Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
File:                     GrHejsiRr6LU4cka9Vg0kL-7wgk.mft (raw, json)
Hash identifier:          TzjzRQ71Lp6C6BBnhF5Vp7uTtxXoLf4p3YFdIwOcU8s=
Subject key identifier:   5A:EF:F4:CB:00:CC:67:9E:22:F3:88:3C:14:47:76:AD:FA:4E:41:05
Authority key identifier: 1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09
Certificate issuer:       /CN=A916DB3F/serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
Certificate serial:       1EBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
Manifest number:          1EB0
Signing time:             Sat 18 Apr 2026 15:58:49 +0000
Manifest this update:     Sat 18 Apr 2026 15:58:49 +0000
Manifest next update:     Sat 25 Apr 2026 15:58:49 +0000
Files and hashes:         1: GrHejsiRr6LU4cka9Vg0kL-7wgk.crl (hash: JWw2sbMIDg20U+PIVhZDFm1HeBW1321sJjvhkPSBAmA=)
                          2: 7E8D9A52895411E6B3538424C4F9AE02.roa (hash: JuvAoXwq2q+25weckrh5AmxWev3ZprGRD1R3ygjTn5E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7870 (0x1ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB3F, serialNumber=1AB1DE8EC891AFA2D4E1C91AF5583490BFBBC209
        Validity
            Not Before: Apr 18 15:58:49 2026 GMT
            Not After : Apr 25 15:58:49 2026 GMT
        Subject: CN=69e3aa39-a735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:4a:36:4d:a9:04:a8:dd:b7:87:b9:5b:28:
                    5a:dd:84:80:f2:3a:1a:f4:62:0f:c2:86:c6:9e:bb:
                    65:b3:64:a3:5e:24:49:43:fb:61:94:07:f9:9f:85:
                    e2:a0:fd:fc:30:6f:6e:5a:8e:56:2b:21:3e:36:1e:
                    b7:b6:a4:e6:ce:b6:65:78:78:31:80:31:f5:29:53:
                    d3:6a:a4:ad:80:02:39:77:e6:e1:c4:72:a5:7e:f1:
                    9b:5f:f3:88:7b:27:74:f0:c7:96:24:15:cc:9d:73:
                    2d:7f:f9:ef:92:b2:31:10:4f:4f:55:4f:76:64:5c:
                    a4:12:cd:46:b8:a6:d2:86:23:f7:8f:fc:cd:ef:c0:
                    1a:60:e2:67:48:34:00:79:5d:de:8a:89:64:85:eb:
                    a9:b0:5f:50:3e:8e:78:8d:3c:51:ff:76:a0:fa:d6:
                    41:d3:51:14:8b:0f:a9:bb:d6:b5:67:39:b1:e5:3f:
                    36:8a:29:0b:fc:ea:fe:a5:4e:75:c6:2a:a9:ba:19:
                    33:58:a7:13:4e:aa:41:3b:48:96:f9:3c:15:9b:94:
                    f3:a7:c3:76:bd:af:f5:b8:37:d1:90:0a:a1:30:fa:
                    d6:a3:ea:58:b9:06:48:3b:e3:5a:89:f7:c9:13:c9:
                    3e:64:08:c9:18:59:79:5e:81:c0:1b:dd:fe:0c:eb:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:EF:F4:CB:00:CC:67:9E:22:F3:88:3C:14:47:76:AD:FA:4E:41:05
            X509v3 Authority Key Identifier:
