Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
File:                     GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft (raw, json)
Hash identifier:          K8W3+gmrSAiSU8mafQ+EPCrgOZNPGSK5Pbp94BxMx74=
Subject key identifier:   7B:49:62:BA:1B:B2:27:02:DE:14:D8:83:B2:3B:7B:40:48:9C:51:58
Authority key identifier: 1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56
Certificate issuer:       /CN=A914E91C/serialNumber=1A6123075694B82218AA2FC76F615B4025596156
Certificate serial:       0571
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
Manifest number:          056A
Signing time:             Sun 10 May 2026 23:22:57 +0000
Manifest this update:     Sun 10 May 2026 23:22:57 +0000
Manifest next update:     Sun 17 May 2026 23:22:57 +0000
Files and hashes:         1: GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl (hash: 3RiHA/gnvdvvYCZzE4lLiqSlCD1EBddGsUwvqTc6oM0=)
                          2: 9BC1C0762BD411EC81C16155C4F9AE02.roa (hash: 7+tRN51YIU3LN9W298oaXJsik4DwphEBzHaPI7fWysA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl
                          rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E91C, serialNumber=1A6123075694B82218AA2FC76F615B4025596156
        Validity
            Not Before: May 10 23:22:57 2026 GMT
            Not After : May 17 23:22:57 2026 GMT
        Subject: CN=6a011351-cdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:d3:8e:60:6c:7c:83:bb:25:15:61:89:13:
                    f1:96:6f:ab:40:5d:b3:38:3f:8f:27:7d:76:78:42:
                    fd:e7:1d:aa:42:d8:fe:89:8f:49:8b:37:b2:b6:e5:
                    90:42:0f:85:0c:28:0d:e2:11:08:1b:46:21:38:ac:
                    ec:a5:3e:1b:a4:d2:34:9b:c2:ef:dd:fe:8e:b4:49:
                    b1:45:a4:b1:d6:55:fb:54:64:a1:ee:78:ab:17:ce:
                    3a:ec:7c:6c:28:3b:5b:b1:f4:96:0a:54:59:30:fd:
                    1a:3c:db:9d:68:06:99:88:c9:5b:9c:72:a2:ef:7e:
                    e9:ed:9c:8a:b1:94:06:e4:0e:7b:1b:54:90:d8:06:
                    89:5b:f7:0c:dc:a2:55:4c:04:97:5f:b1:c7:ec:44:
                    73:f4:ee:45:39:53:02:da:82:45:f8:21:34:c8:eb:
                    de:02:8d:7d:95:1a:3a:0d:bd:c1:47:64:57:cb:04:
                    ac:f4:13:e1:64:31:28:e2:14:a5:02:59:0d:6e:93:
                    43:23:1c:6d:99:ac:25:96:c5:9d:3a:c1:33:4e:a9:
                    21:d1:0b:8b:4f:23:23:06:10:71:11:59:d1:fb:7f:
                    14:55:25:b1:c9:ec:ad:76:03:b4:2c:64:24:d0:4d:
                    6b:71:4c:8d:bf:8d:f5:c8:76:af:2b:53:97:f0:cd:
                    2f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:49:62:BA:1B:B2:27:02:DE:14:D8:83:B2:3B:7B:40:48:9C:51:58
            X509v3 Authority Key Identifier:
                keyid:1A:61:23:07:56:94:B8:22:18:AA:2F:C7:6F:61:5B:40:25:59:61:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E91C/BC263A8E2BD111ECADDFA311C4F9AE02/GmEjB1aUuCIYqi_Hb2FbQCVZYVY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:ee:54:bf:97:3d:24:62:e4:a4:2c:d2:dd:fe:e9:fb:27:
         bc:dd:54:80:bc:01:9f:dc:39:22:e4:48:bd:d9:e4:8d:86:46:
         bf:5a:0a:78:a7:2c:13:fc:ac:54:0d:e6:b9:e4:9c:8d:4d:93:
         36:e5:3a:6a:df:37:e1:54:e9:66:68:d3:82:7e:07:28:4e:d4:
         6a:5a:e4:c2:b6:8c:29:78:cf:cb:7e:0e:9a:cf:23:ee:d6:55:
         93:67:45:71:a1:d9:9b:b1:4f:df:27:48:fb:e3:cd:a7:ec:80:
         1c:dd:27:a8:75:1f:62:d0:f9:21:ed:5b:87:80:72:42:9f:02:
         53:14:43:6d:d3:de:0c:93:0f:6c:b5:b9:8e:d3:bc:f8:d4:a2:
         39:d0:e0:e0:cf:26:4c:5d:f2:75:ea:5f:90:b7:f8:7f:01:82:
         86:d3:c0:e9:19:20:72:52:42:f3:b4:fc:12:20:80:cb:d3:bd:
         14:c5:10:96:bc:b2:23:75:c9:80:c2:2e:e0:a6:f9:34:f3:e7:
         80:ec:e0:47:08:1b:00:50:8e:64:25:c0:bf:f7:f3:db:c3:12:
         5e:bc:bc:43:a8:0e:11:93:ef:68:70:5a:9a:60:e5:32:f4:4b:
         c0:cc:74:55:95:b2:76:de:00:39:1a:7e:84:a8:f8:67:af:ed:
         b9:56:a0:a0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU5MUMxMTAvBgNVBAUTKDFBNjEyMzA3NTY5NEI4MjIxOEFBMkZDNzZGNjE1QjQw
MjU1OTYxNTYwHhcNMjYwNTEwMjMyMjU3WhcNMjYwNTE3MjMyMjU3WjAYMRYwFAYD
VQQDEw02YTAxMTM1MS1jZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArKvTjmBsfIO7JRVhiRPxlm+rQF2zOD+PJ312eEL95x2qQtj+iY9JizeytuWQ
Qg+FDCgN4hEIG0YhOKzspT4bpNI0m8Lv3f6OtEmxRaSx1lX7VGSh7nirF8467Hxs
KDtbsfSWClRZMP0aPNudaAaZiMlbnHKi737p7ZyKsZQG5A57G1SQ2AaJW/cM3KJV
TASXX7HH7ERz9O5FOVMC2oJF+CE0yOveAo19lRo6Db3BR2RXywSs9BPhZDEo4hSl
AlkNbpNDIxxtmawllsWdOsEzTqkh0QuLTyMjBhBxEVnR+38UVSWxyeytdgO0LGQk
0E1rcUyNv431yHavK1OX8M0vOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHtJYrob
sicC3hTYg7I7e0BInFFYMB8GA1UdIwQYMBaAFBphIwdWlLgiGKovx29hW0AlWWFW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTkxQy9CQzI2M0E4RTJC
RDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVDSVlxaV9IYjJGYlFDVlpZ
VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dtRWpCMWFVdUNJWXFpX0hiMkZiUUNWWllWWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTkxQy9CQzI2M0E4RTJCRDExMUVDQURERkEzMTFDNEY5QUUwMi9HbUVqQjFhVXVD
SVlxaV9IYjJGYlFDVlpZVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU+TuVL+XPSRi5KQs0t3+6fsnvN1UgLwBn9w5IuRIvdnkjYZGv1oKeKcsE/ys
VA3mueScjU2TNuU6at834VTpZmjTgn4HKE7UalrkwraMKXjPy34Oms8j7tZVk2dF
caHZm7FP3ydI++PNp+yAHN0nqHUfYtD5Ie1bh4ByQp8CUxRDbdPeDJMPbLW5jtO8
+NSiOdDg4M8mTF3ydepfkLf4fwGChtPA6RkgclJC87T8EiCAy9O9FMUQlryyI3XJ
gMIu4Kb5NPPngOzgRwgbAFCOZCXAv/fz28MSXry8Q6gOEZPvaHBammDlMvRLwMx0
VZWydt4AORp+hKj4Z6/tuVagoA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:35 2026 by rpki-client