Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
File:                     G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json)
Hash identifier:          H8MoWWC6cJvgbgu03CyvZeclP/pWYN7HgOpVqws8ChY=
Subject key identifier:   CB:6C:0B:7C:53:64:C5:DE:99:6D:C0:D5:22:F6:16:8D:DE:A0:CC:B6
Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A
Certificate issuer:       /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
Certificate serial:       05BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
Manifest number:          05A9
Signing time:             Tue 12 May 2026 23:16:46 +0000
Manifest this update:     Tue 12 May 2026 23:16:46 +0000
Manifest next update:     Tue 19 May 2026 23:16:46 +0000
Files and hashes:         1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: m4quSGteKfiHrKrNeE2YIQuuT2MQMB5KOrY1N+HsZM8=)
                          2: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0=)
                          3: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl
                          rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A
        Validity
            Not Before: May 12 23:16:46 2026 GMT
            Not After : May 19 23:16:46 2026 GMT
        Subject: CN=6a03b4de-5c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:36:07:69:49:58:e0:02:5c:36:0d:6f:f5:6e:
                    c2:c2:08:df:a0:8f:b4:1c:44:7c:68:52:2d:11:2c:
                    ad:5d:21:a8:82:7d:ed:50:96:94:15:d9:02:b7:8a:
                    b5:34:ad:00:3b:1f:fb:fb:f8:e5:fe:b5:dd:29:0a:
                    b1:6e:ec:4e:4f:04:4c:2c:d5:e6:72:a5:d1:94:d6:
                    6c:3a:b6:05:27:eb:77:34:db:ef:6f:99:e6:98:dc:
                    6e:50:74:31:d2:a5:17:7d:06:2a:59:2f:5d:40:70:
                    e2:77:81:9c:36:28:7d:bd:d1:0c:a9:59:68:88:b9:
                    43:04:3f:de:8d:41:b4:42:cb:c8:94:0d:fe:1b:d9:
                    82:22:4c:26:7a:4a:ef:78:36:56:2d:fd:39:e0:12:
                    a7:20:56:cd:dc:8f:ae:f7:d8:0b:ef:37:a0:53:c7:
                    14:b6:97:8c:81:8e:5d:54:d1:14:5b:b2:15:a3:52:
                    f1:8d:ce:e4:c4:6c:22:61:0e:d9:bf:56:77:a9:5f:
                    09:51:cc:f9:81:a8:c5:5f:85:67:41:f1:48:6a:a1:
                    ce:94:b2:9c:e9:12:42:5c:39:0b:16:5e:4d:47:b1:
                    79:5f:e7:9f:a7:49:69:fa:6b:6f:8e:c5:7c:ae:54:
                    fa:58:5f:20:ff:58:a6:f4:85:c2:da:7a:40:e9:56:
                    a8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:0B:7C:53:64:C5:DE:99:6D:C0:D5:22:F6:16:8D:DE:A0:CC:B6
            X509v3 Authority Key Identifier:
                keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:5f:96:1f:fa:10:5d:f2:45:b3:5b:93:49:d0:d5:cc:a9:
         16:81:a5:71:8e:3f:c0:1d:0d:4b:62:bb:a9:37:31:0e:cd:fa:
         68:63:eb:6a:e7:dd:f1:fe:17:00:1d:7e:68:04:87:bf:de:f0:
         93:b6:34:6e:40:85:d7:4d:e2:3b:76:91:cd:23:18:f8:47:d9:
         3b:1c:bf:a1:11:85:a2:73:e5:30:a7:82:a5:56:a8:9e:f7:13:
         e3:2d:b2:8b:74:3c:10:f0:dd:39:da:b5:94:da:6a:5a:36:69:
         ea:c5:0a:02:08:f2:86:e8:89:a0:e4:90:32:de:0a:41:f1:3d:
         9d:a8:15:a1:c6:40:09:3d:57:ae:6d:bc:86:a6:4c:0f:98:a6:
         63:2a:b1:6d:62:c9:ce:82:54:db:a3:8c:30:4e:a2:6b:93:76:
         85:c5:67:64:8c:b9:5b:ae:03:44:c6:34:d0:f9:c0:83:74:db:
         a0:73:3e:74:d7:19:72:c4:ed:49:31:ba:a6:86:5c:25:6a:ce:
         ce:eb:57:be:aa:cb:b4:08:29:77:94:0f:4b:df:8e:c0:b6:2f:
         a5:08:aa:85:61:a3:7c:c7:1d:d6:60:4c:57:4e:48:36:b3:30:
         46:a3:dc:a6:3d:f8:52:4c:58:55:80:7e:80:14:ab:b2:71:ef:
         44:5d:a8:8c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw
NDdCMUI2M0EwHhcNMjYwNTEyMjMxNjQ2WhcNMjYwNTE5MjMxNjQ2WjAYMRYwFAYD
VQQDEw02YTAzYjRkZS01YzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjYHaUlY4AJcNg1v9W7CwgjfoI+0HER8aFItESytXSGogn3tUJaUFdkCt4q1
NK0AOx/7+/jl/rXdKQqxbuxOTwRMLNXmcqXRlNZsOrYFJ+t3NNvvb5nmmNxuUHQx
0qUXfQYqWS9dQHDid4GcNih9vdEMqVloiLlDBD/ejUG0QsvIlA3+G9mCIkwmekrv
eDZWLf054BKnIFbN3I+u99gL7zegU8cUtpeMgY5dVNEUW7IVo1Lxjc7kxGwiYQ7Z
v1Z3qV8JUcz5gajFX4VnQfFIaqHOlLKc6RJCXDkLFl5NR7F5X+efp0lp+mtvjsV8
rlT6WF8g/1im9IXC2npA6VaooQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMtsC3xT
ZMXemW3A1SL2Fo3eoMy2MB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1
MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0
am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z
cWkzRTRWQjVRVVFFZXh0am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYeZflh/6EF3yRbNbk0nQ1cypFoGlcY4/wB0NS2K7qTcxDs36aGPraufd8f4X
AB1+aASHv97wk7Y0bkCF103iO3aRzSMY+EfZOxy/oRGFonPlMKeCpVaonvcT4y2y
i3Q8EPDdOdq1lNpqWjZp6sUKAgjyhuiJoOSQMt4KQfE9nagVocZACT1Xrm28hqZM
D5imYyqxbWLJzoJU26OMME6ia5N2hcVnZIy5W64DRMY00PnAg3TboHM+dNcZcsTt
STG6poZcJWrOzutXvqrLtAgpd5QPS9+OwLYvpQiqhWGjfMcd1mBMV05INrMwRqPc
pj34UkxYVYB+gBSrsnHvRF2ojA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:01:29 2026 by rpki-client