Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
File:                     GOzmKe7ztqJpbrqzSz-wLviouIc.mft (raw, json)
Hash identifier:          4/xNp2LddeqRQyhDAMpnNKAV9PVeS/2P2xl7uyLEAYE=
Subject key identifier:   72:2B:77:FB:64:86:74:D7:DF:D1:32:62:0B:00:E0:12:3A:BB:60:F6
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Certificate issuer:       /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
Manifest number:          62
Signing time:             Wed 25 Mar 2026 07:13:02 +0000
Manifest this update:     Wed 25 Mar 2026 07:13:01 +0000
Manifest next update:     Wed 01 Apr 2026 07:13:01 +0000
Files and hashes:         1: GOzmKe7ztqJpbrqzSz-wLviouIc.crl (hash: zgq1BnXao2/yWgoMJDqLzJrCFIRhBhpIh7Vy4O/guhg=)
                          2: 9F82952895C511F0B89BD26BC4F9AE02.roa (hash: ry4N7sAZwt8kT9uayuzaqrICuRZLC5xmKbp22xFFGBM=)
                          3: 8201D598AD9B11F080BD6B82C4F9AE02.roa (hash: p3ZoCtddv0DD9A8CHYHtHKNtwBeASX7tWihiJwJ4AOY=)
                          4: 0A86FD7C95E011F0B2B5CE77C4F9AE02.roa (hash: 0j15PdC5hkiOJdDKSJMqwGQCvyEX5XT7bkPvF+W+KeI=)
                          5: 0A2469F095E011F0B2B5CE77C4F9AE02.roa (hash: yWuTHUjFQQOeDngy2y5CDj4FKIF2JeyL3URzK/Qg4Dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
                          rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
        Validity
            Not Before: Mar 25 07:13:01 2026 GMT
            Not After : Apr  1 07:13:01 2026 GMT
        Subject: CN=69c38afe-a75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:3e:a3:e1:7a:d3:8f:06:ce:4b:a4:91:c2:
                    8d:36:6e:17:e9:31:89:4b:07:88:e2:ca:13:2d:87:
                    8c:f8:50:23:d4:eb:ac:f9:70:78:bb:3f:af:d1:d5:
                    c2:ae:33:65:47:94:dc:d2:01:b2:51:3a:57:4d:46:
                    48:d3:fb:8a:fd:6e:10:f2:64:8a:0f:4a:af:2b:01:
                    c0:e3:7d:87:a4:d5:95:f4:52:d1:d1:7d:2e:d9:cc:
                    f5:42:8e:35:80:eb:16:80:e9:70:c0:5c:6d:8f:54:
                    d7:00:11:98:9d:cf:b8:a5:be:96:32:06:ae:8c:b1:
                    a7:d7:18:56:ad:11:14:65:d2:1b:77:7f:04:51:1d:
                    5c:5f:0a:2e:c1:bd:c8:ea:bb:56:d6:10:60:e1:ca:
                    64:5a:7a:f3:15:83:82:09:08:02:a7:6a:fc:4e:e0:
                    c2:d6:a9:11:f1:3c:44:6a:8e:d6:7d:8f:cd:af:b0:
                    39:f0:27:20:52:be:81:20:63:9b:9f:18:ec:e8:a0:
                    92:6c:d6:42:13:9f:99:2f:00:bd:fd:36:3b:ba:0b:
                    b4:02:a2:c4:68:51:b7:78:36:83:75:ae:99:db:24:
                    90:ca:d1:03:90:78:c5:ef:f7:3b:4b:f8:44:03:42:
                    62:a2:5d:7f:ef:48:9e:93:42:24:85:23:2d:48:e0:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2B:77:FB:64:86:74:D7:DF:D1:32:62:0B:00:E0:12:3A:BB:60:F6
            X509v3 Authority Key Identifier:
                keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:54:90:83:15:65:f5:d7:8a:5d:eb:8b:b5:79:c4:49:16:d7:
         c2:e0:bc:4f:6e:f7:fe:10:be:0e:38:bd:dd:e3:86:70:8d:a1:
         a4:8e:be:04:f0:fe:72:38:26:34:a1:9f:8a:92:6f:af:7a:a6:
         29:32:b7:f1:3c:3f:f9:ec:04:e5:b5:f2:cf:3b:c4:7b:ec:da:
         dd:d9:58:1a:29:14:49:83:1d:b3:ba:0d:2f:8b:18:10:13:89:
         1b:e5:e8:c8:14:48:9c:9e:9b:66:33:cc:9c:f6:76:5d:c3:a5:
         33:c1:05:6b:48:14:9a:6d:e4:8b:74:ac:76:7d:e8:2c:65:a8:
         8c:b0:f4:ad:8e:81:47:91:c2:94:64:74:e8:ed:3d:a6:16:b1:
         59:3a:e6:96:34:fe:08:98:2f:0c:c3:d2:3b:70:5a:12:a3:d9:
         ce:1a:98:e9:bd:3f:7c:1c:ed:13:ab:a5:92:14:94:b5:1f:ee:
         5b:7d:51:3e:b8:ab:11:9d:4c:4b:b2:2f:82:00:83:ad:2e:e8:
         bb:3e:2a:71:7d:6e:e6:19:6f:68:75:f1:2b:96:c3:5b:16:40:
         d5:bc:e6:52:56:46:49:41:b9:11:de:5e:6b:35:1c:78:35:0d:
         33:74:40:f6:c9:91:d7:e1:20:e1:9e:b1:02:64:ef:67:4d:9f:
         63:e9:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:27 2026 by rpki-client