Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
File:                     gcJvPY9BNuUZDMehfWr3IkIutm8.mft (raw, json)
Hash identifier:          zIJtiM7qE6Z3NpP7cXlTwLKuVhGC60q+M5pGujPRUrc=
Subject key identifier:   36:64:AD:98:4E:34:1E:59:A8:99:2F:BB:6B:1A:29:E8:A7:3F:7E:20
Authority key identifier: 81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F
Certificate issuer:       /CN=A91B8E70/serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
Manifest number:          0125
Signing time:             Wed 13 May 2026 05:50:49 +0000
Manifest this update:     Wed 13 May 2026 05:50:49 +0000
Manifest next update:     Wed 20 May 2026 05:50:49 +0000
Files and hashes:         1: gcJvPY9BNuUZDMehfWr3IkIutm8.crl (hash: d0fJSM0Aq0ndR8+qbpG7yADfk3/wmQqPSfB6Zzo6wyQ=)
                          2: 20B2721A955B11EFBF0F5669C4F9AE02.roa (hash: qRLyslYx22+qKxQxzfTyLV443rh4uNIFMoyDuD/9wGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl
                          rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8E70, serialNumber=81C26F3D8F4136E5190CC7A17D6AF722422EB66F
        Validity
            Not Before: May 13 05:50:49 2026 GMT
            Not After : May 20 05:50:49 2026 GMT
        Subject: CN=6a041139-7d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:3c:69:db:3c:ee:9d:9b:bc:4a:8b:6e:d2:
                    09:b8:42:e1:77:67:ad:1b:05:a7:99:62:6c:a7:1b:
                    08:7a:aa:95:d2:5b:17:91:ed:ab:0c:7b:4a:60:55:
                    23:cd:04:25:93:1d:99:7b:e8:6d:14:a4:2a:e3:9d:
                    fc:8c:c1:41:76:d5:87:02:7c:05:b6:0b:c1:a5:84:
                    b3:d6:94:dd:12:0b:40:b3:01:bf:7e:8e:65:9e:50:
                    5e:9e:b5:55:8d:1e:f1:97:80:a1:f4:6f:3a:57:1d:
                    da:60:22:1b:d3:9c:49:9a:ae:b4:10:44:00:e0:63:
                    f3:b1:e1:ba:35:58:5b:c0:9e:ea:f3:7d:fa:69:2b:
                    40:04:48:9c:04:bc:8f:44:c6:83:f5:29:a5:49:bf:
                    20:f3:f2:37:2b:23:33:ec:dc:c4:43:15:88:a2:f0:
                    34:4e:7e:c5:d8:b4:34:20:3d:8e:cc:04:ee:c3:3a:
                    de:9e:31:e7:4a:29:a8:52:18:f9:c7:e1:d0:1e:9f:
                    e2:c0:b1:c0:f8:d3:41:3a:26:bd:2a:0c:55:13:5c:
                    8a:54:19:75:10:a2:e0:1c:3f:40:08:f6:3a:8d:a9:
                    61:be:eb:2d:82:2a:a5:4e:8b:2c:dd:44:23:d7:08:
                    50:00:ea:3a:34:47:7d:da:1b:a7:86:dd:8f:c6:b6:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:64:AD:98:4E:34:1E:59:A8:99:2F:BB:6B:1A:29:E8:A7:3F:7E:20
            X509v3 Authority Key Identifier:
