Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
File:                     mgZOprZttN4gyTzAQbhaFwbIBnI.mft (raw, json)
Hash identifier:          OPmFY/kUrilmnPacd1/xzWBnSs8UW/RRMPAGo5OGGRs=
Subject key identifier:   AF:DC:A5:42:2A:EE:CF:5F:42:10:BF:0B:CB:F6:4E:98:F3:17:9C:B7
Authority key identifier: 9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72
Certificate issuer:       /CN=A913A5BD/serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
Certificate serial:       0313
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
Manifest number:          0308
Signing time:             Wed 13 May 2026 01:21:56 +0000
Manifest this update:     Wed 13 May 2026 01:21:55 +0000
Manifest next update:     Wed 20 May 2026 01:21:55 +0000
Files and hashes:         1: mgZOprZttN4gyTzAQbhaFwbIBnI.crl (hash: ttsegMkoh7WJhwV5ZNQ/ytQOpuhjvdw0XNvfqyT8AEQ=)
                          2: C6B3DBFE1CF911EDBAE62F45C4F9AE02.roa (hash: HIwqlmntoeFwo+S7UDebJJRPpqNaEv4Pryk7jDC+0qM=)
                          3: E79D93681C1F11F1B2DF50D0313D8C67.roa (hash: W4I4DorhQtZcnS22ft48DnGQCDVeftj54k6lXf7w3f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl
                          rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A5BD, serialNumber=9A064EA6B66DB4DE20C93CC041B85A1706C80672
        Validity
            Not Before: May 13 01:21:55 2026 GMT
            Not After : May 20 01:21:55 2026 GMT
        Subject: CN=6a03d234-ed3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:d0:b5:ab:25:97:d0:c0:81:71:be:8f:ed:
                    25:6f:f5:28:04:4f:47:f3:99:1d:7c:b9:0d:25:92:
                    81:ce:1d:a9:19:80:bd:61:cd:f9:5e:8a:15:c6:fa:
                    1b:23:71:1e:cc:60:20:cf:c8:a9:06:f4:18:27:d8:
                    c2:38:ae:95:56:51:21:bd:38:08:84:59:ad:29:68:
                    73:62:f7:30:ea:ee:f5:dc:d2:dc:f6:d2:2d:ed:ad:
                    32:e8:10:f4:32:64:eb:68:5a:67:48:c9:46:df:09:
                    e9:af:33:c1:30:7a:7c:74:a9:e6:6d:8e:7e:e7:0e:
                    fa:58:70:fd:9a:fa:78:21:03:6f:33:d5:af:34:5a:
                    df:d0:93:c9:fb:97:6b:05:55:5c:3a:57:b0:fb:6b:
                    5f:ee:c5:80:44:07:34:57:39:01:a9:85:5e:4c:f4:
                    dc:59:53:71:28:14:09:9c:db:ee:d6:81:c6:09:82:
                    34:c6:a4:bb:b4:b8:00:82:76:0b:40:0b:d8:25:90:
                    70:6f:fd:5e:a0:3d:d9:f8:b4:2e:a6:ff:16:a5:e8:
                    4b:f6:04:eb:95:9c:a6:ee:7d:8c:4a:2a:22:86:d6:
                    f5:d8:ad:d6:04:5f:26:ae:5b:42:71:53:a4:22:a9:
                    ff:e0:fc:9f:a2:92:89:e9:d5:02:f8:ee:8b:2d:41:
                    65:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DC:A5:42:2A:EE:CF:5F:42:10:BF:0B:CB:F6:4E:98:F3:17:9C:B7
            X509v3 Authority Key Identifier:
