Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
File:                     Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft (raw, json)
Hash identifier:          CwTmAnUUTf2Yh+NTAfoh6Hw+2bbA/oSMSgfsoLLgp1s=
Subject key identifier:   65:A9:31:15:81:F3:6C:FA:0A:55:2F:F7:8F:9E:EA:D4:02:D4:F9:66
Authority key identifier: 1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A
Certificate issuer:       /CN=A91518AF/serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
Certificate serial:       0780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
Manifest number:          0777
Signing time:             Tue 24 Mar 2026 21:22:07 +0000
Manifest this update:     Tue 24 Mar 2026 21:22:07 +0000
Manifest next update:     Tue 31 Mar 2026 21:22:07 +0000
Files and hashes:         1: Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl (hash: GuMyYqIQSbIJf+Lv/+SzwgIQZ/n3z8Q7vGocmrdNRJA=)
                          2: C1C296F45A7111EBB1700884C4F9AE02.roa (hash: lzR6pyvl0y5+kPNyylXFhv+PwYmB2saEThM6foq0LbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl
                          rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91518AF, serialNumber=1A6934CAB5213D8B43FD54358938DD1F31A1690A
        Validity
            Not Before: Mar 24 21:22:07 2026 GMT
            Not After : Mar 31 21:22:07 2026 GMT
        Subject: CN=69c3007f-c918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:c0:4e:e6:01:ae:fa:b1:98:79:38:de:3e:
                    a9:e8:6c:b9:0a:a4:11:93:7a:c9:d0:85:f6:ad:50:
                    4d:ac:fe:39:d5:be:47:08:54:f5:39:be:a7:9a:40:
                    c2:5f:a0:8b:20:dd:54:81:c0:c6:0d:ae:f3:1d:d8:
                    6e:2b:84:b6:0d:50:e3:4b:ac:b1:ac:46:8e:3e:2a:
                    60:90:79:01:a8:69:9e:a1:bd:5c:f2:19:8d:e3:69:
                    d3:10:cb:fc:87:aa:cc:d7:07:f3:fc:ba:78:13:91:
                    4b:87:bb:5a:a1:13:c1:e6:02:7a:d8:ba:d5:84:12:
                    18:c8:e6:83:d8:9b:1b:10:f9:a6:83:1c:36:25:d0:
                    da:bd:01:b0:99:fd:7a:5e:68:30:9d:4e:87:47:06:
                    69:94:af:d7:d3:81:09:e4:54:23:d3:46:b9:de:5a:
                    35:e4:9a:f1:c1:ef:ec:36:c7:37:e6:b0:b4:b1:80:
                    8e:c5:63:37:64:6f:c3:6a:5d:95:09:22:f5:c6:01:
                    67:3a:8c:ee:ff:b3:f2:9f:1d:ae:11:83:9b:f6:41:
                    3b:42:9a:c5:ad:62:2c:f7:d7:2c:50:44:c7:af:68:
                    3c:af:5c:07:46:06:25:21:f5:19:f0:14:99:e7:65:
                    7a:b1:8e:06:38:8f:f0:2a:fa:5c:10:a0:ee:13:6c:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A9:31:15:81:F3:6C:FA:0A:55:2F:F7:8F:9E:EA:D4:02:D4:F9:66
            X509v3 Authority Key Identifier:
                keyid:1A:69:34:CA:B5:21:3D:8B:43:FD:54:35:89:38:DD:1F:31:A1:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91518AF/D792F47456C011EB8BC35B74C4F9AE02/Gmk0yrUhPYtD_VQ1iTjdHzGhaQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5d:07:18:b5:43:f3:c5:c2:78:a4:25:91:a5:87:49:78:02:
         01:ec:2a:e5:80:9e:d8:48:dd:6a:02:2c:93:da:22:f5:63:46:
         25:cb:ee:67:b2:34:6c:48:51:e7:ab:78:d9:13:00:3f:76:07:
         58:70:82:f7:03:f3:33:74:2a:e3:8f:47:8a:17:21:3f:f3:4d:
         5b:af:99:80:e6:2c:fa:9b:81:e8:71:24:08:03:48:ee:ed:bf:
         51:35:c3:06:f8:14:ad:b2:da:b4:b1:43:ba:77:eb:9f:da:6e:
         3e:3c:91:70:ff:fd:fc:98:f1:b0:93:36:b7:b7:7a:51:ad:ab:
         13:02:f0:f7:e6:2c:1f:1e:49:80:df:33:bc:a4:ac:87:a0:8e:
         3c:e9:f5:6c:a2:9c:42:3e:7b:79:4e:94:79:00:b1:dd:51:dc:
         f7:6f:f0:94:73:45:70:21:c4:f6:35:95:68:a1:b6:54:b7:b8:
         f2:f7:9a:5a:eb:c8:07:9d:9c:a8:13:d5:5e:e7:57:e6:84:e4:
         fd:12:9f:fc:03:f9:c8:f5:26:53:c6:f0:f7:ef:c9:32:01:d0:
         75:14:6a:04:56:ba:f9:22:73:97:d0:4f:b7:b4:9f:b0:2b:14:
         05:4f:93:cf:7d:7a:ed:bd:fe:be:1d:43:1f:30:ae:65:07:bb:
         1f:52:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:56:17 2026 by rpki-client