Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
File:                     gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json)
Hash identifier:          Fh8o/Uh6zm/nfkZ6KPRI0DsABXOknGsrQNHeVYxZ2PE=
Subject key identifier:   01:76:DA:32:E0:D1:9B:A6:6B:A8:61:51:B6:4D:6E:DF:E2:98:0A:38
Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F
Certificate issuer:       /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
Manifest number:          0257
Signing time:             Mon 11 May 2026 02:19:38 +0000
Manifest this update:     Mon 11 May 2026 02:19:38 +0000
Manifest next update:     Mon 18 May 2026 02:19:38 +0000
Files and hashes:         1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: /CeHopNjcRlepxnAoXkcX9rqP5J6Mlb6ZdhwCVkejRQ=)
                          2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: vZAj9NjXjOPeL5GQysAVibay7KYfqb17AZh26Rch2sk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl
                          rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F
        Validity
            Not Before: May 11 02:19:38 2026 GMT
            Not After : May 18 02:19:38 2026 GMT
        Subject: CN=6a013cba-b78d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:bc:51:32:27:d8:0e:42:87:fd:4f:5a:f9:41:
                    a3:25:d6:a0:79:37:7b:e7:53:33:13:bc:00:a8:b8:
                    d9:61:d0:f2:b5:e5:f0:06:ae:ba:eb:cb:93:bf:92:
                    be:e9:4b:50:fc:d7:27:d1:cc:05:1c:77:27:89:43:
                    d4:ce:29:b5:a5:57:57:39:10:7c:0a:94:bc:40:f2:
                    53:4b:74:af:78:07:85:62:85:03:04:24:10:55:a1:
                    96:c0:74:cb:f7:75:fc:6a:33:56:4c:b7:fb:8e:3f:
                    0e:6a:84:34:54:c0:d1:ed:5f:1d:c7:08:71:f0:20:
                    58:8d:7a:c7:3a:fb:bc:63:da:32:88:9a:75:a1:2a:
                    33:a8:51:90:85:a3:e5:02:63:13:9f:e5:a8:08:90:
                    ef:a6:50:2e:e6:49:a0:6d:8a:9e:5b:34:b9:d2:9a:
                    c1:40:9d:8d:a4:13:ea:6e:8b:6a:e4:26:22:72:ee:
                    17:c8:b6:80:bf:7c:1d:ac:ad:f7:98:32:fc:eb:23:
                    aa:90:89:c8:db:f2:08:45:37:76:d4:8c:15:26:38:
                    17:07:0a:f0:13:06:2b:5f:ca:a5:65:d1:8c:32:36:
                    1d:50:8c:30:51:57:46:9c:8d:89:fd:e7:6b:b1:80:
                    ab:ab:bf:57:cd:fa:76:21:4a:94:2a:e2:38:fe:b3:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:DA:32:E0:D1:9B:A6:6B:A8:61:51:B6:4D:6E:DF:E2:98:0A:38
            X509v3 Authority Key Identifier:
                keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:93:5d:4a:1d:56:32:5f:48:30:19:ba:39:c5:59:fd:c4:c6:
         a0:68:a0:b4:ec:c5:37:ff:d1:5b:26:ac:e4:d4:46:f0:78:43:
         f7:e7:65:f7:02:5d:eb:0a:27:fc:c3:d2:43:3b:4e:41:46:ec:
         c4:46:b8:02:f6:6c:99:e4:0f:40:25:79:fc:01:5c:a2:66:b2:
         d0:ed:47:c5:d1:12:b9:22:13:e7:7b:7d:5c:4d:b2:cb:47:15:
         e7:93:a3:e2:b8:81:20:95:d1:49:a0:df:c8:82:b5:47:f5:bd:
         2a:c3:07:da:36:73:be:81:cb:8e:4b:bb:80:b9:c0:6f:3a:ae:
         70:9e:a3:86:28:1d:81:7f:d0:78:c5:9c:39:76:70:8b:89:4d:
         cc:8e:93:d2:51:d9:0e:0b:73:ff:a7:1a:44:df:5c:ab:a9:6e:
         e2:5b:5a:f5:25:c9:08:94:3e:e8:b3:a4:ba:20:2f:15:6d:d8:
         ee:a9:8a:0c:11:53:da:8f:4d:95:50:62:55:f2:e8:48:33:d3:
         03:08:7a:05:87:3e:8a:22:3d:84:19:49:c3:3b:f4:a4:4e:90:
         d2:e5:f8:bb:3c:74:dd:cb:17:fe:9f:aa:aa:20:aa:0c:ab:c9:
         c0:c0:ac:cc:8d:82:de:b5:2b:37:74:11:a6:ff:29:82:56:54:
         2f:83:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:19:38 2026 by rpki-client