Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
File:                     GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft (raw, json)
Hash identifier:          cRTsRjc/cxk5gWBf/HgcWuqoPlzlNjaEdKt46lz7LIk=
Subject key identifier:   BC:45:5B:BE:FD:AE:8A:32:F3:9D:42:A9:BE:B6:1C:FA:70:EF:7D:C5
Authority key identifier: 18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29
Certificate issuer:       /CN=A91DCD09/serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
Certificate serial:       1AF3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
Manifest number:          1AC7
Signing time:             Fri 12 Jun 2026 16:16:55 +0000
Manifest this update:     Fri 12 Jun 2026 16:16:54 +0000
Manifest next update:     Fri 19 Jun 2026 16:16:54 +0000
Files and hashes:         1: GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl (hash: v4wO1ISf/rLPKQNcZwFo4WBRTyMBJMx66b+/sLEceVs=)
                          2: 9DF7DA5C557C11E7B34BCE81C4F9AE02.roa (hash: QYJCGTrhNobc9om3BoJ26lPH+BId3l/MUNDCYqKgq0Q=)
                          3: 64A7FFE2F74811E8A07B9609C4F9AE02.roa (hash: M9XcsGu+O0Zk52IzM7Z06ElXp8zYwD2w5zBvqMmkl5E=)
                          4: 234205EA327A11E8A1143B79C4F9AE02.roa (hash: +gU0wUPJzdPGvi0Ro7xFlOsQHmLKis/hh0dBME4aong=)
                          5: CF4E04A6639A11F1BC9896E97047A888.roa (hash: AHKgPDalvgbP0KjwpNMKO/iAmjTMQ6+zGyM2geiYq3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6899 (0x1af3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=18F97D098E4EBD0610D54F48D5B3E1AA743A2029
        Validity
            Not Before: Jun 12 16:16:54 2026 GMT
            Not After : Jun 19 16:16:54 2026 GMT
        Subject: CN=6a2c30f7-63fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:f5:16:e1:44:dd:bb:20:6d:56:12:dc:97:
                    ca:6e:33:e0:51:af:ea:09:18:1e:bb:5a:67:d8:a7:
                    14:3b:77:fa:df:92:ea:b1:17:3d:39:66:2c:1f:59:
                    ff:de:6b:62:2c:15:b7:eb:f1:39:c1:65:25:fd:b0:
                    7c:77:dc:a2:d2:c9:b4:85:87:61:3f:c5:f5:e4:1c:
                    0e:c8:e6:d8:67:99:e5:59:09:40:f7:a9:68:da:ef:
                    65:6f:fa:d3:8b:63:81:01:08:84:c1:0c:3a:cb:fd:
                    92:e1:11:86:d7:e7:ad:ed:e6:2d:d6:29:57:d2:74:
                    1b:86:b4:b3:6a:2e:8f:d9:44:fe:da:fe:ae:1b:36:
                    2a:46:e4:93:f5:c4:ff:42:92:99:94:94:95:e4:ec:
                    f3:c1:cb:aa:5e:d4:57:85:d4:e7:c4:79:a4:f3:42:
                    b5:be:21:a7:ac:ff:ba:6a:cf:a5:99:27:b8:9f:4c:
                    74:86:c7:64:20:87:74:be:f7:52:69:11:d4:1e:e6:
                    f1:d3:80:f6:c2:7e:23:af:4d:2a:d1:24:44:70:45:
                    5c:e2:69:e2:c5:76:a1:3a:ab:c8:cb:31:91:df:e4:
                    7c:49:17:c1:61:df:49:33:3a:ce:b3:7c:4b:48:2f:
                    c2:f2:26:0e:76:d4:34:07:5d:e6:28:46:14:13:8c:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:45:5B:BE:FD:AE:8A:32:F3:9D:42:A9:BE:B6:1C:FA:70:EF:7D:C5
            X509v3 Authority Key Identifier:
                keyid:18:F9:7D:09:8E:4E:BD:06:10:D5:4F:48:D5:B3:E1:AA:74:3A:20:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/2F8B8552548511E7B1D84713C4F9AE02/GPl9CY5OvQYQ1U9I1bPhqnQ6ICk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:ee:81:84:a0:bd:78:33:d7:6c:f9:fd:de:d4:ee:0e:28:
         4c:36:66:66:57:5a:4f:b3:8f:31:e1:84:7e:9e:e0:f7:68:8c:
         f8:53:ee:d2:c2:66:28:2e:24:d3:8a:5e:f6:44:aa:c7:c8:72:
         3d:8c:6b:f2:65:eb:03:7c:78:58:a9:d9:21:82:20:a3:29:1a:
         25:92:90:3a:d8:49:8f:44:75:52:99:b0:a3:23:a7:1d:14:0d:
         db:20:b2:1e:c1:a2:9d:cb:19:ab:d3:7f:c2:3e:4a:a5:df:8d:
         38:6a:19:19:0e:a7:81:29:7d:16:77:6d:cb:b3:99:d3:3f:68:
         1f:80:e3:2a:eb:b5:fa:ed:4d:64:08:9e:7c:d4:91:17:82:42:
         73:88:e6:b6:c9:9c:f1:58:dd:5e:df:6d:01:56:9c:2f:e7:e8:
         f2:3c:e4:b7:b5:d0:f6:b1:a0:98:5c:b0:ab:b6:ad:c6:bb:3f:
         a1:95:e0:b1:57:47:14:3b:62:7c:6d:70:e5:7d:c6:69:cc:b1:
         3c:63:1b:d8:e6:56:8a:4b:30:08:73:18:7a:52:08:a9:4e:92:
         42:58:32:91:e1:76:b2:36:b6:42:41:d6:a8:dc:61:20:f6:0e:
         a9:f1:fe:c3:b9:3b:66:29:7c:bc:fc:3d:fa:9b:cd:a1:5c:de:
         90:b9:a4:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENEMDkxMTAvBgNVBAUTKDE4Rjk3RDA5OEU0RUJEMDYxMEQ1NEY0OEQ1QjNFMUFB
NzQzQTIwMjkwHhcNMjYwNjEyMTYxNjU0WhcNMjYwNjE5MTYxNjU0WjAYMRYwFAYD
VQQDEw02YTJjMzBmNy02M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo5T1FuFE3bsgbVYS3JfKbjPgUa/qCRgeu1pn2KcUO3f635LqsRc9OWYsH1n/
3mtiLBW36/E5wWUl/bB8d9yi0sm0hYdhP8X15BwOyObYZ5nlWQlA96lo2u9lb/rT
i2OBAQiEwQw6y/2S4RGG1+et7eYt1ilX0nQbhrSzai6P2UT+2v6uGzYqRuST9cT/
QpKZlJSV5OzzwcuqXtRXhdTnxHmk80K1viGnrP+6as+lmSe4n0x0hsdkIId0vvdS
aRHUHubx04D2wn4jr00q0SREcEVc4mnixXahOqvIyzGR3+R8SRfBYd9JMzrOs3xL
SC/C8iYOdtQ0B13mKEYUE4wBUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxFW779
rooy851Cqb62HPpw733FMB8GA1UdIwQYMBaAFBj5fQmOTr0GENVPSNWz4ap0OiAp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS8yRjhCODU1MjU0
ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZRWVExVTlJMWJQaHFuUTZJ
Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dQbDlDWTVPdlFZUTFVOUkxYlBocW5RNklDay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0QwOS8yRjhCODU1MjU0ODUxMUU3QjFEODQ3MTNDNEY5QUUwMi9HUGw5Q1k1T3ZR
WVExVTlJMWJQaHFuUTZJQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhpvugYSgvXgz12z5/d7U7g4oTDZmZldaT7OPMeGEfp7g92iM+FPu0sJmKC4k
04pe9kSqx8hyPYxr8mXrA3x4WKnZIYIgoykaJZKQOthJj0R1UpmwoyOnHRQN2yCy
HsGincsZq9N/wj5Kpd+NOGoZGQ6ngSl9Fndty7OZ0z9oH4DjKuu1+u1NZAiefNSR
F4JCc4jmtsmc8VjdXt9tAVacL+fo8jzkt7XQ9rGgmFywq7atxrs/oZXgsVdHFDti
fG1w5X3GacyxPGMb2OZWikswCHMYelIIqU6SQlgykeF2sja2QkHWqNxhIPYOqfH+
w7k7Zil8vPw9+pvNoVzekLmkKQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:22 2026 by rpki-client