Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
File:                     GagF0CaVVoPz_uVj-Oagonjwv3E.mft (raw, json)
Hash identifier:          9WqtYW211P37nqlKcvMMbefm/+LvKp9UVnLrd3avRx8=
Subject key identifier:   BA:7C:C6:E0:1D:8A:17:0C:55:8F:61:E7:45:DA:59:F5:23:07:10:65
Authority key identifier: 19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71
Certificate issuer:       /CN=A912111B/serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
Certificate serial:       06EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
Manifest number:          06E5
Signing time:             Sat 28 Feb 2026 22:36:00 +0000
Manifest this update:     Sat 28 Feb 2026 22:35:59 +0000
Manifest next update:     Sat 07 Mar 2026 22:35:59 +0000
Files and hashes:         1: GagF0CaVVoPz_uVj-Oagonjwv3E.crl (hash: DW1sC4/s58bTdf12alEQRScYGG1mKRn5LwwFy74b5S8=)
                          2: 6D3057FC85F511EBB5C36F09C4F9AE02.roa (hash: j+dLoRV+1O81d7fGrVAaKGQRyaLFal/pTYtw+D6AbWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl
                          rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 22:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1771 (0x6eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912111B, serialNumber=19A805D026955683F3FEE563F8E6A0A278F0BF71
        Validity
            Not Before: Feb 28 22:35:59 2026 GMT
            Not After : Mar  7 22:35:59 2026 GMT
        Subject: CN=69a36dcf-c72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:27:ee:2f:aa:de:df:d2:ea:55:e7:2b:5b:ed:
                    3f:6f:5b:4d:2f:bb:8c:59:dd:2d:27:c2:1f:19:93:
                    90:cc:02:e9:04:13:9b:bc:dc:1e:63:1d:54:45:a2:
                    c1:28:98:ba:22:28:80:78:2a:4f:8c:a6:53:6d:f9:
                    43:a2:d8:e7:d0:56:4b:08:53:5b:6f:cc:e7:46:c7:
                    50:29:38:86:22:6d:e1:0d:5f:36:d0:f0:fc:9a:4d:
                    17:c7:24:05:bd:42:96:11:c9:4c:27:14:3f:ea:f1:
                    33:30:3e:ea:03:21:fd:c7:b2:fe:b7:30:e4:bf:d3:
                    2d:bd:53:7e:0b:43:c4:3b:b5:7d:ed:b4:02:aa:05:
                    c1:b6:65:5a:be:88:73:d0:46:21:78:29:18:3c:17:
                    5c:4f:95:b5:28:a5:9e:f6:3b:60:b2:19:8c:63:da:
                    2c:52:02:34:dc:e9:66:63:3b:0d:55:68:3a:b6:c1:
                    5a:30:de:3c:cf:81:fa:40:ce:83:76:58:43:18:10:
                    8d:03:10:c3:01:af:d0:19:ee:9c:8a:fa:ca:78:6c:
                    b9:12:d3:3b:d0:9d:11:35:2a:9c:b2:cb:bb:cb:9f:
                    e2:5e:c0:4f:81:ac:cb:b0:ba:dd:51:0b:65:a8:9a:
                    f7:aa:a7:98:b7:d8:b8:24:90:c0:fa:0a:97:2a:15:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:C6:E0:1D:8A:17:0C:55:8F:61:E7:45:DA:59:F5:23:07:10:65
            X509v3 Authority Key Identifier:
                keyid:19:A8:05:D0:26:95:56:83:F3:FE:E5:63:F8:E6:A0:A2:78:F0:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GagF0CaVVoPz_uVj-Oagonjwv3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912111B/3BD28F1A85F311EBA1042D80C4F9AE02/GagF0CaVVoPz_uVj-Oagonjwv3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:fd:0b:32:51:ab:a3:6e:79:c6:17:8e:04:48:ea:b1:d8:
         f2:f2:40:03:00:de:00:3f:4c:77:7e:a9:f8:29:e4:08:57:8f:
         ed:7f:59:34:29:8d:7f:a7:5b:d5:f4:ce:13:43:13:db:53:4b:
         ad:f9:dd:12:ac:3a:52:5a:ea:70:5b:3a:91:bd:77:e3:32:9e:
         70:29:b5:1f:75:85:7c:f4:9a:b9:49:5b:4e:03:83:25:4c:67:
         d8:9a:a8:03:e8:0c:11:36:77:28:1f:4a:70:88:fe:82:75:a4:
         72:2a:0b:3e:29:73:17:3f:10:1f:ba:ff:bd:81:b6:47:cd:21:
         7d:c0:58:ba:fb:e7:c8:dd:1b:94:e7:6d:05:6e:3a:7d:7c:1c:
         02:51:24:0d:81:ce:6d:c2:d0:5a:d1:ea:f5:54:c6:24:2f:f4:
         02:c5:f7:c3:cb:1c:59:1c:24:5d:ea:16:b9:97:2a:28:54:04:
         d8:c2:46:c2:11:b4:8f:1b:4a:fe:2f:25:fd:61:79:4f:de:95:
         b6:ce:f1:34:4e:4a:aa:40:0c:6e:b3:09:8c:e5:09:61:7b:92:
         fb:4c:a6:f8:a0:6e:41:fe:02:22:4c:7d:0c:00:42:6d:da:7c:
         f2:92:4c:e8:f8:84:ff:0d:dd:03:ac:13:0b:06:5c:07:8c:81:
         46:01:7d:ba
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjExMUIxMTAvBgNVBAUTKDE5QTgwNUQwMjY5NTU2ODNGM0ZFRTU2M0Y4RTZBMEEy
NzhGMEJGNzEwHhcNMjYwMjI4MjIzNTU5WhcNMjYwMzA3MjIzNTU5WjAYMRYwFAYD
VQQDDA02OWEzNmRjZi1jNzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvCfuL6re39LqVecrW+0/b1tNL7uMWd0tJ8IfGZOQzALpBBObvNweYx1URaLB
KJi6IiiAeCpPjKZTbflDotjn0FZLCFNbb8znRsdQKTiGIm3hDV820PD8mk0XxyQF
vUKWEclMJxQ/6vEzMD7qAyH9x7L+tzDkv9MtvVN+C0PEO7V97bQCqgXBtmVavohz
0EYheCkYPBdcT5W1KKWe9jtgshmMY9osUgI03OlmYzsNVWg6tsFaMN48z4H6QM6D
dlhDGBCNAxDDAa/QGe6civrKeGy5EtM70J0RNSqcssu7y5/iXsBPgazLsLrdUQtl
qJr3qqeYt9i4JJDA+gqXKhUdoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLp8xuAd
ihcMVY9h50XaWfUjBxBlMB8GA1UdIwQYMBaAFBmoBdAmlVaD8/7lY/jmoKJ48L9x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTExQi8zQkQyOEYxQTg1
RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZvUHpfdVZqLU9hZ29uand2
M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhZ0YwQ2FWVm9Qel91VmotT2Fnb25qd3YzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTExQi8zQkQyOEYxQTg1RjMxMUVCQTEwNDJEODBDNEY5QUUwMi9HYWdGMENhVlZv
UHpfdVZqLU9hZ29uand2M0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg5z9CzJRq6NuecYXjgRI6rHY8vJAAwDeAD9Md36p+CnkCFeP7X9ZNCmNf6db
1fTOE0MT21NLrfndEqw6UlrqcFs6kb134zKecCm1H3WFfPSauUlbTgODJUxn2Jqo
A+gMETZ3KB9KcIj+gnWkcioLPilzFz8QH7r/vYG2R80hfcBYuvvnyN0blOdtBW46
fXwcAlEkDYHObcLQWtHq9VTGJC/0AsX3w8scWRwkXeoWuZcqKFQE2MJGwhG0jxtK
/i8l/WF5T96Vts7xNE5KqkAMbrMJjOUJYXuS+0ym+KBuQf4CIkx9DABCbdp88pJM
6PiE/w3dA6wTCwZcB4yBRgF9ug==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:29 2026 by rpki-client