Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
File:                     GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft (raw, json)
Hash identifier:          JxpcJlkV8jTc2wVCuNjKHKqLUKlj571Wx5hclTldMUk=
Subject key identifier:   3B:DC:7F:4C:84:A6:DF:20:C7:C1:DA:46:97:2E:E0:F3:F9:8C:F2:10
Authority key identifier: 18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C
Certificate issuer:       /CN=A91A09DE/serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
Certificate serial:       04E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
Manifest number:          04DD
Signing time:             Tue 24 Mar 2026 23:28:40 +0000
Manifest this update:     Tue 24 Mar 2026 23:28:39 +0000
Manifest next update:     Tue 31 Mar 2026 23:28:39 +0000
Files and hashes:         1: GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl (hash: H+uKDsYbZyll2CHNcP7OHrYPsdh6zfslu62w3TPrWlk=)
                          2: C7EAFB5AB62011EC9060CD0FC4F9AE02.roa (hash: GqrG1fpjl/FS6/QcFeouUYo3Nekrspl6hyOuNMZABaQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl
                          rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09DE, serialNumber=183988FC0DEE9DBB81115E82BFDC95412561413C
        Validity
            Not Before: Mar 24 23:28:39 2026 GMT
            Not After : Mar 31 23:28:39 2026 GMT
        Subject: CN=69c31e27-2ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:e7:d9:55:a9:ac:e3:98:16:06:af:5b:ea:
                    09:19:c9:88:23:e5:d8:2f:89:24:f1:eb:d8:30:5a:
                    38:1d:da:98:3d:d9:1a:2d:77:2a:5c:5e:e1:1e:d2:
                    97:81:a9:09:6b:67:b2:04:35:fc:d0:f3:66:87:c7:
                    87:b3:57:d7:7a:31:78:14:f4:e3:08:7f:6a:49:69:
                    a5:79:be:ae:c5:44:64:25:85:5b:98:f1:bc:87:62:
                    ed:31:67:3f:a7:2e:cb:11:41:ec:de:7e:d5:5d:86:
                    c0:0d:49:84:fe:1d:af:3e:06:ba:dc:a2:06:ce:a3:
                    f6:5d:85:d6:1e:69:e0:29:27:52:ae:20:aa:6d:93:
                    61:94:c0:9e:19:e8:07:cc:a8:39:a4:57:eb:17:3b:
                    23:65:75:b9:82:32:b4:41:36:0e:45:eb:01:36:d6:
                    86:d2:cf:c5:d2:48:3a:72:3b:d9:9f:93:a7:f7:96:
                    fb:ef:11:4e:27:77:62:e7:b0:4c:73:e0:e2:c3:24:
                    4e:04:9b:bd:15:8d:6d:f4:f7:34:d0:0c:27:2c:3b:
                    fc:d4:46:26:70:10:2b:51:b6:c7:e9:f0:b4:02:e3:
                    de:8a:7c:2f:0c:2d:4b:c9:bc:e9:fd:49:ec:11:7a:
                    21:be:fe:c0:a3:d8:e7:ef:9f:0c:e0:ab:6d:2d:5b:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DC:7F:4C:84:A6:DF:20:C7:C1:DA:46:97:2E:E0:F3:F9:8C:F2:10
            X509v3 Authority Key Identifier:
                keyid:18:39:88:FC:0D:EE:9D:BB:81:11:5E:82:BF:DC:95:41:25:61:41:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GDmI_A3unbuBEV6Cv9yVQSVhQTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09DE/8B32075C597E11EC9A673D0DC4F9AE02/GDmI_A3unbuBEV6Cv9yVQSVhQTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:3e:e3:61:58:64:bd:e5:45:3e:94:00:56:ea:36:d0:5f:2a:
         65:1b:52:f7:fb:2c:6b:95:a9:34:0a:e4:36:25:7f:16:42:09:
         df:0a:d3:c7:94:76:82:42:55:80:5e:25:86:3f:c3:8d:96:2c:
         b9:a2:2e:34:99:f6:cb:fd:e8:41:8c:00:cf:f1:86:04:5b:95:
         d9:88:5f:de:5e:94:58:55:00:5b:52:11:c8:ce:87:05:d8:8f:
         46:94:b9:af:bf:9c:4d:ed:d3:3c:bb:40:88:32:b2:d1:1d:4c:
         dd:ff:82:f1:70:1e:7c:ea:6c:10:b6:84:4a:f4:bb:7b:7b:73:
         a5:de:38:91:7b:c3:ea:77:f0:66:0d:6c:8a:35:87:99:c2:60:
         de:40:67:fd:3c:ea:37:e0:14:48:aa:ea:e7:7f:5a:a6:7f:79:
         7e:7f:6d:95:8a:a9:c8:6f:24:6f:cf:d3:dd:2c:14:59:a8:33:
         ab:84:8e:21:8e:03:0f:28:95:3e:9b:55:1f:1e:5a:00:c3:54:
         50:f4:d3:92:63:45:2f:20:fc:24:a9:8c:d4:9a:3d:a2:bc:70:
         3c:75:9f:55:61:21:11:9e:32:fd:6f:16:80:f0:99:1c:46:a7:
         cf:e0:61:20:53:b9:6a:1c:7f:2d:b0:a0:fb:86:ab:a0:9f:cc:
         11:75:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:36 2026 by rpki-client