Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
File:                     gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft (raw, json)
Hash identifier:          5M46V3Qfzn3neupK8zPZBQRMs1gv99b6FgsBeTl99RY=
Subject key identifier:   D7:8A:32:04:49:EF:C5:38:32:D3:7C:2B:4C:5B:2C:1D:01:72:00:09
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Certificate issuer:       /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
Manifest number:          01DA
Signing time:             Thu 21 May 2026 03:32:03 +0000
Manifest this update:     Thu 21 May 2026 03:32:03 +0000
Manifest next update:     Thu 28 May 2026 03:32:03 +0000
Files and hashes:         1: gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl (hash: zISwAuwu7f3mzwv3wTZxSDFs+8KeJeJbVyE1n+ZEkhU=)
                          2: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (hash: EEOuLVOFGIUAdOuI2tNMq9b7RGo51bkfuVm6Dgdj9UY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
                          rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
        Validity
            Not Before: May 21 03:32:03 2026 GMT
            Not After : May 28 03:32:03 2026 GMT
        Subject: CN=6a0e7cb3-75d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:c1:f4:b6:b9:be:d5:eb:b3:66:97:4d:17:
                    a8:9a:18:7a:7e:e7:e6:b1:a3:83:15:93:5b:ae:e8:
                    76:61:f0:cc:71:c5:3b:5e:8d:2c:49:98:cf:59:7c:
                    e6:d4:60:4f:84:96:0e:ab:2b:83:d9:24:2a:6e:1b:
                    6c:db:f7:e4:c9:2c:eb:2a:93:d7:5a:88:a5:1e:ce:
                    28:ad:9d:2c:2c:ea:56:d3:4d:d3:af:5f:70:b8:ae:
                    fa:5b:9f:f1:78:71:8c:00:d3:42:08:8e:7e:6f:d2:
                    ba:83:ca:ff:b4:c0:7d:e3:f5:5c:fd:20:1a:97:f6:
                    ab:e9:15:81:ec:2e:92:46:8b:6b:df:c1:6e:b3:d9:
                    91:ef:6b:cf:34:b2:f1:6f:1c:44:a0:90:01:f5:0a:
                    ac:cf:a4:01:fb:f4:15:8c:b8:64:c7:7f:53:5f:98:
                    7d:ff:f5:c5:df:eb:df:9e:9b:6f:89:fb:66:44:f2:
                    9e:20:f2:09:12:38:ff:2d:ed:c7:08:72:f6:46:dc:
                    d3:10:1f:18:29:34:1b:04:87:a3:bd:c5:06:7e:ac:
                    85:24:1b:7d:0d:e0:32:89:46:ff:47:91:da:24:30:
                    ed:cf:05:6c:22:e0:7a:f1:b7:0b:6e:d4:ed:33:0b:
                    22:08:38:7b:58:b9:d3:cf:ae:91:bf:1d:88:0f:b9:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:32:04:49:EF:C5:38:32:D3:7C:2B:4C:5B:2C:1D:01:72:00:09
            X509v3 Authority Key Identifier:
                keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:6b:82:31:44:65:38:28:ac:22:fd:82:ad:7d:45:0a:61:33:
         6d:72:a2:a6:dd:e8:4f:d9:66:e3:17:12:70:dd:e3:9a:e1:25:
         6d:64:8a:e3:a3:02:60:75:14:11:21:a9:dc:ee:50:d5:a1:66:
         24:21:b7:1c:a0:9a:37:b0:1c:45:d5:fd:a7:a7:23:41:16:50:
         4e:ce:86:22:31:4b:83:d4:cb:d8:c6:70:c3:5a:0e:13:0b:dd:
         c6:69:8b:69:63:37:2a:bb:67:1f:71:60:84:54:99:2a:32:ca:
         f7:e3:51:a2:a0:b6:20:a7:b0:b8:1b:e6:de:ef:83:ff:12:04:
         33:86:05:7d:80:92:5d:07:6f:11:50:a3:60:c3:77:6d:cd:51:
         53:f5:ab:f3:f0:f7:12:98:bd:e0:24:bb:0e:e0:b8:40:cf:3a:
         87:2f:c3:13:9f:9c:1d:d0:e1:7d:00:3c:b6:cf:b1:77:6a:9d:
         a7:2c:76:76:30:bb:af:00:96:e7:3e:d8:42:a0:50:a4:0e:7e:
         83:3f:5d:ad:7e:7a:25:9a:98:83:28:74:33:b7:d6:09:11:55:
         71:6c:33:d6:10:ff:89:fd:70:c3:0a:3d:c3:06:ef:55:9b:81:
         b2:8f:8e:3b:df:74:75:c0:ac:c8:d1:1c:4e:6e:b5:5f:f1:44:
         09:c7:49:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQwOEExMTAvBgNVBAUTKDgxNkE0NzhEODZFN0UyMUJGMzE3ODUxMEI4NTg1MzI1
NTgzNDMwRUUwHhcNMjYwNTIxMDMzMjAzWhcNMjYwNTI4MDMzMjAzWjAYMRYwFAYD
VQQDEw02YTBlN2NiMy03NWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp9zB9La5vtXrs2aXTReomhh6fufmsaODFZNbruh2YfDMccU7Xo0sSZjPWXzm
1GBPhJYOqyuD2SQqbhts2/fkySzrKpPXWoilHs4orZ0sLOpW003Tr19wuK76W5/x
eHGMANNCCI5+b9K6g8r/tMB94/Vc/SAal/ar6RWB7C6SRotr38Fus9mR72vPNLLx
bxxEoJAB9Qqsz6QB+/QVjLhkx39TX5h9//XF3+vfnptviftmRPKeIPIJEjj/Le3H
CHL2RtzTEB8YKTQbBIejvcUGfqyFJBt9DeAyiUb/R5HaJDDtzwVsIuB68bcLbtTt
MwsiCDh7WLnTz66Rvx2ID7m2jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeKMgRJ
78U4MtN8K0xbLB0BcgAJMB8GA1UdIwQYMBaAFIFqR42G5+Ib8xeFELhYUyVYNDDu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDA4QS9DMEY0RTg2NDc4
OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRodnpGNFVRdUZoVEpWZzBN
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dXcEhqWWJuNGh2ekY0VVF1RmhUSlZnME1PNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RDA4QS9DMEY0RTg2NDc4OEExMUVFQjA2OTI0NjFDNEY5QUUwMi9nV3BIallibjRo
dnpGNFVRdUZoVEpWZzBNTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAv2uCMURlOCisIv2CrX1FCmEzbXKipt3oT9lm4xcScN3jmuElbWSK46MCYHUU
ESGp3O5Q1aFmJCG3HKCaN7AcRdX9p6cjQRZQTs6GIjFLg9TL2MZww1oOEwvdxmmL
aWM3KrtnH3FghFSZKjLK9+NRoqC2IKewuBvm3u+D/xIEM4YFfYCSXQdvEVCjYMN3
bc1RU/Wr8/D3Epi94CS7DuC4QM86hy/DE5+cHdDhfQA8ts+xd2qdpyx2djC7rwCW
5z7YQqBQpA5+gz9drX56JZqYgyh0M7fWCRFVcWwz1hD/if1wwwo9wwbvVZuBso+O
O990dcCsyNEcTm61X/FECcdJ6Q==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:56 2026 by rpki-client