Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
File:                     gGcGY3lQ742ue-vRyadLsfJl1Bc.mft (raw, json)
Hash identifier:          dcJYsocYy0CIoJiiGmaKjG6Z8P3zlEuNd48Nzwr8W7M=
Subject key identifier:   F1:E4:B3:DC:88:79:20:EF:DD:FC:52:29:AC:54:F4:24:F2:E6:E8:F4
Authority key identifier: 80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17
Certificate issuer:       /CN=A919EF51/serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
Certificate serial:       0C08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
Manifest number:          0BE9
Signing time:             Wed 20 May 2026 18:55:27 +0000
Manifest this update:     Wed 20 May 2026 18:55:27 +0000
Manifest next update:     Wed 27 May 2026 18:55:27 +0000
Files and hashes:         1: gGcGY3lQ742ue-vRyadLsfJl1Bc.crl (hash: 8KXi3KwvjhiAvoNJn0TLBr7oh6i41TPPyMknSj6LhYw=)
                          2: F6C1C6C85F7611EFBFEE134FC4F9AE02.roa (hash: Z0MQnn6qOb174wCs47KETGp25JeTqEfueFTHZlB9rgo=)
                          3: 1671D380603711EF97BB395FC4F9AE02.roa (hash: BCikVDMThdr7c/vX1LiQM/OJjvtE7QJ+zP42lyGw5lY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3080 (0xc08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=806706637950EF8DAE7BEBD1C9A74BB1F265D417
        Validity
            Not Before: May 20 18:55:27 2026 GMT
            Not After : May 27 18:55:27 2026 GMT
        Subject: CN=6a0e039f-4ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:4f:f1:c9:90:42:81:7f:79:d7:96:a5:a2:
                    38:1c:24:d9:ca:c0:86:0d:d0:b6:8e:b9:0f:59:f6:
                    60:0e:2a:3c:58:43:21:cc:82:4a:ea:a0:4a:22:cc:
                    55:2b:da:63:2b:74:a6:3f:dd:87:dc:5b:d1:72:33:
                    7f:f9:5c:56:f0:d5:eb:72:0b:78:5a:68:65:7c:72:
                    1a:5c:b5:d7:81:1b:a3:b2:41:34:9b:2a:f9:3e:8b:
                    94:b4:ad:04:93:dc:3a:95:46:91:a3:00:05:ab:b9:
                    92:a1:7c:e5:d5:32:3a:34:69:22:50:b6:1e:5a:2a:
                    78:59:d0:d2:82:8a:48:fd:a1:17:e1:19:54:3b:1b:
                    a7:ab:5b:c9:6f:2d:2d:b3:ed:cb:b3:e0:13:69:0e:
                    2f:2e:34:86:91:ea:5b:b8:0e:ab:8f:e2:2e:84:97:
                    a3:a0:97:bd:47:79:79:6b:12:27:2b:bc:a8:54:81:
                    5c:e9:0e:51:59:4a:bf:84:74:57:6d:f7:1f:03:2c:
                    1b:19:ca:7f:c5:4a:3c:93:4a:87:2f:2f:1c:21:03:
                    8f:61:a6:48:f6:e4:d7:13:dc:8f:8f:15:98:a3:99:
                    11:53:ef:ec:89:00:28:a1:05:72:13:9a:3f:73:63:
                    71:2c:e2:51:d5:5f:95:b7:b5:cb:52:61:97:2f:dc:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E4:B3:DC:88:79:20:EF:DD:FC:52:29:AC:54:F4:24:F2:E6:E8:F4
            X509v3 Authority Key Identifier:
