Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
File:                     GNdIiJK3LFSvZOLdI4thnIm3LWg.mft (raw, json)
Hash identifier:          IIgE+eq2zXo2iLAotd4751g8SV1+z6bMqImkoyuV87o=
Subject key identifier:   70:18:62:83:E7:91:AB:61:5A:97:C9:DA:8F:81:23:33:57:27:4E:1F
Authority key identifier: 18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68
Certificate issuer:       /CN=A91E17BF/serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
Certificate serial:       034B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
Manifest number:          0342
Signing time:             Wed 13 May 2026 01:09:08 +0000
Manifest this update:     Wed 13 May 2026 01:09:08 +0000
Manifest next update:     Wed 20 May 2026 01:09:08 +0000
Files and hashes:         1: GNdIiJK3LFSvZOLdI4thnIm3LWg.crl (hash: vUUJO5wGHnFLa/HSBho6EVZBiXukPIa+OXccPRDQb5E=)
                          2: 83D6FAEE077511EDBD013D37C4F9AE02.roa (hash: XduLMfOTlu5b31dWGwP8GqlgYSkiZV7iaoNBfx7mKds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl
                          rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17BF, serialNumber=18D7488892B72C54AF64E2DD238B619C89B72D68
        Validity
            Not Before: May 13 01:09:08 2026 GMT
            Not After : May 20 01:09:08 2026 GMT
        Subject: CN=6a03cf34-e059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:92:20:a0:99:ab:34:5b:6e:5a:24:c8:a6:
                    54:c8:4c:73:f0:ce:a9:4b:97:22:b1:6a:d8:64:cc:
                    83:89:40:e5:c8:e9:7a:60:e2:4f:42:13:e3:42:d3:
                    c4:5f:87:f4:0d:27:a8:12:39:4b:1f:ae:72:0b:e7:
                    56:f1:da:1f:74:1b:7a:4a:6d:04:f5:f3:12:02:d7:
                    d6:55:5f:5c:07:9b:17:c1:3a:2f:53:b6:08:41:77:
                    85:e9:3c:2d:fb:0b:2f:c6:1d:cf:af:25:14:db:d4:
                    b1:40:a8:c2:38:65:a4:7c:89:e5:f5:81:3b:bf:8d:
                    d9:4a:af:a2:eb:22:ef:83:66:3d:ee:3a:68:8e:d7:
                    4d:27:ce:e0:3c:d4:2b:55:2a:ed:bc:44:e9:3b:42:
                    58:1e:0d:09:01:51:90:fd:71:51:ef:97:13:1d:02:
                    bd:68:d4:98:30:94:c9:b6:84:97:d9:2b:78:bf:11:
                    86:cf:bf:69:3f:27:ba:e9:5b:e1:3b:16:df:95:8a:
                    93:80:e9:d0:00:47:59:36:ee:91:2f:33:d2:91:5e:
                    de:06:98:a9:6f:86:92:ee:21:12:3a:71:e7:61:2b:
                    c0:e7:50:99:81:2e:96:f8:b8:aa:91:32:aa:8a:1c:
                    c7:71:d7:67:79:1d:b0:1e:fa:d2:4f:4a:79:aa:52:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:18:62:83:E7:91:AB:61:5A:97:C9:DA:8F:81:23:33:57:27:4E:1F
            X509v3 Authority Key Identifier:
