Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
File:                     gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft (raw, json)
Hash identifier:          CVcuGK2fttErAfAwIDlSjVwpmFhj92JgHRRl+b89HZs=
Subject key identifier:   EE:7E:E5:17:31:26:A4:57:66:19:A5:A8:FC:CF:DA:AB:A2:4E:AE:B8
Authority key identifier: 83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3
Certificate issuer:       /CN=A917E4CB/serialNumber=832318230E258220A7CEE42E097D19AE997613A3
Certificate serial:       056D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
Manifest number:          0566
Signing time:             Tue 24 Mar 2026 23:02:02 +0000
Manifest this update:     Tue 24 Mar 2026 23:02:02 +0000
Manifest next update:     Tue 31 Mar 2026 23:02:02 +0000
Files and hashes:         1: gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl (hash: djAxeKvkxnSJ34kaz+/j/TkXEQOzzg5U5qvhMesVJhc=)
                          2: 81764BC4235511EC976AC464C4F9AE02.roa (hash: migaqbEcW6XD+P9JpAfJqP9HFbVfjDU1wFPykXbQFyI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl
                          rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E4CB, serialNumber=832318230E258220A7CEE42E097D19AE997613A3
        Validity
            Not Before: Mar 24 23:02:02 2026 GMT
            Not After : Mar 31 23:02:02 2026 GMT
        Subject: CN=69c317ea-318d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:da:5e:3f:7e:4a:7f:2c:e1:f5:25:98:59:
                    54:45:30:83:8d:7b:af:13:3e:5d:69:ab:14:40:36:
                    ba:18:1e:00:5e:00:92:c8:85:d8:95:cb:f0:8e:9b:
                    dc:83:9e:d5:bd:fe:48:a5:68:aa:fe:22:4e:c7:ff:
                    df:a5:a6:28:2d:03:3f:4a:20:83:59:e4:e6:e4:34:
                    d5:b2:38:47:c2:b5:e6:b4:c2:ce:98:5e:54:0e:8f:
                    85:f4:48:8b:0f:5d:e3:ca:d2:64:ab:7d:63:86:7c:
                    ec:aa:82:a4:c0:67:07:d1:dd:d0:6a:ee:93:ab:ad:
                    34:5e:c6:4e:03:ad:d6:49:c2:d3:46:a8:cf:e3:69:
                    77:fa:9c:5e:9c:bd:f8:ba:2c:97:df:d5:67:e5:0d:
                    f5:ee:91:7c:5a:5a:f8:82:d4:76:d5:b3:f5:1f:49:
                    03:81:65:da:87:8d:94:6b:6b:27:cf:2d:bd:b9:aa:
                    d6:36:b7:13:c1:b1:58:a6:6f:27:13:c9:58:20:ba:
                    f6:07:d0:43:66:aa:61:32:32:9b:fd:a5:0b:88:11:
                    28:64:ea:40:e8:84:24:1d:25:7f:21:d7:32:5a:76:
                    22:77:01:12:a2:88:96:d6:96:a7:fd:8f:3f:83:55:
                    05:52:06:f8:5b:a4:5d:97:5b:03:61:47:71:f1:55:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:E5:17:31:26:A4:57:66:19:A5:A8:FC:CF:DA:AB:A2:4E:AE:B8
            X509v3 Authority Key Identifier:
