Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
File:                     ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json)
Hash identifier:          cI8ZuHEY9b4cSOfKPk67YHiwqQA4sR+aUyw8tVoIfYo=
Subject key identifier:   36:E5:C1:93:BF:7C:26:3F:33:EA:BE:41:ED:87:67:7E:6B:28:09:21
Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6
Certificate issuer:       /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
Manifest number:          0278
Signing time:             Fri 17 Apr 2026 01:44:39 +0000
Manifest this update:     Fri 17 Apr 2026 01:44:38 +0000
Manifest next update:     Fri 24 Apr 2026 01:44:38 +0000
Files and hashes:         1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: E9ttmEjLvKkVY+f6Rn+dUxEQndc1fDMafvvv4dfhKiM=)
                          2: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=)
                          3: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl
                          rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6
        Validity
            Not Before: Apr 17 01:44:38 2026 GMT
            Not After : Apr 24 01:44:38 2026 GMT
        Subject: CN=69e19087-7e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:ff:08:2a:7c:db:cf:ac:8a:92:20:de:e9:
                    d6:b6:4b:8f:db:91:5a:11:d4:44:71:c5:2c:71:dc:
                    e6:b4:79:99:19:0f:da:f1:61:6d:39:7f:f0:93:87:
                    b6:77:4b:e1:58:24:b3:f0:27:c5:1b:01:5b:84:c4:
                    a8:2a:4d:e4:ff:80:05:b5:17:f8:19:a7:92:9a:73:
                    ec:fa:f4:38:f9:30:af:4c:3b:83:df:07:21:1f:bf:
                    63:f9:5d:5e:58:a5:8a:0b:92:80:54:9a:39:e6:12:
                    fd:44:22:ef:29:bc:f1:48:3b:e0:8a:4a:0f:69:4d:
                    11:f8:fc:ef:0a:b7:81:19:83:50:98:b1:c1:f2:58:
                    e5:62:00:b8:29:04:b1:54:c3:19:f2:6d:bf:e1:d5:
                    ff:05:be:33:02:1b:ff:e6:de:a3:a6:ac:30:93:c7:
                    0a:15:46:d3:9a:e5:40:33:4d:4c:1a:64:0b:66:f6:
                    e7:bd:d8:3a:f4:64:08:a9:80:18:d2:48:64:ad:b6:
                    ae:fb:03:83:9d:ea:8c:77:19:5d:46:a4:01:bb:c7:
                    c5:82:de:bc:06:75:19:67:5e:60:70:e6:73:73:70:
                    f6:7a:1a:da:12:8f:e2:e5:52:52:11:76:e2:c7:3f:
                    f5:3a:a7:eb:0b:f3:33:42:55:d4:20:4f:fa:1a:32:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:C1:93:BF:7C:26:3F:33:EA:BE:41:ED:87:67:7E:6B:28:09:21
            X509v3 Authority Key Identifier:
                keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:e9:56:c6:9a:06:8b:9b:b3:ea:af:5e:6d:98:a6:1f:b2:
         42:d5:6a:3a:18:e0:ef:10:8c:e3:ae:15:1e:e0:22:22:30:60:
         8a:62:be:82:0e:5f:c9:3b:12:36:96:99:4b:8f:72:44:4c:56:
         fc:4b:0e:95:46:fb:f1:b9:28:c6:6d:02:3b:49:8d:3e:4a:51:
         c6:cd:75:55:92:9c:d7:e6:2f:40:77:d7:f3:60:a3:69:04:4f:
         42:ea:c8:55:9b:49:d7:42:34:fb:7b:25:8c:21:3a:80:a0:62:
         2e:87:2c:70:8f:5b:c8:86:c2:6b:47:dd:06:0a:6a:c9:61:24:
         5a:38:d6:72:09:e7:ed:fb:e5:ba:06:76:d1:07:23:af:de:8e:
         08:4d:e9:46:7d:a7:44:a4:23:aa:de:69:bb:ce:7b:b6:11:51:
         84:4e:56:93:5a:f3:05:be:3a:5a:db:9f:56:50:63:51:8f:e0:
         d1:48:08:ef:73:8f:44:38:d1:33:c2:ae:74:3a:0e:6b:ab:4d:
         ac:43:67:e3:db:93:6d:5c:dd:8e:47:23:3e:f2:0c:f5:68:e6:
         77:7a:9d:1b:6a:0f:f8:6c:9e:27:87:56:b3:a2:15:b3:46:79:
         93:7c:49:92:cc:78:bc:70:20:45:b6:f5:04:3e:33:ed:4d:83:
         21:9d:6e:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz
ODczOTFCRTYwHhcNMjYwNDE3MDE0NDM4WhcNMjYwNDI0MDE0NDM4WjAYMRYwFAYD
VQQDEw02OWUxOTA4Ny03ZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgH/CCp828+sipIg3unWtkuP25FaEdREccUscdzmtHmZGQ/a8WFtOX/wk4e2
d0vhWCSz8CfFGwFbhMSoKk3k/4AFtRf4GaeSmnPs+vQ4+TCvTDuD3wchH79j+V1e
WKWKC5KAVJo55hL9RCLvKbzxSDvgikoPaU0R+PzvCreBGYNQmLHB8ljlYgC4KQSx
VMMZ8m2/4dX/Bb4zAhv/5t6jpqwwk8cKFUbTmuVAM01MGmQLZvbnvdg69GQIqYAY
0khkrbau+wODneqMdxldRqQBu8fFgt68BnUZZ15gcOZzc3D2ehraEo/i5VJSEXbi
xz/1OqfrC/MzQlXUIE/6GjKzswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDblwZO/
fCY/M+q+Qe2HZ35rKAkhMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2
QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH
LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3
SFJsRk1BYWpoczA0YzVHLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPyDpVsaaBoubs+qvXm2Yph+yQtVqOhjg7xCM464VHuAiIjBgimK+gg5fyTsS
NpaZS49yRExW/EsOlUb78bkoxm0CO0mNPkpRxs11VZKc1+YvQHfX82CjaQRPQurI
VZtJ10I0+3sljCE6gKBiLocscI9byIbCa0fdBgpqyWEkWjjWcgnn7fvlugZ20Qcj
r96OCE3pRn2nRKQjqt5pu857thFRhE5Wk1rzBb46WtufVlBjUY/g0UgI73OPRDjR
M8KudDoOa6tNrENn49uTbVzdjkcjPvIM9Wjmd3qdG2oP+GyeJ4dWs6IVs0Z5k3xJ
ksx4vHAgRbb1BD4z7U2DIZ1uSw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:32 2026 by rpki-client