Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
File:                     gjEAt15d1BoefDKBw1cT9EvobJg.mft (raw, json)
Hash identifier:          CTgtMrnuFBtD0mKQM7VirQbpydajPe6R/fBt5B0b2uw=
Subject key identifier:   73:65:8C:65:26:16:26:EF:C8:13:F7:9F:D6:A1:AE:E7:FB:F0:16:79
Authority key identifier: 82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98
Certificate issuer:       /CN=A91A2E6A/serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
Manifest number:          0166
Signing time:             Wed 13 May 2026 04:56:12 +0000
Manifest this update:     Wed 13 May 2026 04:56:12 +0000
Manifest next update:     Wed 20 May 2026 04:56:12 +0000
Files and hashes:         1: gjEAt15d1BoefDKBw1cT9EvobJg.crl (hash: do+IaHK+V1RMaL5DB0g+Fbxq3dQYn1gGJv21UV6EHvs=)
                          2: BF466AE8325611EFA462C323C4F9AE02.roa (hash: 8vNtqHXYBEHG1BUuIx3hpyEUVshVqruHiCT2TQ+vhGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl
                          rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2E6A, serialNumber=823100B75E5DD41A1E7C3281C35713F44BE86C98
        Validity
            Not Before: May 13 04:56:12 2026 GMT
            Not After : May 20 04:56:12 2026 GMT
        Subject: CN=6a04046c-f189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:31:2a:0e:c4:c8:44:7e:5d:41:95:44:0a:
                    31:2f:2d:1d:e6:9d:c5:84:9a:06:e8:a6:7c:ed:f7:
                    5f:e4:c6:ee:b5:a1:ea:e9:3f:dd:c5:12:be:c6:e2:
                    f0:92:ed:a4:bc:6f:b9:9d:64:d2:26:37:b9:db:ce:
                    e9:06:87:14:19:d3:2c:2f:04:be:fb:fc:7d:ac:47:
                    0f:13:53:9e:73:ce:9b:91:cf:ae:b6:a4:0e:53:13:
                    84:b3:fb:d9:b3:12:7a:6e:1c:39:f3:ac:1a:a2:08:
                    05:da:52:b5:92:9b:27:04:d9:f6:ed:a4:49:ca:d0:
                    e1:03:48:17:b4:43:28:b6:38:60:62:45:ed:4e:d5:
                    df:92:cc:e8:76:42:be:d0:b7:cd:1b:d2:3a:c3:0e:
                    54:60:b7:6e:4b:88:f0:a7:4f:a3:fc:9f:7e:30:80:
                    a1:c1:7a:b2:9d:29:ac:22:1f:a2:d2:f9:04:d4:b3:
                    1b:d1:c2:52:db:1c:e4:2b:cd:90:d9:d6:8e:99:b8:
                    ee:ae:91:0c:96:9a:b9:d2:5b:b7:70:e1:44:16:34:
                    a9:83:17:c8:36:d3:b9:83:02:1a:40:24:1f:6b:8b:
                    cc:36:1a:c8:ed:ea:a0:53:29:99:bc:f7:e1:34:cd:
                    dc:19:63:df:b7:4b:03:db:6a:d4:89:77:5e:d0:dc:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:65:8C:65:26:16:26:EF:C8:13:F7:9F:D6:A1:AE:E7:FB:F0:16:79
            X509v3 Authority Key Identifier:
