Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
File:                     Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json)
Hash identifier:          iSDSNAeDWBGnwi4L66gHp1UAf5irlL5e8MmnQD09WYs=
Subject key identifier:   40:90:69:5F:98:D2:EB:C7:95:18:F6:0F:39:57:E7:FA:D5:B6:46:5A
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Certificate issuer:       /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
Manifest number:          0243
Signing time:             Wed 13 May 2026 02:33:06 +0000
Manifest this update:     Wed 13 May 2026 02:33:05 +0000
Manifest next update:     Wed 20 May 2026 02:33:05 +0000
Files and hashes:         1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: pszbEu2TK7sTYisKW/TzZr+XjbcEMhr4ebZ2HT7Y5y0=)
                          2: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: CsD2M4xYWmD+4KZHvogCG8jsC1NzwYJkcqvvaiFYMlM=)
                          3: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: 9lrxfUBWBmg3EvWvMM3CqOq7J9rwqvVHXsxONFDg0xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
                          rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
        Validity
            Not Before: May 13 02:33:05 2026 GMT
            Not After : May 20 02:33:05 2026 GMT
        Subject: CN=6a03e2e2-263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dd:3c:34:b5:42:55:cd:da:c5:fc:55:40:64:
                    af:da:2e:73:9d:29:3d:f9:89:97:aa:e3:92:28:9c:
                    04:b3:da:a1:c4:b4:19:1e:26:22:42:ed:91:b8:93:
                    63:bc:f3:5e:74:85:2b:9d:24:fd:38:6a:82:98:f2:
                    87:b7:b6:8b:58:1d:05:db:44:fe:cf:59:c9:3a:c9:
                    f7:17:9b:6e:a6:69:98:dc:d4:f6:c6:f6:b9:42:64:
                    ad:af:bb:dc:2c:43:31:d2:74:94:aa:b1:db:7e:f9:
                    21:29:34:2d:67:be:f3:f8:58:3a:d8:4e:e3:5f:8f:
                    2e:a1:d1:20:9e:15:26:b3:af:1d:b0:4e:6e:80:a1:
                    d8:66:2b:a7:5c:9a:2a:c0:4f:63:34:ed:7b:3f:9a:
                    fb:3d:4a:d6:19:ac:3b:8f:ce:4b:8c:c4:42:b1:dd:
                    39:d7:78:17:e2:1f:8a:67:5c:79:f8:a3:3c:96:8e:
                    dc:7f:e4:c3:f1:a9:8f:a5:23:e2:81:95:96:c7:ef:
                    80:8a:39:6c:1e:24:fb:e9:d3:07:80:42:1a:8e:da:
                    98:97:91:e3:32:8e:f1:bb:19:71:70:fd:b5:d5:93:
                    bc:5f:78:0a:ca:45:b2:f7:ad:88:52:c4:86:47:bf:
                    70:d9:ae:84:60:67:d3:1d:02:90:56:b4:cb:e2:75:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:90:69:5F:98:D2:EB:C7:95:18:F6:0F:39:57:E7:FA:D5:B6:46:5A
            X509v3 Authority Key Identifier:
                keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:47:9d:66:a6:11:48:d2:f8:74:14:2c:f7:aa:22:25:5f:bf:
         df:4d:0c:82:2c:9e:9e:b4:af:ef:01:f4:d5:4a:43:f1:14:95:
         ce:0d:3e:1a:7f:6f:44:c7:fc:52:c1:c4:ed:dc:e2:fe:eb:6e:
         37:58:7b:ff:4e:d4:9d:9d:80:4c:dd:61:4b:94:7d:0e:d1:42:
         81:b5:d6:ff:3b:49:80:56:8e:ce:8f:e6:e9:ac:92:b2:ad:45:
         75:7a:20:ff:6c:1d:74:2f:24:35:7b:5e:97:59:80:ad:73:ce:
         54:34:64:98:ee:ef:7e:e3:38:6d:4f:9b:bd:54:00:ab:98:15:
         32:60:e9:36:43:b4:e4:69:44:cc:34:a5:17:0d:10:e2:b6:5d:
         22:b9:a9:49:05:a7:48:62:fd:90:7a:79:04:17:52:32:78:0c:
         ab:5e:8b:6e:e1:ef:6c:fc:99:65:32:06:83:62:74:5e:a4:ff:
         45:6d:e1:b4:85:b6:41:00:9c:9d:67:bc:35:fa:18:25:a2:e4:
         54:30:b6:74:b1:26:b8:b5:93:fa:29:50:2e:81:81:ad:25:4f:
         9d:bb:e4:ac:07:9e:42:7c:43:01:b6:f5:6b:22:30:36:20:97:
         be:54:3b:5b:f0:04:b2:24:1e:64:07:1d:6d:38:3d:5c:81:bf:
         07:57:89:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw
REQ0OTMwQTQwHhcNMjYwNTEzMDIzMzA1WhcNMjYwNTIwMDIzMzA1WjAYMRYwFAYD
VQQDEw02YTAzZTJlMi0yNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvd08NLVCVc3axfxVQGSv2i5znSk9+YmXquOSKJwEs9qhxLQZHiYiQu2RuJNj
vPNedIUrnST9OGqCmPKHt7aLWB0F20T+z1nJOsn3F5tupmmY3NT2xva5QmStr7vc
LEMx0nSUqrHbfvkhKTQtZ77z+Fg62E7jX48uodEgnhUms68dsE5ugKHYZiunXJoq
wE9jNO17P5r7PUrWGaw7j85LjMRCsd0513gX4h+KZ1x5+KM8lo7cf+TD8amPpSPi
gZWWx++AijlsHiT76dMHgEIajtqYl5HjMo7xuxlxcP211ZO8X3gKykWy962IUsSG
R79w2a6EYGfTHQKQVrTL4nVG9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECQaV+Y
0uvHlRj2DzlX5/rVtkZaMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC
NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN
S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY
MUYzaDdjNWg0V0FOMUpNS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOEedZqYRSNL4dBQs96oiJV+/300MgiyenrSv7wH01UpD8RSVzg0+Gn9vRMf8
UsHE7dzi/utuN1h7/07UnZ2ATN1hS5R9DtFCgbXW/ztJgFaOzo/m6aySsq1FdXog
/2wddC8kNXtel1mArXPOVDRkmO7vfuM4bU+bvVQAq5gVMmDpNkO05GlEzDSlFw0Q
4rZdIrmpSQWnSGL9kHp5BBdSMngMq16LbuHvbPyZZTIGg2J0XqT/RW3htIW2QQCc
nWe8NfoYJaLkVDC2dLEmuLWT+ilQLoGBrSVPnbvkrAeeQnxDAbb1ayIwNiCXvlQ7
W/AEsiQeZAcdbTg9XIG/B1eJfw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:26:13 2026 by rpki-client