                keyid:18:D7:48:88:92:B7:2C:54:AF:64:E2:DD:23:8B:61:9C:89:B7:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GNdIiJK3LFSvZOLdI4thnIm3LWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17BF/8D0DC096077211ED9EC45A31C4F9AE02/GNdIiJK3LFSvZOLdI4thnIm3LWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:00:6f:19:dd:6e:c8:2b:9c:23:d9:b5:6c:52:ce:1d:b6:
         b4:40:85:14:bb:ae:5b:11:ba:a7:46:11:9d:3f:4f:9a:25:d7:
         3b:06:d2:99:2a:9b:6f:42:c0:7b:3a:cf:6b:4f:9b:7a:d5:0d:
         c8:46:43:f7:4b:64:ea:10:30:24:11:1d:a9:7f:8d:75:8b:f8:
         37:1b:8d:d1:b2:f6:86:03:04:45:5f:a0:f7:ff:cb:68:59:06:
         d8:98:5e:d2:2e:f3:a2:3b:f5:0b:57:33:48:a7:2b:09:25:69:
         88:ca:a9:e4:8f:02:1d:4d:0b:eb:49:22:99:ff:c3:ac:15:0b:
         5c:4d:bc:b3:13:f1:16:a6:f3:a3:24:1d:20:6e:ba:34:43:dc:
         2d:f1:b4:e6:91:a7:83:72:78:86:be:e8:40:d5:fa:a8:7e:ba:
         09:a0:0d:58:05:68:ae:8f:4d:e9:4c:2b:d9:36:4b:58:96:e4:
         04:0f:ab:4d:2c:bf:92:e2:76:87:ca:f4:c8:1b:4e:c4:2c:c4:
         37:c0:6a:d1:c8:eb:29:80:03:3e:2f:c3:21:69:db:75:de:bf:
         38:0d:40:93:9a:cb:92:f7:40:c0:9f:da:25:88:e2:ee:0d:40:
         78:8a:0f:b9:70:d0:e6:d7:06:70:d0:38:fe:e4:6c:8e:d7:25:
         b0:c1:d6:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3QkYxMTAvBgNVBAUTKDE4RDc0ODg4OTJCNzJDNTRBRjY0RTJERDIzOEI2MTlD
ODlCNzJENjgwHhcNMjYwNTEzMDEwOTA4WhcNMjYwNTIwMDEwOTA4WjAYMRYwFAYD
VQQDEw02YTAzY2YzNC1lMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEiSIKCZqzRbblokyKZUyExz8M6pS5cisWrYZMyDiUDlyOl6YOJPQhPjQtPE
X4f0DSeoEjlLH65yC+dW8dofdBt6Sm0E9fMSAtfWVV9cB5sXwTovU7YIQXeF6Twt
+wsvxh3PryUU29SxQKjCOGWkfInl9YE7v43ZSq+i6yLvg2Y97jpojtdNJ87gPNQr
VSrtvETpO0JYHg0JAVGQ/XFR75cTHQK9aNSYMJTJtoSX2St4vxGGz79pPye66Vvh
OxbflYqTgOnQAEdZNu6RLzPSkV7eBpipb4aS7iESOnHnYSvA51CZgS6W+LiqkTKq
ihzHcddneR2wHvrST0p5qlI14QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAYYoPn
kathWpfJ2o+BIzNXJ04fMB8GA1UdIwQYMBaAFBjXSIiStyxUr2Ti3SOLYZyJty1o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdCRi84RDBEQzA5NjA3
NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xGU3ZaT0xkSTR0aG5JbTNM
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dOZElpSkszTEZTdlpPTGRJNHRobkltM0xXZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTdCRi84RDBEQzA5NjA3NzIxMUVEOUVDNDVBMzFDNEY5QUUwMi9HTmRJaUpLM0xG
U3ZaT0xkSTR0aG5JbTNMV2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK2MAbxndbsgrnCPZtWxSzh22tECFFLuuWxG6p0YRnT9PmiXXOwbSmSqbb0LA
ezrPa0+betUNyEZD90tk6hAwJBEdqX+NdYv4NxuN0bL2hgMERV+g9//LaFkG2Jhe
0i7zojv1C1czSKcrCSVpiMqp5I8CHU0L60kimf/DrBULXE28sxPxFqbzoyQdIG66
NEPcLfG05pGng3J4hr7oQNX6qH66CaANWAVoro9N6Uwr2TZLWJbkBA+rTSy/kuJ2
h8r0yBtOxCzEN8Bq0cjrKYADPi/DIWnbdd6/OA1Ak5rLkvdAwJ/aJYji7g1AeIoP
uXDQ5tcGcNA4/uRsjtclsMHWlw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:34 2026 by rpki-client