Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
File:                     GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft (raw, json)
Hash identifier:          OoBhFuD5bNnnGNja2AzSAt6xubZzR9nzMlMHjemjjko=
Subject key identifier:   FA:19:31:10:DA:76:47:97:8D:2A:A2:AB:7C:5D:2D:B0:50:44:B5:26
Authority key identifier: 19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36
Certificate issuer:       /CN=A919400C/serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
Certificate serial:       06D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
Manifest number:          06C2
Signing time:             Tue 12 May 2026 22:25:53 +0000
Manifest this update:     Tue 12 May 2026 22:25:52 +0000
Manifest next update:     Tue 19 May 2026 22:25:52 +0000
Files and hashes:         1: GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl (hash: hk4l85Suv/s8kU1ByoBrqC4RLaK3efWUvXbZ0Hv7gfc=)
                          2: 3D83702E66CB11EFA2A66984C4F9AE02.roa (hash: 2TxmpvuIpNkd3N5wN3cHQbSswPH8I5ATGFcdaQOm/FU=)
                          3: B945FB7A386011F0A5422D16C4F9AE02.roa (hash: luRlkjknr5cyqJXtQcjerKPfeg9veut1Yjq2qhoOCvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl
                          rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750 (0x6d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919400C, serialNumber=195B267D6D153AF7D02B6BEB22CE1593D925B636
        Validity
            Not Before: May 12 22:25:52 2026 GMT
            Not After : May 19 22:25:52 2026 GMT
        Subject: CN=6a03a8f1-eb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:a3:92:ae:23:27:81:b2:39:83:0d:3c:8c:
                    dd:92:5f:57:d6:99:a0:c0:03:19:87:f0:ae:9b:26:
                    26:a4:33:69:1b:7a:15:fd:e5:ce:a6:ab:fb:e3:b2:
                    c1:33:ea:f3:d5:ab:c1:42:2e:c5:cd:54:5d:1a:f8:
                    9b:17:63:38:a2:10:59:b2:2b:75:91:c5:30:ef:11:
                    cd:1c:ba:f9:60:44:ec:a7:51:ba:64:d9:0e:e8:56:
                    84:e1:7d:20:f4:e9:9d:fa:92:8f:b5:7c:ec:c9:24:
                    83:b8:a1:ba:eb:67:56:ab:58:9b:1c:02:88:e1:45:
                    95:ab:8f:dc:68:29:e7:f1:3d:4d:a7:44:d2:79:a5:
                    32:a3:d9:4f:09:da:da:da:68:8d:b0:b5:81:ec:af:
                    d7:1a:9b:f3:f3:1e:5d:75:45:e8:58:43:6a:b7:62:
                    4e:b9:01:0f:2b:91:20:d2:05:1d:46:88:6c:3f:4e:
                    a0:c7:d1:34:e3:a7:fb:c9:30:44:83:30:3e:e0:3e:
                    99:d5:1c:8d:f5:53:94:46:55:0a:b0:27:68:de:03:
                    1f:40:2e:7b:9e:5f:80:4c:b6:22:15:30:66:29:20:
                    2f:6b:cd:65:30:54:4f:83:c8:c9:14:f1:98:81:3b:
                    87:72:21:f2:a0:a4:22:1d:d5:11:90:13:2d:07:e6:
                    59:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:19:31:10:DA:76:47:97:8D:2A:A2:AB:7C:5D:2D:B0:50:44:B5:26