                keyid:81:C2:6F:3D:8F:41:36:E5:19:0C:C7:A1:7D:6A:F7:22:42:2E:B6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gcJvPY9BNuUZDMehfWr3IkIutm8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E70/2D9970D8955A11EFBD9E024AC4F9AE02/gcJvPY9BNuUZDMehfWr3IkIutm8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c7:1e:9f:60:0e:2f:06:af:a0:93:f8:d2:f6:1d:81:8e:f0:
         e8:7d:71:60:d3:84:a4:5a:83:84:af:45:aa:cc:24:0e:ee:84:
         da:42:83:ed:f5:01:dc:66:29:1c:73:d5:01:45:e0:2c:bf:d8:
         21:67:a9:a0:5e:f9:65:66:f8:bc:24:d6:83:19:86:a6:f1:b0:
         fa:a4:a8:4d:c3:d5:2e:69:b2:6d:5a:8c:39:97:ac:22:f8:51:
         e6:5f:8f:ed:3f:0c:87:9b:d2:04:19:68:48:92:b8:c6:5e:85:
         dd:21:6c:bd:f1:72:57:59:11:e7:b5:77:0c:ce:e6:f5:d6:6b:
         83:60:d3:28:31:ee:66:c2:86:d8:e7:ae:5c:f3:e0:16:56:c7:
         59:7e:dc:6e:53:c4:f2:ca:99:98:2c:41:8b:22:8d:65:3c:2c:
         b2:48:c9:f5:0c:30:13:8d:25:dc:83:38:bb:3b:e8:d4:be:d9:
         a9:4b:85:c9:01:fd:f4:c1:3b:bd:e9:50:87:4c:07:46:89:93:
         81:6a:6c:43:4d:1e:71:83:59:97:a1:d6:b0:04:43:ad:fb:03:
         4d:a1:e1:09:0f:13:ca:b7:1f:81:0d:98:26:84:eb:11:3f:68:
         3b:fe:99:b9:e2:2d:91:ef:65:6f:a3:d2:14:c4:7a:46:f3:eb:
         37:c3:12:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhFNzAxMTAvBgNVBAUTKDgxQzI2RjNEOEY0MTM2RTUxOTBDQzdBMTdENkFGNzIy
NDIyRUI2NkYwHhcNMjYwNTEzMDU1MDQ5WhcNMjYwNTIwMDU1MDQ5WjAYMRYwFAYD
VQQDEw02YTA0MTEzOS03ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoZE8ads87p2bvEqLbtIJuELhd2etGwWnmWJspxsIeqqV0lsXke2rDHtKYFUj
zQQlkx2Ze+htFKQq4538jMFBdtWHAnwFtgvBpYSz1pTdEgtAswG/fo5lnlBenrVV
jR7xl4Ch9G86Vx3aYCIb05xJmq60EEQA4GPzseG6NVhbwJ7q8336aStABEicBLyP
RMaD9SmlSb8g8/I3KyMz7NzEQxWIovA0Tn7F2LQ0ID2OzATuwzrenjHnSimoUhj5
x+HQHp/iwLHA+NNBOia9KgxVE1yKVBl1EKLgHD9ACPY6jalhvustgiqlToss3UQj
1whQAOo6NEd92hunht2PxrbZPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDZkrZhO
NB5ZqJkvu2saKeinP34gMB8GA1UdIwQYMBaAFIHCbz2PQTblGQzHoX1q9yJCLrZv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEU3MC8yRDk5NzBEODk1
NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51VVpETWVoZldyM0lrSXV0
bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2djSnZQWTlCTnVVWkRNZWhmV3IzSWtJdXRtOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEU3MC8yRDk5NzBEODk1NUExMUVGQkQ5RTAyNEFDNEY5QUUwMi9nY0p2UFk5Qk51
VVpETWVoZldyM0lrSXV0bTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhscen2AOLwavoJP40vYdgY7w6H1xYNOEpFqDhK9FqswkDu6E2kKD7fUB3GYp
HHPVAUXgLL/YIWepoF75ZWb4vCTWgxmGpvGw+qSoTcPVLmmybVqMOZesIvhR5l+P
7T8Mh5vSBBloSJK4xl6F3SFsvfFyV1kR57V3DM7m9dZrg2DTKDHuZsKG2OeuXPPg
FlbHWX7cblPE8sqZmCxBiyKNZTwsskjJ9QwwE40l3IM4uzvo1L7ZqUuFyQH99ME7
velQh0wHRomTgWpsQ00ecYNZl6HWsARDrfsDTaHhCQ8TyrcfgQ2YJoTrET9oO/6Z
ueItke9lb6PSFMR6RvPrN8MS3g==
-----END CERTIFICATE-----
Generated at Wed May 13 11:08:40 2026 by rpki-client