Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
File:                     gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft (raw, json)
Hash identifier:          5ch4DxK8KJN2G9d0MwFWyouG0G/AP8zuikq1jkbloH4=
Subject key identifier:   71:F1:5F:F0:D5:11:06:3E:69:60:7A:0D:81:B7:86:A8:F0:8B:F8:0F
Authority key identifier: 81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74
Certificate issuer:       /CN=A914E4E2/serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
Manifest number:          51
Signing time:             Wed 13 May 2026 08:25:42 +0000
Manifest this update:     Wed 13 May 2026 08:25:41 +0000
Manifest next update:     Wed 20 May 2026 08:25:41 +0000
Files and hashes:         1: gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl (hash: KlFLpCwYXDUZz76s0wilCGK6/xhGteCdWZH7RGZ9olo=)
                          2: 6F81A4F8E64811F09CAB54BE376F56BC.roa (hash: kTGqoANe0FuZnU39X94Ie/hbapSgOp3eh2oaDxbXHwE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=812FF0DE1C3441463CC95CA88423BE5A10ADB174
        Validity
            Not Before: May 13 08:25:41 2026 GMT
            Not After : May 20 08:25:41 2026 GMT
        Subject: CN=6a043586-64e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:51:46:6e:57:f2:e7:18:ee:36:fb:a3:a5:
                    32:f9:9f:a8:83:75:ea:f6:f7:9d:b1:0a:b6:11:12:
                    16:fc:99:35:51:89:e8:87:ac:21:63:33:fa:28:64:
                    0c:fb:63:4b:3d:8b:47:fc:fa:66:a2:c5:6a:12:eb:
                    d2:e6:d4:c4:27:19:28:bb:6a:1e:22:16:21:ef:42:
                    ef:68:6d:76:ad:a6:b7:ac:02:1f:d2:9a:4d:df:31:
                    25:11:a9:74:73:cc:8a:de:1b:37:c3:d9:7f:54:40:
                    9e:81:84:4c:46:e9:99:3f:1f:d8:f9:69:09:e4:a1:
                    dc:56:90:ab:1c:c5:d3:0b:8b:1e:86:fe:16:f1:fc:
                    37:bf:46:fb:93:4b:f9:c6:31:ee:c5:f8:63:5b:dd:
                    92:29:dd:e1:0a:16:c2:5a:74:f7:25:08:8c:9c:1e:
                    c4:a5:e9:68:4f:f4:b5:ed:9f:82:d3:b2:0a:86:6e:
                    65:10:f1:e6:c5:37:7e:8c:3e:64:7c:ce:89:cf:bb:
                    f9:79:12:b8:40:ca:96:bd:b1:11:27:48:aa:c2:1a:
                    03:e2:71:d5:fa:ab:24:fb:59:a2:08:9c:12:16:c2:
                    27:2d:ad:e7:a2:7f:9f:4d:d9:1d:da:39:f2:c5:fd:
                    b3:e8:4f:5d:b6:09:ff:8a:e6:34:4c:06:1c:fc:83:
                    74:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F1:5F:F0:D5:11:06:3E:69:60:7A:0D:81:B7:86:A8:F0:8B:F8:0F
            X509v3 Authority Key Identifier:
                keyid:81:2F:F0:DE:1C:34:41:46:3C:C9:5C:A8:84:23:BE:5A:10:AD:B1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gS_w3hw0QUY8yVyohCO-WhCtsXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/41CE9DEEDAFA11F09AF616207CD3641D/gS_w3hw0QUY8yVyohCO-WhCtsXQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:81:9e:7f:88:9e:e5:71:f5:ee:a7:61:dc:f7:81:53:43:
         bd:de:d9:ca:30:7f:28:ad:07:3b:09:38:6f:a7:0b:11:23:21:
         98:aa:f0:ec:18:44:94:59:ee:11:d0:8a:48:d6:2f:9c:95:63:
         15:6c:95:9f:df:b8:da:40:ec:0b:be:59:ba:b2:ce:ed:12:57:
         78:4b:a2:ac:57:75:91:06:33:ba:83:e9:af:83:66:2a:48:e1:
         44:91:b2:f6:86:02:0e:0f:c3:b3:88:3d:ff:e9:be:4a:df:ba:
         99:a0:e3:aa:b5:69:6b:bc:86:ed:43:af:1f:1b:55:ad:60:1d:
         6d:a9:01:d2:b5:61:18:d6:eb:78:ea:01:30:e3:55:7e:aa:eb:
         7e:e9:80:7e:ce:23:f8:e9:8d:1c:60:0e:24:0f:be:b5:ca:c2:
         87:35:75:30:94:1f:fe:25:8c:69:60:8c:dd:f1:66:9e:5a:02:
         b9:44:64:c9:15:b9:9a:bb:b7:d9:a8:e3:25:1e:2d:af:9c:bc:
         1d:9e:e7:9f:90:20:5b:51:64:e8:2b:ca:08:50:2d:48:47:ac:
         80:b4:82:7c:d3:7b:8a:ea:ef:23:51:9d:62:57:c6:bb:97:64:
         78:bb:7f:09:10:7e:1a:94:53:ee:c7:43:0d:60:08:d0:f6:07:
         20:ef:b6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:08:41 2026 by rpki-client