Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
File:                     GaNgWeMX739niFziUq7bkZWPXmg.mft (raw, json)
Hash identifier:          Z8pZq3UhIGIdQTIs1wgLPlYmD4cszvCGelVGMPRixow=
Subject key identifier:   6C:0E:32:75:72:12:C2:76:70:44:35:DE:DE:43:86:FD:F9:FA:41:25
Authority key identifier: 19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68
Certificate issuer:       /CN=A917D857/serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
Manifest number:          01DE
Signing time:             Fri 27 Mar 2026 02:56:57 +0000
Manifest this update:     Fri 27 Mar 2026 02:56:57 +0000
Manifest next update:     Fri 03 Apr 2026 02:56:57 +0000
Files and hashes:         1: GaNgWeMX739niFziUq7bkZWPXmg.crl (hash: DU5dkRSLf9xN6O7TK7ZUJ28P2dJkyttcQk4wv65TTmA=)
                          2: BD9131004E2811EEBC65304DC4F9AE02.roa (hash: A4DYwCMJtHqL8FOrLyHdgaT304qseoK7Vf9HSfcF82c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl
                          rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D857, serialNumber=19A36059E317EF7F67885CE252AEDB91958F5E68
        Validity
            Not Before: Mar 27 02:56:57 2026 GMT
            Not After : Apr  3 02:56:57 2026 GMT
        Subject: CN=69c5f1f9-1809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:7b:b5:ad:5c:a8:7a:04:63:b8:cb:0e:15:
                    15:df:af:a0:22:8c:ae:ff:ab:45:a7:6d:2e:7d:f0:
                    b2:0f:c6:b8:70:5e:2d:f3:67:f0:ef:e4:09:4b:60:
                    e3:5f:91:de:78:f8:c6:30:3f:54:1f:50:62:0b:36:
                    8e:4d:fb:85:56:d1:37:1b:66:4a:65:9f:2a:3a:60:
                    7f:e7:fd:0b:83:bf:a1:5b:12:b7:98:10:e1:a0:1a:
                    a4:4f:07:38:63:12:6d:61:d8:07:1e:97:d0:ba:75:
                    ee:9c:f5:5d:48:2a:62:bb:aa:4b:88:1f:10:23:46:
                    38:c1:b0:ae:47:2f:e5:15:74:75:88:56:fd:e8:93:
                    de:ca:1b:aa:db:b8:cb:d3:51:35:cf:f1:3f:9a:e5:
                    8a:9b:f2:6a:d9:80:62:2e:ff:f3:87:a8:8c:83:31:
                    e2:da:85:51:fb:41:4b:f5:12:03:89:67:1f:a9:e9:
                    86:46:22:ac:55:90:f2:43:cc:d6:6f:89:87:8e:51:
                    e8:9a:14:20:ea:20:6d:ca:b0:b0:06:de:71:d3:a1:
                    6f:2b:4d:7c:81:07:e9:b2:f3:6b:f6:e2:50:6f:70:
                    63:7e:9c:d1:04:2a:0c:6b:5c:97:56:7f:ef:86:6b:
                    a1:0a:60:44:c9:23:e3:17:b3:13:fc:57:57:5c:9e:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:32:75:72:12:C2:76:70:44:35:DE:DE:43:86:FD:F9:FA:41:25
            X509v3 Authority Key Identifier:
                keyid:19:A3:60:59:E3:17:EF:7F:67:88:5C:E2:52:AE:DB:91:95:8F:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GaNgWeMX739niFziUq7bkZWPXmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D857/61C5CDB84E2811EE94FDB34CC4F9AE02/GaNgWeMX739niFziUq7bkZWPXmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ca:0d:7e:ae:19:37:88:62:69:f4:37:8d:3e:c0:92:a5:fb:
         a0:1b:c8:83:97:08:e5:66:9c:68:a8:62:b0:01:c7:f2:5a:2b:
         58:3b:6d:0e:c6:55:f1:09:05:cf:7f:d4:fe:b3:57:f8:cf:48:
         94:ad:ca:3d:e7:e4:84:38:d2:3e:41:3f:77:eb:71:94:17:d5:
         32:4c:30:6c:c0:78:93:f2:79:5d:ea:e7:f2:6e:df:87:a3:d9:
         4d:62:2c:74:4e:75:98:51:dd:1e:44:37:b4:34:09:76:c4:37:
         2e:6f:76:7f:5d:bb:f8:cf:c4:ae:de:bb:71:60:0a:1d:df:03:
         8d:44:65:d9:62:07:8e:7f:57:20:63:26:86:14:22:03:c3:2b:
         96:74:90:58:81:25:bf:73:17:4b:d2:33:33:19:73:87:9d:86:
         22:e5:55:be:bb:00:45:e3:9d:a9:4d:bb:22:2d:0c:43:0f:f1:
         ac:ce:1a:e4:1e:a2:63:9a:68:9b:e0:3a:b5:7a:f9:7a:80:2e:
         81:6c:1a:08:28:28:69:7e:db:51:7f:9e:d5:8a:e0:75:8b:d8:
         f0:c2:1c:cb:cc:69:9d:7a:87:c9:fd:88:64:32:ea:4e:13:00:
         d7:11:5d:21:ed:18:9b:29:54:ff:da:13:7d:da:83:67:9d:e1:
         57:49:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:29 2026 by rpki-client