzzA+os2IrlSz7t7qdYmNyWgQHYdtQruZQLFZ
XIzjJV0pRRr1zHJD3HjG7a+C0A==
-----END CERTIFICATE-----
Generated at Tue Apr 28 22:16:41 2026 by rpki-client