Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
File:                     GiOYaENWXf_IAPgP8pa6sa03FOw.mft (raw, json)
Hash identifier:          +Ap2nhmeqfuG9HxgwPvLUbkpjcH10AoFOsGSEzoNo3Y=
Subject key identifier:   F0:FC:3A:29:13:5B:2A:AB:C2:E6:B2:EB:55:9E:7B:47:53:1C:E1:61
Authority key identifier: 1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC
Certificate issuer:       /CN=A911F55D/serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
Certificate serial:       0412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
Manifest number:          0404
Signing time:             Mon 11 May 2026 00:29:26 +0000
Manifest this update:     Mon 11 May 2026 00:29:26 +0000
Manifest next update:     Mon 18 May 2026 00:29:26 +0000
Files and hashes:         1: GiOYaENWXf_IAPgP8pa6sa03FOw.crl (hash: 2eJWSfZQip7RezjfU1YkTRKmkdKNIRXwjsYvYpmWqeU=)
                          2: 96C26F3EB7AD11ECA2E94A7EC4F9AE02.roa (hash: IasGAzFc+l1gsAHfpGxVMa7FoIjlAPF1GzUpALF/028=)
                          3: 977ED926B7AD11ECA2E94A7EC4F9AE02.roa (hash: OdmIKnh99XTg8Hh9/TQirH8XV5FGfwwJr9IPq/Zw7no=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl
                          rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:29:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F55D, serialNumber=1A23986843565DFFC800F80FF296BAB1AD3714EC
        Validity
            Not Before: May 11 00:29:26 2026 GMT
            Not After : May 18 00:29:26 2026 GMT
        Subject: CN=6a0122e6-407d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:7b:46:5e:65:76:3a:ce:0a:7c:0e:84:70:
                    64:1a:58:a9:2d:bf:72:db:d0:c0:c8:b8:d4:83:81:
                    31:aa:68:fe:af:0e:2e:25:2b:7c:c6:8a:63:43:11:
                    75:13:2a:f8:b9:94:62:51:84:be:dd:08:b9:63:6f:
                    2c:69:fe:12:a7:81:89:ec:1c:75:27:1e:e1:54:9c:
                    c3:cb:56:95:d1:98:3f:12:8c:d4:22:84:7f:07:98:
                    6a:4f:cf:34:b1:55:f7:1d:50:db:4a:bc:bd:84:cc:
                    f6:2e:ca:b8:95:d4:73:a1:2f:06:c4:4e:d0:31:1b:
                    1b:09:f5:87:6e:f9:fc:f3:9c:06:4a:9d:df:35:1b:
                    a6:dc:04:af:b7:06:f4:39:49:ed:4d:4f:04:6a:01:
                    cc:a8:11:f7:d3:e7:e1:da:fd:2d:1e:0e:00:64:ac:
                    62:fa:d8:46:7f:24:58:18:e7:b5:f2:98:9c:d3:58:
                    dc:60:b3:36:29:fb:b9:49:41:e3:f3:6f:ec:b6:5a:
                    fe:fa:32:3b:a9:ca:f4:b7:a3:7b:f3:9e:93:54:46:
                    b0:1f:cf:76:58:06:da:58:9e:85:d9:fe:a9:d0:34:
                    f0:f4:2f:09:6e:44:7e:7b:d8:33:02:6d:4a:32:48:
                    a1:27:29:1e:64:b4:5c:79:45:e8:90:50:bf:20:fe:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FC:3A:29:13:5B:2A:AB:C2:E6:B2:EB:55:9E:7B:47:53:1C:E1:61
            X509v3 Authority Key Identifier:
                keyid:1A:23:98:68:43:56:5D:FF:C8:00:F8:0F:F2:96:BA:B1:AD:37:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GiOYaENWXf_IAPgP8pa6sa03FOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F55D/40E43B80B7AB11EC9E55317DC4F9AE02/GiOYaENWXf_IAPgP8pa6sa03FOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b7:a0:64:0a:bf:a4:a0:f9:6a:82:77:9f:39:6e:21:28:06:
         00:0f:25:e3:3a:af:e0:6c:9b:04:a1:1e:34:af:fa:e2:46:57:
         f9:8c:75:81:b6:e9:cd:f1:b0:61:40:d2:3f:52:ea:ae:e2:9e:
         de:11:ee:ff:96:a5:19:b8:56:25:41:87:ed:dd:09:63:d0:8f:
         76:5b:0e:c1:8f:ce:88:f7:10:4a:d6:96:c4:d9:b3:0e:9a:31:
         bb:ab:d5:5e:a7:4e:81:d4:f5:50:10:45:5a:3f:70:03:1c:91:
         c9:4a:10:18:21:36:e7:9d:f3:79:15:29:34:7c:94:62:69:5a:
         cf:88:c7:3b:fd:47:87:a0:8f:4a:a5:e8:1b:4b:e6:a0:81:98:
         fe:13:75:d9:ce:45:43:b0:5e:a2:a6:40:af:ad:5f:e3:35:03:
         04:e2:67:c0:c8:1f:f4:a5:fd:ca:17:ac:9c:66:5e:13:fd:d6:
         52:a6:6b:bb:95:86:07:57:6b:1e:cd:63:84:40:e1:46:41:e3:
         ae:e4:f6:75:d0:9d:53:03:56:59:e3:59:3e:13:fc:16:27:52:
         22:88:7d:7f:fc:21:8c:0b:bb:47:2e:b3:59:9c:36:7b:82:8c:
         d4:c7:2b:f5:09:d5:2c:8a:25:ed:19:48:39:99:72:b2:c4:91:
         7b:00:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:43 2026 by rpki-client