Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          7og+6FYHFiM+p3bdHlk6uoFSiFCKzuDPHPy4if04i9I=
Subject key identifier:   EB:BF:DE:CD:B5:C8:E3:A2:5E:A7:2F:14:71:9C:8F:60:D8:0C:BD:92
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0BF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0BD2
Signing time:             Sat 04 Apr 2026 18:46:11 +0000
Manifest this update:     Sat 04 Apr 2026 18:46:10 +0000
Manifest next update:     Sat 11 Apr 2026 18:46:10 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: u3pmyryrmzojZvOkvf7PaIXOY+Z5Qvq/NiJuAv7Gt+4=)
                          2: 1671D380603711EF97BB395FC4F9AE02.roa (hash: BCikVDMThdr7c/vX1LiQM/OJjvtE7QJ+zP42lyGw5lY=)
                          3: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: Z0MQnn6qOb174wCs47KETGp25JeTqEfueFTHZlB9rgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3057 (0xbf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: Apr  4 18:46:10 2026 GMT
            Not After : Apr 11 18:46:10 2026 GMT
        Subject: CN=69d15c72-6314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:09:d6:06:f1:47:48:3c:66:69:fe:78:55:
                    4f:8e:98:31:b4:b8:cc:5e:85:8b:93:2b:af:68:1f:
                    53:13:6b:6e:25:0d:a2:b6:d2:51:bc:e7:27:62:9d:
                    25:22:21:7e:59:42:3c:d8:f6:36:40:4d:e2:95:23:
                    b0:48:a5:fd:c5:74:01:d6:d9:14:22:8c:93:03:f5:
                    e8:fc:12:b6:05:d8:a3:cd:03:9d:ad:a3:02:58:1f:
                    3b:21:f1:96:68:10:11:9f:45:f4:41:1f:7e:98:14:
                    86:e3:fb:49:27:be:83:db:f3:4e:74:2b:0f:c4:21:
                    95:ac:5b:ce:fc:1b:2c:2e:28:16:e3:71:3b:6a:4b:
                    bb:c7:5d:cc:3a:f5:31:dd:55:b7:94:e2:20:77:d7:
                    65:96:c8:34:9b:92:8e:21:9a:6a:6f:06:7d:44:16:
                    33:2e:ac:59:81:87:eb:2e:fb:57:7e:2e:a7:ab:14:
                    48:2c:b1:f3:ad:80:f6:f3:37:0c:4f:e6:67:fe:6a:
                    89:25:c3:4a:6e:e7:3c:57:62:97:16:dc:a7:b0:99:
                    f1:19:a0:25:2e:de:a3:f2:eb:9a:c2:9e:c4:b6:a7:
                    96:81:bb:4b:bb:24:71:88:79:8b:e7:d1:db:13:52:
                    6f:66:c1:99:62:ea:ca:81:e6:b6:a5:60:5b:8d:b5:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:DE:CD:B5:C8:E3:A2:5E:A7:2F:14:71:9C:8F:60:D8:0C:BD:92
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:35:7e:d2:2d:a6:b3:e4:16:1f:ea:73:ec:d4:f4:57:10:3e:
         12:65:a3:24:fe:39:01:bc:b5:74:e1:f6:21:4b:ab:f5:13:b8:
         56:77:ca:3f:f6:f3:63:43:cb:d3:e3:86:30:d5:14:bc:7e:2a:
         06:b8:17:ec:83:f7:85:bc:db:ea:01:72:b9:bc:ce:cf:fe:4b:
         5e:42:22:a7:f8:9c:ca:42:a5:15:5a:35:67:39:24:8e:34:12:
         e9:b1:e9:41:8e:fb:4e:b1:09:5f:f2:a9:43:8b:33:f1:b1:22:
         a7:4d:49:69:c8:f3:19:85:58:6a:87:7b:97:a4:f2:c8:6a:59:
         98:65:43:35:1f:fb:cb:d9:2a:86:de:1a:64:10:05:33:3b:8a:
         52:06:f6:6b:d3:25:0b:6f:52:e3:53:6c:ef:78:47:24:11:bd:
         16:3d:26:f0:4f:f9:4e:da:86:e9:70:e7:5b:b6:3e:91:d3:8a:
         a1:f5:99:a1:c2:69:f4:c7:2b:5f:a1:12:e0:d8:79:45:4d:bc:
         0d:8d:3b:2c:c4:72:39:94:9b:0e:8f:50:9b:5b:7d:6e:a3:7c:
         f8:71:8a:a3:0f:af:e2:b4:7f:3e:6a:1a:b8:41:fb:85:8f:74:
         83:e6:d9:70:00:bb:a6:fe:b5:fa:ab:2d:93:b9:09:aa:5f:e9:
         a8:79:ed:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx
RjI2NUQ0MTcwHhcNMjYwNDA0MTg0NjEwWhcNMjYwNDExMTg0NjEwWjAYMRYwFAYD
VQQDEw02OWQxNWM3Mi02MzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3LAJ1gbxR0g8Zmn+eFVPjpgxtLjMXoWLkyuvaB9TE2tuJQ2ittJRvOcnYp0l
IiF+WUI82PY2QE3ilSOwSKX9xXQB1tkUIoyTA/Xo/BK2BdijzQOdraMCWB87IfGW
aBARn0X0QR9+mBSG4/tJJ76D2/NOdCsPxCGVrFvO/BssLigW43E7aku7x13MOvUx
3VW3lOIgd9dllsg0m5KOIZpqbwZ9RBYzLqxZgYfrLvtXfi6nqxRILLHzrYD28zcM
T+Zn/mqJJcNKbuc8V2KXFtynsJnxGaAlLt6j8uuawp7EtqeWgbtLuyRxiHmL59Hb
E1JvZsGZYurKgea2pWBbjbXYawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu/3s21
yOOiXqcvFHGcj2DYDL2SMB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0
MnVlLXZSeWFkTHNmSmwxQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKjV+0i2ms+QWH+pz7NT0VxA+EmWjJP45Aby1dOH2IUur9RO4VnfKP/bzY0PL
0+OGMNUUvH4qBrgX7IP3hbzb6gFyubzOz/5LXkIip/icykKlFVo1ZzkkjjQS6bHp
QY77TrEJX/KpQ4sz8bEip01JacjzGYVYaod7l6TyyGpZmGVDNR/7y9kqht4aZBAF
MzuKUgb2a9MlC29S41Ns73hHJBG9Fj0m8E/5TtqG6XDnW7Y+kdOKofWZocJp9Mcr
X6ES4Nh5RU28DY07LMRyOZSbDo9Qm1t9bqN8+HGKow+v4rR/PmoauEH7hY90g+bZ
cAC7pv61+qstk7kJql/pqHntcw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:16 2026 by rpki-client