                keyid:82:31:00:B7:5E:5D:D4:1A:1E:7C:32:81:C3:57:13:F4:4B:E8:6C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gjEAt15d1BoefDKBw1cT9EvobJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2E6A/AE373D84323011EF9E532156C4F9AE02/gjEAt15d1BoefDKBw1cT9EvobJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:aa:ed:5f:5a:6e:c0:2c:f7:ea:d8:69:21:2d:f1:19:a6:02:
         f8:12:ea:16:b6:d4:4e:e3:cc:91:60:a3:46:77:78:cd:d8:66:
         80:df:6c:ef:20:38:57:1d:28:be:a5:c8:4c:d0:54:0f:c3:e0:
         25:a8:9d:4c:40:26:11:7e:29:47:09:fb:ea:71:07:c7:87:30:
         94:80:59:8a:1b:83:64:02:ea:73:2f:a5:3b:90:6e:8f:ef:7f:
         6a:77:e1:d5:5b:a2:90:3e:29:45:55:fd:67:27:07:85:3f:c4:
         5a:69:c1:d9:36:0a:a6:cc:ff:9b:53:37:a7:0a:a3:8a:1a:6a:
         7c:58:ff:fc:79:77:ac:fc:a9:2c:5e:13:f1:1e:93:da:75:07:
         2c:55:20:02:1e:f4:cb:7a:3e:67:81:a2:a7:6e:13:a6:2c:5d:
         83:c6:e0:6b:df:f2:ed:82:1e:66:16:f5:e8:5f:a7:38:7f:23:
         92:15:82:79:00:74:0d:53:67:dd:1c:e0:d7:ae:02:59:3d:09:
         7e:2f:57:eb:2e:4a:91:b9:25:1a:95:1d:0f:c2:6f:24:2e:af:
         13:38:87:63:45:a0:c7:c8:e6:d8:0b:da:62:5e:1e:24:8b:f3:
         89:79:dc:5a:cc:fd:f1:a5:66:1c:1e:16:47:f4:ce:e9:16:c6:
         ef:6d:40:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJFNkExMTAvBgNVBAUTKDgyMzEwMEI3NUU1REQ0MUExRTdDMzI4MUMzNTcxM0Y0
NEJFODZDOTgwHhcNMjYwNTEzMDQ1NjEyWhcNMjYwNTIwMDQ1NjEyWjAYMRYwFAYD
VQQDEw02YTA0MDQ2Yy1mMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr40xKg7EyER+XUGVRAoxLy0d5p3FhJoG6KZ87fdf5MbutaHq6T/dxRK+xuLw
ku2kvG+5nWTSJje5287pBocUGdMsLwS++/x9rEcPE1Oec86bkc+utqQOUxOEs/vZ
sxJ6bhw586waoggF2lK1kpsnBNn27aRJytDhA0gXtEMotjhgYkXtTtXfkszodkK+
0LfNG9I6ww5UYLduS4jwp0+j/J9+MIChwXqynSmsIh+i0vkE1LMb0cJS2xzkK82Q
2daOmbjurpEMlpq50lu3cOFEFjSpgxfINtO5gwIaQCQfa4vMNhrI7eqgUymZvPfh
NM3cGWPft0sD22rUiXde0Nw53wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHNljGUm
FibvyBP3n9ahruf78BZ5MB8GA1UdIwQYMBaAFIIxALdeXdQaHnwygcNXE/RL6GyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkU2QS9BRTM3M0Q4NDMy
MzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFCb2VmREtCdzFjVDlFdm9i
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dqRUF0MTVkMUJvZWZES0J3MWNUOUV2b2JKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkU2QS9BRTM3M0Q4NDMyMzAxMUVGOUU1MzIxNTZDNEY5QUUwMi9nakVBdDE1ZDFC
b2VmREtCdzFjVDlFdm9iSmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQqrtX1puwCz36thpIS3xGaYC+BLqFrbUTuPMkWCjRnd4zdhmgN9s7yA4Vx0o
vqXITNBUD8PgJaidTEAmEX4pRwn76nEHx4cwlIBZihuDZALqcy+lO5Buj+9/anfh
1VuikD4pRVX9ZycHhT/EWmnB2TYKpsz/m1M3pwqjihpqfFj//Hl3rPypLF4T8R6T
2nUHLFUgAh70y3o+Z4Gip24Tpixdg8bga9/y7YIeZhb16F+nOH8jkhWCeQB0DVNn
3Rzg164CWT0Jfi9X6y5KkbklGpUdD8JvJC6vEziHY0Wgx8jm2AvaYl4eJIvziXnc
Wsz98aVmHB4WR/TO6RbG721AFQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:08:04 2026 by rpki-client