Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
File:                     Ga4x-VSBe65iCMNyEQi46P-LP7w.mft (raw, json)
Hash identifier:          lV0cxxJn0T3u/a4IZKXo91u5k0lWFPfFyIMa9bs/gU0=
Subject key identifier:   73:79:3C:8F:FF:7C:B1:90:B7:CC:74:74:9C:DA:D5:B1:4D:D3:7B:38
Authority key identifier: 19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC
Certificate issuer:       /CN=A91EEB30/serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
Certificate serial:       04DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
Manifest number:          04D6
Signing time:             Sat 18 Apr 2026 23:45:01 +0000
Manifest this update:     Sat 18 Apr 2026 23:45:00 +0000
Manifest next update:     Sat 25 Apr 2026 23:45:00 +0000
Files and hashes:         1: Ga4x-VSBe65iCMNyEQi46P-LP7w.crl (hash: 9QQUrLxHGUvX847lqgtePbCvfaeofdvyNCTi1I9BTnU=)
                          2: A87BC510622E11EC92E1870CC4F9AE02.roa (hash: ILh6gBpWmKd6LulzCB0yMdg50i5ZW69Oilb8luyg8cA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl
                          rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEB30, serialNumber=19AE31F954817BAE6208C3721108B8E8FF8B3FBC
        Validity
            Not Before: Apr 18 23:45:00 2026 GMT
            Not After : Apr 25 23:45:00 2026 GMT
        Subject: CN=69e4177c-8680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:14:6f:5a:32:c2:44:ba:71:d4:3a:dd:ca:
                    7a:d6:84:11:ec:0e:3c:fe:22:83:27:ee:8a:22:f3:
                    c4:0b:eb:f1:f0:93:a5:ed:28:b0:e6:e8:64:2b:22:
                    37:25:64:7d:58:7d:1f:5c:9d:8b:fc:16:44:bb:1e:
                    77:23:48:66:15:a4:13:ff:cd:dc:5b:5f:57:86:ba:
                    16:92:8c:43:79:c3:61:21:06:b6:7c:a8:76:ae:22:
                    bf:23:d8:7a:70:26:bd:5e:05:4d:b9:97:5d:fa:81:
                    74:21:dc:10:7b:2f:18:4f:a3:36:7d:f9:4b:dc:db:
                    10:93:b7:d3:92:75:15:78:72:3a:9e:76:6e:fb:9a:
                    42:a6:ad:48:84:5f:36:ae:65:b1:4f:20:11:e4:76:
                    d4:61:2c:63:01:1f:c9:43:ad:31:26:be:a3:84:15:
                    bb:23:cb:8f:c2:95:d7:c5:68:67:d0:ad:3f:b8:21:
                    6a:a8:b3:77:e4:1e:cf:dc:37:20:d2:b3:d7:1b:b4:
                    04:c6:7b:2f:ce:03:b6:97:f0:4c:de:2b:11:bb:7f:
                    5a:2a:d2:e3:e0:e1:30:dd:2c:4f:68:ea:84:b7:1f:
                    52:60:28:eb:1f:ea:15:ef:3c:9c:47:54:94:ca:36:
                    30:58:9f:d2:a2:11:34:c0:70:71:b6:36:f5:bc:05:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:3C:8F:FF:7C:B1:90:B7:CC:74:74:9C:DA:D5:B1:4D:D3:7B:38
            X509v3 Authority Key Identifier:
                keyid:19:AE:31:F9:54:81:7B:AE:62:08:C3:72:11:08:B8:E8:FF:8B:3F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ga4x-VSBe65iCMNyEQi46P-LP7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB30/9DCEB638622C11EC818EA00BC4F9AE02/Ga4x-VSBe65iCMNyEQi46P-LP7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:36:e8:2a:fe:e3:df:75:b9:72:ec:4e:f6:2d:09:62:9a:72:
         3e:a5:da:e6:41:be:e3:6c:1a:e9:2b:a6:eb:4a:7a:bf:18:9c:
         57:fd:6a:d7:79:89:14:77:ea:4e:f7:ef:b3:71:95:62:27:07:
         8b:d5:d3:8e:32:65:1f:08:7e:0e:31:0e:8d:dc:f9:de:3a:62:
         65:1a:98:d3:03:8d:92:aa:5e:42:53:82:f8:70:3b:ab:ed:5e:
         94:98:2a:1a:73:18:bd:f0:4a:a0:6a:35:74:e4:fb:2d:75:a4:
         e5:ec:e7:a6:44:8e:64:93:04:3e:d4:06:ba:d6:44:a7:2e:58:
         42:e2:76:09:f7:65:59:f3:db:4b:3d:11:fe:e0:9c:d2:ef:34:
         94:d8:61:cc:e8:ae:89:c4:57:d6:64:4a:9d:5a:4e:e0:0d:9d:
         93:7e:30:b2:5e:c0:f4:4e:35:9c:17:41:4c:8e:62:84:21:e9:
         21:0c:0e:e1:58:ba:59:93:2f:63:b3:64:cf:12:b9:25:87:b6:
         59:72:94:1c:89:d8:9e:75:5d:45:d9:b7:c4:c1:50:dc:62:ea:
         09:ff:b3:4c:fe:6c:e0:07:5d:85:94:7f:3f:f3:e8:cf:4a:e8:
         80:f9:1c:b5:ad:b7:6f:91:82:29:bb:e5:e6:5d:35:c5:34:82:
         f1:88:55:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVCMzAxMTAvBgNVBAUTKDE5QUUzMUY5NTQ4MTdCQUU2MjA4QzM3MjExMDhCOEU4
RkY4QjNGQkMwHhcNMjYwNDE4MjM0NTAwWhcNMjYwNDI1MjM0NTAwWjAYMRYwFAYD
VQQDEw02OWU0MTc3Yy04NjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmdAUb1oywkS6cdQ63cp61oQR7A48/iKDJ+6KIvPEC+vx8JOl7Siw5uhkKyI3
JWR9WH0fXJ2L/BZEux53I0hmFaQT/83cW19XhroWkoxDecNhIQa2fKh2riK/I9h6
cCa9XgVNuZdd+oF0IdwQey8YT6M2fflL3NsQk7fTknUVeHI6nnZu+5pCpq1IhF82
rmWxTyAR5HbUYSxjAR/JQ60xJr6jhBW7I8uPwpXXxWhn0K0/uCFqqLN35B7P3Dcg
0rPXG7QExnsvzgO2l/BM3isRu39aKtLj4OEw3SxPaOqEtx9SYCjrH+oV7zycR1SU
yjYwWJ/SohE0wHBxtjb1vAVSBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHN5PI//
fLGQt8x0dJza1bFN03s4MB8GA1UdIwQYMBaAFBmuMflUgXuuYgjDchEIuOj/iz+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUIzMC85RENFQjYzODYy
MkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2NWlDTU55RVFpNDZQLUxQ
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dhNHgtVlNCZTY1aUNNTnlFUWk0NlAtTFA3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUIzMC85RENFQjYzODYyMkMxMUVDODE4RUEwMEJDNEY5QUUwMi9HYTR4LVZTQmU2
NWlDTU55RVFpNDZQLUxQN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhTboKv7j33W5cuxO9i0JYppyPqXa5kG+42wa6Sum60p6vxicV/1q13mJFHfq
Tvfvs3GVYicHi9XTjjJlHwh+DjEOjdz53jpiZRqY0wONkqpeQlOC+HA7q+1elJgq
GnMYvfBKoGo1dOT7LXWk5eznpkSOZJMEPtQGutZEpy5YQuJ2CfdlWfPbSz0R/uCc
0u80lNhhzOiuicRX1mRKnVpO4A2dk34wsl7A9E41nBdBTI5ihCHpIQwO4Vi6WZMv
Y7NkzxK5JYe2WXKUHInYnnVdRdm3xMFQ3GLqCf+zTP5s4AddhZR/P/Poz0rogPkc
ta23b5GCKbvl5l01xTSC8YhVfQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:43:55 2026 by rpki-client