Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
File:                     GnpQ1SFaklkRBAawtpNvrhTqfYM.mft (raw, json)
Hash identifier:          FK3ZYru4qksAHRrMxiO6ZBQwW0T92zHUW+8hMOF+mrI=
Subject key identifier:   A4:91:D7:1C:CB:5E:27:3B:28:DD:4C:46:02:F4:7D:8C:56:81:E9:06
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Certificate issuer:       /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial:       0575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
Manifest number:          056D
Signing time:             Tue 24 Mar 2026 23:01:17 +0000
Manifest this update:     Tue 24 Mar 2026 23:01:16 +0000
Manifest next update:     Tue 31 Mar 2026 23:01:16 +0000
Files and hashes:         1: GnpQ1SFaklkRBAawtpNvrhTqfYM.crl (hash: c3LN2F8KnozbTXM1+MBw0hgj29SqcihxUTHcK+ySkVU=)
                          2: 6458CE6420F711EC896F8D43C4F9AE02.roa (hash: v2hZ59ja2UU2McZ0+iZGCOqhJExzjUDbBoc152csioY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
                          rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1397 (0x575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91944F8, serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
        Validity
            Not Before: Mar 24 23:01:16 2026 GMT
            Not After : Mar 31 23:01:16 2026 GMT
        Subject: CN=69c317bd-1ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8b:e5:e0:5c:c3:19:40:a2:5d:4d:f5:5c:4f:
                    be:73:12:e6:29:be:b7:b3:dd:4c:6d:19:b2:4a:91:
                    0f:ad:9d:d3:76:97:ea:d6:91:d2:c9:be:e0:6f:ed:
                    05:3b:35:f9:0f:7e:41:c9:f4:1b:0a:dc:e8:17:67:
                    d5:58:86:8f:b4:ad:24:48:54:63:1e:19:3e:58:17:
                    d0:8f:7e:be:9a:51:49:b1:11:19:35:f1:e4:f2:76:
                    c0:4d:ae:6c:8b:fc:52:83:5f:ea:41:f2:bd:ce:3a:
                    1b:3e:71:cf:23:ba:76:e5:69:85:ab:51:d8:b0:32:
                    39:17:b0:85:27:75:bb:bf:cf:88:ec:2e:95:1f:91:
                    36:d0:8a:a2:3a:67:bb:1a:50:31:d5:79:c1:91:99:
                    7c:23:14:6f:44:5a:59:ae:ce:69:4d:0d:ae:95:06:
                    74:6c:c2:c0:aa:49:c8:08:76:c2:55:08:ba:7a:9b:
                    f7:3c:f6:f4:77:66:6b:04:c2:40:f7:7a:7f:3a:0f:
                    12:20:57:c1:11:1e:00:30:04:bb:ff:1c:cc:57:46:
                    cb:c5:9f:e0:b6:9c:af:53:da:c3:d1:40:d2:24:21:
                    de:25:84:85:0d:a7:05:7c:3d:86:fb:b3:19:bb:65:
                    4e:93:10:c4:7b:71:a2:29:11:43:a2:3d:6e:82:6e:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:D7:1C:CB:5E:27:3B:28:DD:4C:46:02:F4:7D:8C:56:81:E9:06
            X509v3 Authority Key Identifier:
                keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2e:b7:47:c0:10:db:e6:95:43:42:e8:af:0d:89:25:10:d3:
         e5:ea:28:ff:32:e0:8c:a4:4f:17:a7:4f:27:85:79:52:ca:02:
         a7:bf:2f:b3:c9:57:28:c0:18:15:21:2f:36:e8:6d:ae:25:b5:
         08:82:1f:78:28:0f:40:83:b2:2e:9b:ab:49:ea:0c:c4:cf:33:
         92:ba:8e:57:7e:e2:07:4c:73:23:ea:cc:5b:1b:37:71:d2:32:
         11:dd:d6:ef:da:bb:1e:16:2b:6d:15:0d:5d:91:0f:b7:5e:de:
         2c:72:9d:ce:4d:ff:ac:f9:2d:f5:c3:c9:ca:f1:63:50:df:52:
         e6:18:c5:88:14:9b:4d:63:2a:90:dd:ec:91:a6:1d:8f:0e:7a:
         11:b5:68:f1:0a:38:f5:85:28:1a:3a:c1:6c:d8:31:fc:54:f0:
         d1:cf:3d:04:ad:66:ab:45:e5:4d:a7:6d:f4:ac:53:24:67:e0:
         41:68:10:76:f8:27:f6:b3:f2:47:7a:12:e9:b8:6d:7e:28:0d:
         2e:c7:58:31:cc:04:8f:cb:28:38:17:25:d5:5a:56:fe:24:b9:
         47:d2:f4:b6:89:ca:22:dd:f8:fd:5a:99:07:c7:70:46:10:2c:
         b4:18:d2:f2:db:4c:7d:ce:d0:f8:25:4f:26:40:f9:8e:3d:8b:
         25:09:53:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:28 2026 by rpki-client