                keyid:9A:06:4E:A6:B6:6D:B4:DE:20:C9:3C:C0:41:B8:5A:17:06:C8:06:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mgZOprZttN4gyTzAQbhaFwbIBnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5BD/54EEF5141CF711EDA00FD343C4F9AE02/mgZOprZttN4gyTzAQbhaFwbIBnI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:90:81:df:2f:db:74:10:4d:df:0b:9f:56:05:6c:94:38:
         b3:7c:25:db:66:19:8b:6d:e3:9c:cd:d4:42:f5:8e:62:d0:43:
         30:e8:63:dd:87:40:32:6c:80:09:33:b2:b6:fa:e6:04:46:71:
         f0:cc:7b:c7:5f:9e:c4:2f:94:a4:5f:ad:59:f3:cc:49:1f:56:
         23:7c:26:72:11:7e:5a:1a:67:00:fa:f9:b0:37:a5:c4:5b:db:
         8e:96:f6:c3:d0:93:e0:ad:dd:92:93:0e:9b:37:c0:26:bf:25:
         ec:4f:01:f5:05:1d:24:27:b0:6a:69:6c:31:5d:3f:07:93:f2:
         1d:56:eb:ea:d7:94:a8:33:24:a4:17:1f:ed:21:8b:67:51:a5:
         37:e6:64:cd:0c:cf:45:2a:91:6e:ed:43:ea:81:26:15:96:45:
         18:cb:f6:57:c4:38:50:cd:df:38:68:04:fc:50:49:ea:db:e9:
         27:01:6e:6c:12:5e:2c:ff:02:08:9e:04:bc:f4:4e:d9:b8:4f:
         34:68:5c:a3:15:55:67:06:ce:fa:8e:f7:ec:c2:00:42:2d:46:
         8e:6b:6b:af:b1:52:68:c9:b4:f7:1a:2d:f8:e1:c6:3d:e1:75:
         69:0f:10:79:e3:0b:61:e9:ab:4f:25:4e:20:f6:d3:23:82:74:
         d9:d8:25:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E1QkQxMTAvBgNVBAUTKDlBMDY0RUE2QjY2REI0REUyMEM5M0NDMDQxQjg1QTE3
MDZDODA2NzIwHhcNMjYwNTEzMDEyMTU1WhcNMjYwNTIwMDEyMTU1WjAYMRYwFAYD
VQQDEw02YTAzZDIzNC1lZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtofQtasll9DAgXG+j+0lb/UoBE9H85kdfLkNJZKBzh2pGYC9Yc35XooVxvob
I3EezGAgz8ipBvQYJ9jCOK6VVlEhvTgIhFmtKWhzYvcw6u713NLc9tIt7a0y6BD0
MmTraFpnSMlG3wnprzPBMHp8dKnmbY5+5w76WHD9mvp4IQNvM9WvNFrf0JPJ+5dr
BVVcOlew+2tf7sWARAc0VzkBqYVeTPTcWVNxKBQJnNvu1oHGCYI0xqS7tLgAgnYL
QAvYJZBwb/1eoD3Z+LQupv8WpehL9gTrlZym7n2MSioihtb12K3WBF8mrltCcVOk
Iqn/4PyfopKJ6dUC+O6LLUFlwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/cpUIq
7s9fQhC/C8v2TpjzF5y3MB8GA1UdIwQYMBaAFJoGTqa2bbTeIMk8wEG4WhcGyAZy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTVCRC81NEVFRjUxNDFD
RjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRONGd5VHpBUWJoYUZ3YklC
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21nWk9wclp0dE40Z3lUekFRYmhhRndiSUJuSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTVCRC81NEVFRjUxNDFDRjcxMUVEQTAwRkQzNDNDNEY5QUUwMi9tZ1pPcHJadHRO
NGd5VHpBUWJoYUZ3YklCbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUL2Qgd8v23QQTd8Ln1YFbJQ4s3wl22YZi23jnM3UQvWOYtBDMOhj3YdAMmyA
CTOytvrmBEZx8Mx7x1+exC+UpF+tWfPMSR9WI3wmchF+WhpnAPr5sDelxFvbjpb2
w9CT4K3dkpMOmzfAJr8l7E8B9QUdJCewamlsMV0/B5PyHVbr6teUqDMkpBcf7SGL
Z1GlN+ZkzQzPRSqRbu1D6oEmFZZFGMv2V8Q4UM3fOGgE/FBJ6tvpJwFubBJeLP8C
CJ4EvPRO2bhPNGhcoxVVZwbO+o737MIAQi1Gjmtrr7FSaMm09xot+OHGPeF1aQ8Q
eeMLYemrTyVOIPbTI4J02dglVA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:38:05 2026 by rpki-client