                keyid:80:67:06:63:79:50:EF:8D:AE:7B:EB:D1:C9:A7:4B:B1:F2:65:D4:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGcGY3lQ742ue-vRyadLsfJl1Bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/A883E81C3D8211EA9F267370C4F9AE02/gGcGY3lQ742ue-vRyadLsfJl1Bc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:25:b8:7a:dc:41:ff:86:3b:4a:76:e6:e7:b5:a2:02:d7:53:
         0d:c6:de:3e:00:dd:1b:02:d9:00:0e:31:72:a8:da:e4:c9:9d:
         5c:ee:8d:ac:a0:1b:a7:7b:7b:e9:11:2a:9a:f1:f6:22:45:d2:
         30:a8:98:8b:83:b1:f2:5b:2f:59:e6:47:79:d2:33:55:86:10:
         60:3a:49:af:dc:a2:49:bb:12:1b:fa:8b:90:1e:03:48:b5:a7:
         44:b4:a2:14:29:f1:13:75:a3:dd:57:24:3f:d5:71:7e:a4:6a:
         ca:85:bb:37:f8:5a:ea:8d:fe:08:fe:22:41:3b:80:11:87:c6:
         07:b2:31:30:20:92:bd:1e:17:b0:5f:b3:e3:af:d3:97:7f:a3:
         e2:6f:3f:ca:36:64:a4:34:87:2a:22:2b:b0:20:a8:f8:98:83:
         9d:6a:99:ea:fc:ae:9a:de:36:e3:cf:49:62:c1:94:15:49:bb:
         55:c1:c7:8e:76:5f:71:0a:65:68:de:28:0e:5d:b7:0d:96:e4:
         2e:97:2c:4b:e9:4f:18:e9:ca:bd:bf:e6:19:f0:57:d3:2c:43:
         7d:56:8f:27:d5:df:9a:d4:96:5e:38:92:68:9b:7c:16:be:b4:
         48:6c:21:98:c8:8d:3d:5c:83:99:e3:d0:ec:00:52:4e:db:25:
         b5:53:db:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDgwNjcwNjYzNzk1MEVGOERBRTdCRUJEMUM5QTc0QkIx
RjI2NUQ0MTcwHhcNMjYwNTIwMTg1NTI3WhcNMjYwNTI3MTg1NTI3WjAYMRYwFAYD
VQQDEw02YTBlMDM5Zi00Y2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsTJP8cmQQoF/edeWpaI4HCTZysCGDdC2jrkPWfZgDio8WEMhzIJK6qBKIsxV
K9pjK3SmP92H3FvRcjN/+VxW8NXrcgt4WmhlfHIaXLXXgRujskE0myr5PouUtK0E
k9w6lUaRowAFq7mSoXzl1TI6NGkiULYeWip4WdDSgopI/aEX4RlUOxunq1vJby0t
s+3Ls+ATaQ4vLjSGkepbuA6rj+IuhJejoJe9R3l5axInK7yoVIFc6Q5RWUq/hHRX
bfcfAywbGcp/xUo8k0qHLy8cIQOPYaZI9uTXE9yPjxWYo5kRU+/siQAooQVyE5o/
c2NxLOJR1V+Vt7XLUmGXL9xbpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHks9yI
eSDv3fxSKaxU9CTy5uj0MB8GA1UdIwQYMBaAFIBnBmN5UO+Nrnvr0cmnS7HyZdQX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9BODgzRTgxQzNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0MnVlLXZSeWFkTHNmSmwx
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dHY0dZM2xRNzQydWUtdlJ5YWRMc2ZKbDFCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUY1MS9BODgzRTgxQzNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9nR2NHWTNsUTc0
MnVlLXZSeWFkTHNmSmwxQmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKiW4etxB/4Y7Snbm57WiAtdTDcbePgDdGwLZAA4xcqja5MmdXO6NrKAbp3t7
6REqmvH2IkXSMKiYi4Ox8lsvWeZHedIzVYYQYDpJr9yiSbsSG/qLkB4DSLWnRLSi
FCnxE3Wj3VckP9VxfqRqyoW7N/ha6o3+CP4iQTuAEYfGB7IxMCCSvR4XsF+z46/T
l3+j4m8/yjZkpDSHKiIrsCCo+JiDnWqZ6vyumt42489JYsGUFUm7VcHHjnZfcQpl
aN4oDl23DZbkLpcsS+lPGOnKvb/mGfBX0yxDfVaPJ9XfmtSWXjiSaJt8Fr60SGwh
mMiNPVyDmePQ7ABSTtsltVPbCA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:28:49 2026 by rpki-client