Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File:                     GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier:          qCA3eOQi8zVus869O/PETuCZMdzISQUSUy0zoDYcLd8=
Subject key identifier:   F8:56:15:E1:61:2C:EE:B6:64:AC:CA:49:25:03:BF:F4:71:B1:AA:E7
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       04FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number:          04F6
Signing time:             Tue 12 May 2026 23:49:27 +0000
Manifest this update:     Tue 12 May 2026 23:49:26 +0000
Manifest next update:     Tue 19 May 2026 23:49:26 +0000
Files and hashes:         1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: MtZaQUi+ctXgOIY+kaduylJD+GN0UZQHMCqEl/kcp7Y=)
                          2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: GqrG1fpjl/FS6/QcFeouUYo3Nekrspl6hyOuNMZABaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: May 12 23:49:26 2026 GMT
            Not After : May 19 23:49:26 2026 GMT
        Subject: CN=6a03bc87-2d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:8a:94:f0:fd:ba:f7:7b:8f:3f:c8:ea:1b:
                    f9:ea:de:37:4d:57:1d:e6:9a:79:2b:a3:37:24:b5:
                    85:b3:72:f3:38:a8:a6:21:a4:30:0c:ca:6b:df:ff:
                    33:39:d2:80:43:af:34:fe:eb:99:9d:7a:30:fb:da:
                    aa:cd:86:bf:14:33:9c:6a:90:60:77:95:9f:de:66:
                    75:5f:a8:87:cf:88:b5:03:dc:85:41:5b:39:dc:3b:
                    4e:bb:ec:86:97:67:1e:be:f2:c6:41:1d:e9:ac:21:
                    17:6e:d2:3d:bf:bd:40:6b:a9:de:7d:3c:0a:f4:50:
                    05:d8:da:07:ba:37:04:93:92:48:66:c8:ce:c2:24:
                    54:7a:02:6b:34:a8:a0:bc:9e:28:ec:e3:01:66:8b:
                    29:24:88:da:0a:cc:ba:ed:91:9d:75:93:22:02:11:
                    9f:57:57:da:86:5b:f8:1f:1f:0e:58:36:b5:43:ec:
                    1f:60:b8:bb:42:57:4f:02:9b:7b:2d:80:08:58:4f:
                    e9:f1:38:65:d3:b1:39:ce:63:10:68:f7:1e:ff:cf:
                    7f:bf:28:34:98:1b:73:d6:c4:6f:69:3e:b7:ad:90:
                    0e:ef:20:7f:35:d4:4f:01:07:28:9d:dd:a3:04:87:
                    38:27:7e:29:5d:b1:61:38:89:2b:61:37:7a:49:de:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:15:E1:61:2C:EE:B6:64:AC:CA:49:25:03:BF:F4:71:B1:AA:E7
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4d:8f:50:67:07:cc:2e:5c:1e:ee:e7:15:7e:55:14:de:56:
         fd:af:cd:84:d3:95:a8:49:36:2e:4d:4d:e5:d5:5d:6a:a3:b8:
         50:29:3c:35:2e:05:df:f2:e3:86:2c:92:85:93:d9:07:4f:8b:
         c0:cf:0f:06:87:ab:1d:bc:6f:ce:aa:bb:fd:e1:2b:21:26:49:
         44:13:9f:3d:b0:28:21:09:2d:17:7e:7f:21:3d:fd:45:22:13:
         b5:f5:58:70:bf:d2:1e:7f:23:0b:13:97:6c:66:52:3d:c6:1c:
         9d:c3:e2:4d:a1:e5:fd:c6:6b:2f:ac:a6:d9:70:1b:87:a1:86:
         33:6c:44:b8:26:0c:11:a4:90:8c:05:92:59:80:35:54:9b:65:
         82:98:7c:38:fc:33:80:f5:c3:a0:20:e5:c8:15:8b:56:b0:e7:
         19:51:d4:24:74:78:6c:00:e6:2f:00:0a:aa:a2:a0:c1:26:09:
         b0:f5:f0:3d:d5:bf:03:62:cc:bf:30:55:e1:94:57:a2:59:f0:
         40:22:24:cb:96:44:d6:8f:5d:f9:40:39:62:2f:58:9b:14:47:
         64:59:b6:92:3f:56:55:31:80:13:a2:45:e7:a1:81:ce:ef:d7:
         95:5f:a2:e1:aa:5c:0c:67:08:09:1d:20:a6:49:45:1d:f2:7c:
         80:8e:57:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA5REUxMTAvBgNVBAUTKDE4Mzk4OEZDMERFRTlEQkI4MTExNUU4MkJGREM5NTQx
MjU2MTQxM0MwHhcNMjYwNTEyMjM0OTI2WhcNMjYwNTE5MjM0OTI2WjAYMRYwFAYD
VQQDEw02YTAzYmM4Ny0yZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAntWKlPD9uvd7jz/I6hv56t43TVcd5pp5K6M3JLWFs3LzOKimIaQwDMpr3/8z
OdKAQ680/uuZnXow+9qqzYa/FDOcapBgd5Wf3mZ1X6iHz4i1A9yFQVs53DtOu+yG
l2cevvLGQR3prCEXbtI9v71Aa6nefTwK9FAF2NoHujcEk5JIZsjOwiRUegJrNKig
vJ4o7OMBZospJIjaCsy67ZGddZMiAhGfV1fahlv4Hx8OWDa1Q+wfYLi7QldPApt7
LYAIWE/p8Thl07E5zmMQaPce/89/vyg0mBtz1sRvaT63rZAO7yB/NdRPAQcond2j
BIc4J34pXbFhOIkrYTd6Sd4pswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhWFeFh
LO62ZKzKSSUDv/RxsarnMB8GA1UdIwQYMBaAFBg5iPwN7p27gRFegr/clUElYUE8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlERS84QjMyMDc1QzU5
N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5idUJFVjZDdjl5VlFTVmhR
VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dEbUlfQTN1bmJ1QkVWNkN2OXlWUVNWaFFUdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDlERS84QjMyMDc1QzU5N0UxMUVDOUE2NzNEMERDNEY5QUUwMi9HRG1JX0EzdW5i
dUJFVjZDdjl5VlFTVmhRVHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARU2PUGcHzC5cHu7nFX5VFN5W/a/NhNOVqEk2Lk1N5dVdaqO4UCk8NS4F3/Lj
hiyShZPZB0+LwM8PBoerHbxvzqq7/eErISZJRBOfPbAoIQktF35/IT39RSITtfVY
cL/SHn8jCxOXbGZSPcYcncPiTaHl/cZrL6ym2XAbh6GGM2xEuCYMEaSQjAWSWYA1
VJtlgph8OPwzgPXDoCDlyBWLVrDnGVHUJHR4bADmLwAKqqKgwSYJsPXwPdW/A2LM
vzBV4ZRXolnwQCIky5ZE1o9d+UA5Yi9YmxRHZFm2kj9WVTGAE6JF56GBzu/XlV+i
4apcDGcICR0gpklFHfJ8gI5Xiw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:00:05 2026 by rpki-client