Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
File:                     gm447HHypIW0sk7-zoRjJQqEoLw.mft (raw, json)
Hash identifier:          YuhZjWkDvcQ5Vj4LurS6gzDNnxen4a293XLmXcwjV8A=
Subject key identifier:   36:4D:92:C9:BE:54:A0:9B:37:97:23:0C:25:20:BA:AF:B9:09:8A:A4
Authority key identifier: 82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC
Certificate issuer:       /CN=A915A0EE/serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
Certificate serial:       0228
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
Manifest number:          0224
Signing time:             Wed 13 May 2026 02:49:00 +0000
Manifest this update:     Wed 13 May 2026 02:49:00 +0000
Manifest next update:     Wed 20 May 2026 02:49:00 +0000
Files and hashes:         1: gm447HHypIW0sk7-zoRjJQqEoLw.crl (hash: gdVgbT2IWBtbRArAfG8nrNHIVBQC6hTyvJWmiEJDnTQ=)
                          2: 6A3BE658401B11F080319527C4F9AE02.roa (hash: G0vlI3Y4+8WgZsJeIBEokHzCEUdmWiGvtc5JLb9JKsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0EE, serialNumber=826E38EC71F2A485B4B24EFECE8463250A84A0BC
        Validity
            Not Before: May 13 02:49:00 2026 GMT
            Not After : May 20 02:49:00 2026 GMT
        Subject: CN=6a03e69c-b30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:bb:34:c2:53:70:e4:54:08:b9:77:70:b3:
                    e4:ac:eb:20:78:63:dd:f8:a6:13:cd:a4:6c:dd:4c:
                    d5:d5:1b:5d:18:bc:75:cd:ce:d1:05:d9:31:0e:d4:
                    a2:24:ec:dd:de:e2:e0:09:cf:ad:06:10:dd:ec:1e:
                    49:76:51:9e:95:d5:71:0a:e6:09:01:60:a1:04:5d:
                    83:6f:5e:eb:d1:83:69:d0:74:4d:28:43:57:e4:9f:
                    35:f6:4c:7d:09:99:87:f3:11:e3:4a:07:c0:97:fb:
                    27:2e:83:68:24:47:6b:da:cd:f1:e3:d0:69:96:76:
                    18:0f:ad:5e:24:dc:6b:4f:54:99:29:9d:b5:81:41:
                    7a:66:65:41:6c:91:e7:7a:c6:4d:18:d8:57:8f:56:
                    39:8c:97:aa:7e:07:70:60:e7:0d:e3:03:30:6e:ff:
                    ce:15:a5:32:a2:d1:fb:a7:95:92:6f:77:dc:bc:ee:
                    81:e6:8a:9d:a4:ee:64:4b:86:c4:22:06:55:9c:fa:
                    23:b0:3b:c9:41:46:ec:d6:13:2f:13:9a:43:c6:aa:
                    6a:ea:b4:43:e9:5b:1a:ef:31:c7:b0:f6:02:37:fa:
                    65:ee:d1:15:71:9c:35:3b:0f:d5:45:bd:52:d1:97:
                    48:0f:d1:55:cb:b0:7e:03:52:ae:e6:1c:6c:d9:dc:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4D:92:C9:BE:54:A0:9B:37:97:23:0C:25:20:BA:AF:B9:09:8A:A4
            X509v3 Authority Key Identifier:
                keyid:82:6E:38:EC:71:F2:A4:85:B4:B2:4E:FE:CE:84:63:25:0A:84:A0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gm447HHypIW0sk7-zoRjJQqEoLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/4BCC444409C011EEBE12583AC4F9AE02/gm447HHypIW0sk7-zoRjJQqEoLw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:48:ac:8b:fa:96:d6:fe:57:df:ef:e4:32:0d:e2:0c:71:c8:
         d7:70:9b:9e:3b:93:eb:39:e7:d3:08:86:79:c4:bb:a2:f0:29:
         2f:4d:d7:6d:b0:5e:fd:83:f0:5a:a1:ff:df:07:7e:93:17:31:
         dc:32:49:a4:1c:1d:5b:b2:f6:75:8f:94:83:d4:7c:4a:75:27:
         56:3e:cf:e9:87:13:06:53:c6:b7:cb:9d:4a:bc:ea:50:0e:d3:
         8e:c0:70:7f:fd:bb:a1:8d:20:36:be:31:17:9f:10:04:ae:d7:
         60:8d:1a:6a:61:62:29:d0:6f:ed:88:d0:d6:65:c9:43:f7:7f:
         51:52:e3:96:d6:0b:30:89:a5:7a:cd:ea:aa:59:67:10:12:e7:
         30:fa:02:80:ac:30:50:ae:f3:4b:7c:3b:57:6a:a2:cd:f3:af:
         bd:2a:16:4f:bf:f2:df:26:ca:9b:54:50:0a:c9:7a:1d:36:47:
         a2:07:30:5e:23:9a:c0:dc:fc:59:a7:c9:bd:fe:f3:75:a2:09:
         3a:45:a6:1d:84:88:18:c1:1e:e2:b0:9f:0f:39:e3:0d:ba:0c:
         b0:f3:28:62:e5:51:89:0f:72:4f:e0:11:7c:b7:5b:3b:40:c9:
         31:ab:bd:ca:17:b5:13:25:dc:f3:91:9b:01:a5:ce:c5:9e:e5:
         c8:cd:84:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:09 2026 by rpki-client