            X509v3 Authority Key Identifier:
                keyid:19:5B:26:7D:6D:15:3A:F7:D0:2B:6B:EB:22:CE:15:93:D9:25:B6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GVsmfW0VOvfQK2vrIs4Vk9kltjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919400C/C3ECD968A67411EB8C43226FC4F9AE02/GVsmfW0VOvfQK2vrIs4Vk9kltjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b9:bf:28:5e:af:f2:38:05:14:f3:25:60:22:f1:b3:b0:62:
         22:aa:de:7d:e4:bf:02:69:8c:7d:fb:70:3c:69:d3:59:58:d2:
         36:48:07:c2:e0:60:00:c6:db:82:5e:04:16:2d:81:cb:45:d7:
         f9:d5:6c:4d:26:af:d2:0a:41:13:76:3c:a5:56:63:60:be:ab:
         f8:d7:55:ca:77:65:7f:31:b6:50:e1:90:30:44:15:54:4c:24:
         12:4e:5b:7e:e1:8d:16:e7:b8:1f:5b:11:51:df:0d:3a:4c:3e:
         8c:33:a3:1e:c6:4b:3e:12:de:62:18:28:d0:c6:7e:f2:89:cd:
         7d:f4:e3:39:16:62:e5:e7:64:4d:10:a6:f5:c1:65:be:0b:9e:
         1e:15:72:a9:1c:44:51:56:7b:44:d8:bf:1e:b3:40:86:9f:c8:
         ea:68:bb:9a:c5:f5:71:ba:97:39:28:76:cb:04:1a:ec:75:e0:
         b8:68:1c:69:0a:e0:04:d1:f0:b1:3e:a1:c1:9b:4e:9b:2e:01:
         69:69:2a:ce:7b:c1:bf:ff:ab:26:97:50:90:cf:13:74:7a:43:
         3f:db:28:58:db:ec:13:eb:42:7e:ef:25:a5:fc:c4:1c:fa:8e:
         df:6b:e2:2d:0d:c0:15:92:09:1f:ec:dc:e5:2a:02:65:77:bd:
         d2:2b:1d:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQwMEMxMTAvBgNVBAUTKDE5NUIyNjdENkQxNTNBRjdEMDJCNkJFQjIyQ0UxNTkz
RDkyNUI2MzYwHhcNMjYwNTEyMjIyNTUyWhcNMjYwNTE5MjIyNTUyWjAYMRYwFAYD
VQQDEw02YTAzYThmMS1lYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxHWjkq4jJ4GyOYMNPIzdkl9X1pmgwAMZh/CumyYmpDNpG3oV/eXOpqv747LB
M+rz1avBQi7FzVRdGvibF2M4ohBZsit1kcUw7xHNHLr5YETsp1G6ZNkO6FaE4X0g
9Omd+pKPtXzsySSDuKG662dWq1ibHAKI4UWVq4/caCnn8T1Np0TSeaUyo9lPCdra
2miNsLWB7K/XGpvz8x5ddUXoWENqt2JOuQEPK5Eg0gUdRohsP06gx9E046f7yTBE
gzA+4D6Z1RyN9VOURlUKsCdo3gMfQC57nl+ATLYiFTBmKSAva81lMFRPg8jJFPGY
gTuHciHyoKQiHdURkBMtB+ZZ4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPoZMRDa
dkeXjSqiq3xdLbBQRLUmMB8GA1UdIwQYMBaAFBlbJn1tFTr30Ctr6yLOFZPZJbY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDAwQy9DM0VDRDk2OEE2
NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92ZlFLMnZySXM0Vms5a2x0
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dWc21mVzBWT3ZmUUsydnJJczRWazlrbHRqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDAwQy9DM0VDRDk2OEE2NzQxMUVCOEM0MzIyNkZDNEY5QUUwMi9HVnNtZlcwVk92
ZlFLMnZySXM0Vms5a2x0alkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADbm/KF6v8jgFFPMlYCLxs7BiIqrefeS/AmmMfftwPGnTWVjSNkgHwuBgAMbb
gl4EFi2By0XX+dVsTSav0gpBE3Y8pVZjYL6r+NdVyndlfzG2UOGQMEQVVEwkEk5b
fuGNFue4H1sRUd8NOkw+jDOjHsZLPhLeYhgo0MZ+8onNffTjORZi5edkTRCm9cFl
vgueHhVyqRxEUVZ7RNi/HrNAhp/I6mi7msX1cbqXOSh2ywQa7HXguGgcaQrgBNHw
sT6hwZtOmy4BaWkqznvBv/+rJpdQkM8TdHpDP9soWNvsE+tCfu8lpfzEHPqO32vi
LQ3AFZIJH+zc5SoCZXe90isd4A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:34:32 2026 by rpki-client