                keyid:1A:B1:DE:8E:C8:91:AF:A2:D4:E1:C9:1A:F5:58:34:90:BF:BB:C2:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GrHejsiRr6LU4cka9Vg0kL-7wgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB3F/D3910134895311E68A854923C4F9AE02/GrHejsiRr6LU4cka9Vg0kL-7wgk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3c:90:a3:90:f6:34:37:25:c8:ff:75:c2:3b:4d:ae:22:46:
         03:71:f6:da:dd:30:26:a1:07:0d:f2:71:5c:d9:bb:85:9f:23:
         d1:63:08:0a:fc:d5:2b:bc:5c:96:51:9f:91:22:4c:0e:c8:dc:
         71:89:32:99:12:17:e8:59:67:a7:25:1e:6e:6c:68:af:9a:4f:
         a9:30:24:9d:22:87:a1:dd:c7:55:5e:c3:31:9e:68:04:9f:cf:
         c9:f6:8e:84:2d:25:e0:b6:66:e7:88:b1:b8:6c:8c:6d:94:22:
         bb:b1:ca:fb:a5:1e:1c:c5:c7:6d:36:03:d2:1a:75:e0:6a:8a:
         9e:41:35:eb:86:75:1c:27:7d:99:82:01:ea:7c:04:b3:e8:9b:
         d4:d4:fc:27:d8:34:18:22:93:cc:97:ed:19:7d:f0:e4:4e:c2:
         66:62:f7:31:60:f2:02:a1:26:7d:8c:36:5f:c2:48:50:99:40:
         a4:2b:56:fb:e2:91:c5:98:b2:ce:cd:e2:e6:56:26:39:b3:a4:
         2a:a4:84:bc:64:94:73:67:dc:fd:c7:53:e4:ec:ee:73:70:35:
         35:77:c8:e5:44:9a:b7:81:72:db:d3:33:2c:68:c1:a1:c9:61:
         02:df:60:f5:8b:ab:8b:9e:14:ee:97:32:1f:62:1e:e7:93:21:
         57:93:90:88
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCM0YxMTAvBgNVBAUTKDFBQjFERThFQzg5MUFGQTJENEUxQzkxQUY1NTgzNDkw
QkZCQkMyMDkwHhcNMjYwNDE4MTU1ODQ5WhcNMjYwNDI1MTU1ODQ5WjAYMRYwFAYD
VQQDEw02OWUzYWEzOS1hNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvpRKNk2pBKjdt4e5Wyha3YSA8joa9GIPwobGnrtls2SjXiRJQ/thlAf5n4Xi
oP38MG9uWo5WKyE+Nh63tqTmzrZleHgxgDH1KVPTaqStgAI5d+bhxHKlfvGbX/OI
eyd08MeWJBXMnXMtf/nvkrIxEE9PVU92ZFykEs1GuKbShiP3j/zN78AaYOJnSDQA
eV3eiolkheupsF9QPo54jTxR/3ag+tZB01EUiw+pu9a1Zzmx5T82iikL/Or+pU51
xiqpuhkzWKcTTqpBO0iW+TwVm5Tzp8N2va/1uDfRkAqhMPrWo+pYuQZIO+NaiffJ
E8k+ZAjJGFl5XoHAG93+DOu4ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrv9MsA
zGeeIvOIPBRHdq36TkEFMB8GA1UdIwQYMBaAFBqx3o7Ika+i1OHJGvVYNJC/u8IJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REIzRi9EMzkxMDEzNDg5
NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2TFU0Y2thOVZnMGtMLTd3
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dySGVqc2lScjZMVTRja2E5Vmcwa0wtN3dnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REIzRi9EMzkxMDEzNDg5NTMxMUU2OEE4NTQ5MjNDNEY5QUUwMi9HckhlanNpUnI2
TFU0Y2thOVZnMGtMLTd3Z2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhTyQo5D2NDclyP91wjtNriJGA3H22t0wJqEHDfJxXNm7hZ8j0WMICvzVK7xc
llGfkSJMDsjccYkymRIX6FlnpyUebmxor5pPqTAknSKHod3HVV7DMZ5oBJ/PyfaO
hC0l4LZm54ixuGyMbZQiu7HK+6UeHMXHbTYD0hp14GqKnkE164Z1HCd9mYIB6nwE
s+ib1NT8J9g0GCKTzJftGX3w5E7CZmL3MWDyAqEmfYw2X8JIUJlApCtW++KRxZiy
zs3i5lYmObOkKqSEvGSUc2fc/cdT5Ozuc3A1NXfI5USat4Fy29MzLGjBoclhAt9g
9Yuri54U7pcyH2Ie55MhV5OQiA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:32 2026 by rpki-client