                keyid:83:23:18:23:0E:25:82:20:A7:CE:E4:2E:09:7D:19:AE:99:76:13:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E4CB/AC510912235311ECBC6BF063C4F9AE02/gyMYIw4lgiCnzuQuCX0Zrpl2E6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f7:1f:3e:9c:39:a5:0f:4b:ea:bf:01:05:59:a1:96:54:2b:
         2d:7a:0e:c3:7e:ba:45:57:c2:ad:8b:e7:88:f4:ea:c1:32:40:
         54:dc:21:b0:33:63:d4:b1:a4:80:c1:62:9d:30:91:dd:90:39:
         69:35:13:d9:96:c8:c7:38:0e:58:52:e5:ae:dd:c5:b9:0c:bb:
         6c:ba:3e:9a:b9:62:5e:4b:5d:dd:a6:3e:25:01:d7:53:ce:86:
         9b:09:a3:7d:68:40:a4:bf:4d:21:97:0c:b4:eb:e0:f2:7d:e3:
         57:1e:e2:2f:b1:2d:a4:d2:31:99:fb:9c:f3:ad:ba:1f:46:3e:
         32:92:b0:7f:43:3c:72:37:16:d2:61:73:4b:ef:7c:a0:fa:42:
         e7:70:a2:4e:14:5b:c6:8c:25:f2:7a:5f:99:e5:61:eb:1e:8a:
         a4:a6:06:45:6a:4e:63:83:f7:04:3f:e8:1a:97:c9:5a:21:ba:
         31:44:2c:8b:b6:93:f0:e2:c1:91:55:b8:fc:f5:9f:5a:69:39:
         02:3b:03:f3:4c:1b:5e:e6:40:58:36:ce:e5:c3:11:3c:ee:37:
         bf:f7:55:8e:34:69:cc:88:c2:37:11:2b:c7:e7:1a:b2:d7:bd:
         d3:61:23:15:91:c1:80:23:76:e1:57:8e:ee:45:78:c7:3f:c2:
         5c:ad:65:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U0Q0IxMTAvBgNVBAUTKDgzMjMxODIzMEUyNTgyMjBBN0NFRTQyRTA5N0QxOUFF
OTk3NjEzQTMwHhcNMjYwMzI0MjMwMjAyWhcNMjYwMzMxMjMwMjAyWjAYMRYwFAYD
VQQDEw02OWMzMTdlYS0zMThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ZzaXj9+Sn8s4fUlmFlURTCDjXuvEz5daasUQDa6GB4AXgCSyIXYlcvwjpvc
g57Vvf5IpWiq/iJOx//fpaYoLQM/SiCDWeTm5DTVsjhHwrXmtMLOmF5UDo+F9EiL
D13jytJkq31jhnzsqoKkwGcH0d3Qau6Tq600XsZOA63WScLTRqjP42l3+pxenL34
uiyX39Vn5Q317pF8Wlr4gtR21bP1H0kDgWXah42Ua2snzy29uarWNrcTwbFYpm8n
E8lYILr2B9BDZqphMjKb/aULiBEoZOpA6IQkHSV/IdcyWnYidwESooiW1pan/Y8/
g1UFUgb4W6Rdl1sDYUdx8VX/kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5+5Rcx
JqRXZhmlqPzP2quiTq64MB8GA1UdIwQYMBaAFIMjGCMOJYIgp87kLgl9Ga6ZdhOj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTRDQi9BQzUxMDkxMjIz
NTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdpQ256dVF1Q1gwWnJwbDJF
Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d5TVlJdzRsZ2lDbnp1UXVDWDBacnBsMkU2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTRDQi9BQzUxMDkxMjIzNTMxMUVDQkM2QkYwNjNDNEY5QUUwMi9neU1ZSXc0bGdp
Q256dVF1Q1gwWnJwbDJFNk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZfcfPpw5pQ9L6r8BBVmhllQrLXoOw366RVfCrYvniPTqwTJAVNwhsDNj1LGk
gMFinTCR3ZA5aTUT2ZbIxzgOWFLlrt3FuQy7bLo+mrliXktd3aY+JQHXU86Gmwmj
fWhApL9NIZcMtOvg8n3jVx7iL7EtpNIxmfuc8626H0Y+MpKwf0M8cjcW0mFzS+98
oPpC53CiThRbxowl8npfmeVh6x6KpKYGRWpOY4P3BD/oGpfJWiG6MUQsi7aT8OLB
kVW4/PWfWmk5AjsD80wbXuZAWDbO5cMRPO43v/dVjjRpzIjCNxErx+caste902Ej
FZHBgCN24VeO7kV4xz/CXK1lOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:05 2026 by rpki-client