Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
File:                     gqdp3XRsgx9MTbKdamXeCNatle0.mft (raw, json)
Hash identifier:          mcHaG6ytW1VlBO45BQsYa6CLscN16t+jla22X+Pe6b8=
Subject key identifier:   86:87:51:1D:56:C2:F3:23:2D:15:74:D4:6A:BF:0F:CF:BB:D8:CC:21
Authority key identifier: 82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED
Certificate issuer:       /CN=A91921AE/serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
Manifest number:          011B
Signing time:             Mon 11 May 2026 06:02:55 +0000
Manifest this update:     Mon 11 May 2026 06:02:54 +0000
Manifest next update:     Mon 18 May 2026 06:02:54 +0000
Files and hashes:         1: gqdp3XRsgx9MTbKdamXeCNatle0.crl (hash: dwFOGKVdZIJonLP33k6SrXLkeSsfFif0lRc16bnQAtg=)
                          2: DC76F25EBCFD11EFAF51D253C4F9AE02.roa (hash: fKB1wROuPCiOAs2iiH8T0iD/fbxHacro6VdzGc7766Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=82A769DD746C831F4C4DB29D6A65DE08D6AD95ED
        Validity
            Not Before: May 11 06:02:54 2026 GMT
            Not After : May 18 06:02:54 2026 GMT
        Subject: CN=6a01710e-3895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:be:49:01:89:75:e2:be:50:d1:a5:13:43:
                    b6:a9:f6:13:87:73:75:3a:56:47:ef:9c:b5:38:14:
                    9e:fd:c6:ef:cb:64:58:13:c7:b4:7a:ed:a1:aa:83:
                    bf:00:bc:f2:20:85:8d:45:c0:d4:d2:8f:3b:c1:d8:
                    59:db:33:b2:ad:e7:35:98:d4:5b:75:10:ab:61:4d:
                    c0:90:b5:c8:19:84:f4:c4:ac:ea:ac:d3:05:6d:61:
                    e2:cf:90:44:cc:74:74:d3:e3:b5:52:0f:1a:58:c8:
                    c1:32:03:6d:5b:37:94:77:80:e7:a5:6f:86:9e:54:
                    7f:73:d1:61:08:23:ce:7d:1d:83:a5:fc:c5:82:5c:
                    a3:32:71:98:81:b3:cc:4c:b9:ae:2c:99:7c:14:ec:
                    cc:e3:9c:0c:35:b0:5b:d3:47:99:44:dd:f2:43:ec:
                    e6:4c:47:2e:1d:0f:79:0b:61:ea:59:c0:44:ca:a4:
                    11:e9:03:29:bc:e1:7d:b5:eb:0a:e8:3b:b4:ad:99:
                    52:64:15:1d:40:e1:50:f2:a0:9e:cb:d2:a9:00:53:
                    13:fa:a8:6d:d2:ee:17:42:b7:66:81:68:23:3b:8a:
                    eb:9d:90:1e:b9:90:a2:27:bc:d8:54:9b:33:50:dd:
                    5b:b6:25:15:f9:2d:5a:c9:02:17:a0:53:53:16:b2:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:87:51:1D:56:C2:F3:23:2D:15:74:D4:6A:BF:0F:CF:BB:D8:CC:21
            X509v3 Authority Key Identifier:
                keyid:82:A7:69:DD:74:6C:83:1F:4C:4D:B2:9D:6A:65:DE:08:D6:AD:95:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqdp3XRsgx9MTbKdamXeCNatle0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/74912B2CAC7311EFA3CBD14AC4F9AE02/gqdp3XRsgx9MTbKdamXeCNatle0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:80:de:9c:bf:c0:c6:d8:d7:88:cc:17:f4:70:fc:0f:7f:df:
         e9:02:13:ee:6f:f6:b0:3b:c0:66:04:80:94:66:fd:75:fa:ad:
         a8:cf:b0:5d:45:80:93:d6:de:43:32:40:0e:cf:93:10:8d:9a:
         21:1b:24:4d:99:bb:99:b2:4a:74:a2:9a:d0:e7:38:07:e3:7c:
         cd:be:cf:bd:a2:a5:f7:77:1b:06:87:c8:9d:e2:3b:ce:1a:9f:
         d6:e8:81:be:1c:70:83:f7:b7:5c:1d:4e:35:52:65:68:1b:9d:
         d4:9d:9e:13:73:97:60:0d:79:6f:9c:d9:82:dd:8c:54:a7:af:
         43:aa:c3:57:39:6c:49:c4:2e:0e:c2:3f:0c:6d:71:2c:3b:7e:
         cb:9c:c5:72:26:59:3b:1c:8c:37:38:54:b0:0b:99:88:5b:22:
         ca:b1:07:9f:8b:f0:40:92:fa:9d:d6:2d:b9:c8:0d:d1:c5:c7:
         96:7b:b8:fa:7e:d3:8f:5f:77:78:f1:a9:de:2a:e5:43:c7:64:
         24:ba:fd:e6:9b:de:8e:a4:68:20:93:bd:6c:02:28:e8:cc:fb:
         33:e4:f7:c7:10:bf:8c:8b:2b:b7:a7:bc:f3:b1:8a:cf:14:de:
         65:a7:96:fa:40:5f:19:e5:94:40:82:1b:85:e4:fe:4a:8f:a4:
         3a:c3:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:09 2026 by rpki-client