Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
File:                     G4nCebixZmmNK-SGc-zMKwgTPjk.mft (raw, json)
Hash identifier:          sGkwkagINuN7UMtNzcoJpPuPLiSdjNY/iDJr0JCrq98=
Subject key identifier:   5C:1D:A0:D5:4B:F9:61:21:3D:F6:A8:AA:D5:9D:63:62:E4:38:A7:64
Authority key identifier: 1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39
Certificate issuer:       /CN=A91FCEB1/serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
Certificate serial:       07BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
Manifest number:          2900
Signing time:             Wed 20 May 2026 15:55:42 +0000
Manifest this update:     Wed 20 May 2026 15:55:42 +0000
Manifest next update:     Wed 27 May 2026 15:55:42 +0000
Files and hashes:         1: G4nCebixZmmNK-SGc-zMKwgTPjk.crl (hash: voMsQ1BR7HXCuRV67Iqf4jrOTxbGmOnexlq4j6OsmU4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981 (0x7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=1B89C279B8B166698D2BE48673ECCC2B08133E39
        Validity
            Not Before: May 20 15:55:42 2026 GMT
            Not After : May 27 15:55:42 2026 GMT
        Subject: CN=6a0dd97e-b5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3c:ce:cf:30:3f:64:3a:0e:35:06:eb:66:9f:
                    23:a8:6a:f0:e8:dd:c5:4a:49:e2:3f:0e:d4:94:1f:
                    3c:4c:80:5e:73:cc:a6:b1:1d:72:de:14:13:6b:2e:
                    2e:8d:e9:75:da:9e:1b:a0:9a:83:5d:0b:0a:bd:7b:
                    25:04:36:6c:a4:6f:eb:79:ee:24:47:04:02:d3:78:
                    86:8d:a2:65:f2:b2:66:e2:b1:3b:46:ee:f7:e7:59:
                    05:f0:35:30:c4:c6:0b:da:bb:ff:c8:21:e3:67:35:
                    4f:f3:05:93:f6:36:e0:1e:d2:cc:18:e9:cb:4d:70:
                    a8:e2:86:e4:63:af:77:1f:ae:53:d8:df:e3:30:96:
                    59:45:7b:df:83:0c:b7:4c:8d:38:ef:51:00:79:46:
                    97:94:20:92:97:7e:ca:93:f3:5c:fb:3b:cd:64:5a:
                    1d:3a:1d:7c:4a:50:b7:9d:60:0f:44:6c:40:a1:5e:
                    63:44:97:64:76:36:8e:3c:4e:9f:36:d1:ce:c7:84:
                    e8:86:3f:43:06:15:e0:df:50:44:04:b7:d0:e8:19:
                    f5:b8:86:1e:6f:bd:d6:17:0f:df:75:bf:04:37:5e:
                    60:13:93:89:9d:79:3b:59:be:45:5b:4f:7d:0b:e5:
                    bc:29:b1:3b:f9:5d:8d:8f:08:a2:42:e3:93:51:95:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1D:A0:D5:4B:F9:61:21:3D:F6:A8:AA:D5:9D:63:62:E4:38:A7:64
            X509v3 Authority Key Identifier:
                keyid:1B:89:C2:79:B8:B1:66:69:8D:2B:E4:86:73:EC:CC:2B:08:13:3E:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4nCebixZmmNK-SGc-zMKwgTPjk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/G4nCebixZmmNK-SGc-zMKwgTPjk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:bb:5f:03:c4:22:5b:db:84:e4:87:1f:54:ba:8b:cd:5f:
         d9:5d:42:a2:5f:b8:2e:fc:94:59:a6:38:68:f0:bb:62:d9:ec:
         ac:7c:3d:24:c0:17:c8:7b:99:75:d1:04:5d:0c:ad:cd:03:62:
         78:ce:e2:99:65:70:c9:0e:ba:53:68:7d:86:83:c1:da:90:7b:
         50:87:ca:bd:32:84:38:28:e7:33:cb:90:64:c6:b8:34:ad:4c:
         15:60:7b:47:20:b8:07:90:de:07:0b:d7:1e:07:93:1e:fa:97:
         62:cd:30:d9:33:1e:66:ed:05:a9:b5:ef:9b:f4:f2:92:dd:b9:
         67:2c:da:90:49:aa:ad:51:84:5f:da:49:fd:48:2b:72:ba:d6:
         01:4c:c7:18:e1:62:fe:78:b8:c2:03:d1:5e:26:a8:8a:b5:9e:
         3c:87:05:2c:c1:ce:85:62:2f:7b:8e:6f:e3:6f:1f:50:95:38:
         3a:ab:bc:23:c9:35:7c:3a:3c:f6:fc:8b:3c:39:54:5a:c0:53:
         75:df:12:e7:1f:e0:0c:4e:99:76:6e:25:1c:38:fa:43:1f:24:
         74:3f:da:5b:6a:f1:ae:aa:34:14:b3:c1:3d:00:66:c1:18:2a:
         d5:7e:4b:c9:75:76:c8:98:04:4b:ab:d8:f1:c1:47:0f:30:f6:
         d1:62:4a:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNFQjExMTAvBgNVBAUTKDFCODlDMjc5QjhCMTY2Njk4RDJCRTQ4NjczRUNDQzJC
MDgxMzNFMzkwHhcNMjYwNTIwMTU1NTQyWhcNMjYwNTI3MTU1NTQyWjAYMRYwFAYD
VQQDEw02YTBkZDk3ZS1iNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkjzOzzA/ZDoONQbrZp8jqGrw6N3FSkniPw7UlB88TIBec8ymsR1y3hQTay4u
jel12p4boJqDXQsKvXslBDZspG/ree4kRwQC03iGjaJl8rJm4rE7Ru7351kF8DUw
xMYL2rv/yCHjZzVP8wWT9jbgHtLMGOnLTXCo4obkY693H65T2N/jMJZZRXvfgwy3
TI0471EAeUaXlCCSl37Kk/Nc+zvNZFodOh18SlC3nWAPRGxAoV5jRJdkdjaOPE6f
NtHOx4Tohj9DBhXg31BEBLfQ6Bn1uIYeb73WFw/fdb8EN15gE5OJnXk7Wb5FW099
C+W8KbE7+V2NjwiiQuOTUZVeiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwdoNVL
+WEhPfaoqtWdY2LkOKdkMB8GA1UdIwQYMBaAFBuJwnm4sWZpjSvkhnPszCsIEz45
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4
QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFptbU5LLVNHYy16TUt3Z1RQ
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0bkNlYml4Wm1tTkstU0djLXpNS3dnVFBqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9HNG5DZWJpeFpt
bU5LLVNHYy16TUt3Z1RQamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnUy7XwPEIlvbhOSHH1S6i81f2V1Col+4LvyUWaY4aPC7YtnsrHw9JMAXyHuZ
ddEEXQytzQNieM7imWVwyQ66U2h9hoPB2pB7UIfKvTKEOCjnM8uQZMa4NK1MFWB7
RyC4B5DeBwvXHgeTHvqXYs0w2TMeZu0FqbXvm/Tykt25ZyzakEmqrVGEX9pJ/Ugr
crrWAUzHGOFi/ni4wgPRXiaoirWePIcFLMHOhWIve45v428fUJU4Oqu8I8k1fDo8
9vyLPDlUWsBTdd8S5x/gDE6Zdm4lHDj6Qx8kdD/aW2rxrqo0FLPBPQBmwRgq1X5L
yXV2yJgES6vY8cFHDzD20WJKNQ==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:09 2026 by rpki-client